Top Secret Cloud Native Security Lessons

Discover essential cloud native security lessons in this 58-minute conference talk. Explore the foundations of software development and infrastructure deployments using technologies like Kubernetes, Docker, and Istio. Gain insights into real-world security lessons, the CNCF-backed Kubernetes Security Audit, and recent Kubernetes security disclosures. Learn how to identify potential weaknesses in cloud native approaches and implement effective security measures. Delve into topics such as role-based access control, API secrets, privilege escalation, network policies, and security tools like Open Policy Agent. Understand the importance of secure-by-default configurations and staying updated with the latest security practices. By the end, acquire the knowledge needed to enhance the security of your cloud native systems and make informed decisions about implementing technologies like Istio for improved protection.