Zero trust CI/CD pipeline – Amit Dube – XConf Europe 2022
When it comes to enterprise security, zero trust should be the only acceptable solution. As part of this talk, I will be describing the WHAT, WHY and HOW model around zero trust. WHAT is zero trust? WHY is it essential for every enterprise? HOW to achieve it in an automated CI/CD pipeline? The example pipeline will be a GitHub pipeline to deploy infra to GCP using Infrastructure as Code (IAC) — Terraform. Security is no more a choice. It's an essential part of any implementation. This talk will help developers to write security first CI/CD pipelines — an addition to their skillset. This talk will also encourage architects to keep security at the forefront while taking architectural decisions. And last but not the least, the security guys will have interesting take aways to bring back to their organization to start thinking about zero trust for future implementation.
http://www.thoughtworks.com/xconf