Save Your Services from Sneaky Snoops With SPIFFE
Learn how SPIFFE and SPIRE can secure cloud-native services by eliminating hardcoded credentials, enhancing authentication for workloads like PostgreSQL and AWS, and reducing DevSecOps workload.
Help! My Cluster Is On The Internet - Container Security Fundamentals
Explore container and Kubernetes security fundamentals, covering supply chain and runtime security. Learn practical strategies to protect clusters and prevent vulnerabilities using real-world examples and essential tools.
Episode IV - A New Network Service Mesh
Explore Network Service Mesh: a revolutionary approach to Cloud Native networking that simplifies complexity, enables multi-cloud connectivity, and integrates with SPIFFE and OPA for enhanced identity and policy support.
Open Policy Agent Introduction
Introduction to Open Policy Agent (OPA), a versatile policy engine for Kubernetes and cloud-native ecosystems. Learn about its features, use cases, and recent updates in OPA and OPA Gatekeeper.
Open Policy Agent Deep Dive
Explore Open Policy Agent's new features, integration capabilities, and use cases in cloud-native environments. Learn about partial evaluation and upcoming developments from project maintainers.
Securing Your Healthcare Data with OPA
Explore OPA-driven security for healthcare data, focusing on policy-enabled apps, least-privilege access, and real-world examples of protecting sensitive information in microservice architectures.
Managing Multi-Cluster - Multi-Tenant Kubernetes with GitOps
Modernize deployments using GitOps in multi-cluster/multi-tenant environments. Learn FluxCD implementation, CI tools integration, and best practices for consistent and secure Kubernetes management.
Handling Container Vulnerabilities with Open Policy Agent
Automate vulnerability handling in container security using Open Policy Agent. Learn to apply custom policies for efficient decision-making and streamline the process of addressing critical issues.
Collection is not Detection - Sec Ops in a Cloud Native Environment
Optimizing cloud-native security operations: Strategies for efficient log collection, modern tooling, and rapid response in transitioning from on-premises to cloud environments.
Introduction to Open Policy Agent
Learn about Open Policy Agent (OPA), a versatile policy engine for enforcing rules across various systems. Explore core features, integrations, and use cases in cloud-native environments.
A Tale of a Meshi Kafka - Securing Kafka Deployment When Istio Is Used
Explore securing Kafka deployments with Istio, addressing authentication, authorization, and encryption challenges. Learn to implement external authorization and simplify policy management using open-source tools.
Designing Secure Applications in the Cloud
Learn essential security patterns for cloud applications to protect against threats, safeguard sensitive data, and control access. Explore gatekeeper, valet key, and federated identity approaches for robust cloud security.
Building Effective Attack Detection in the Cloud
Learn effective cloud attack detection strategies, key data sources, and validation techniques using Leonidas, an open-source framework for automated detection capability testing in cloud environments.
Cartography - Using Graphs to Improve and Scale Security Decision-Making
Explore Cartography, an open-source tool for visualizing and securing cloud-native assets. Learn how to improve decision-making, track changes, and understand security risks across platforms.
No More Moats - Protecting Your Cloud Native Infrastructure with Zero Trust
Explore Zero Trust security for cloud native infrastructure using SPIFFE, SPIRE, and open-source tools. Learn practical architectures and implementation strategies from Fortune 500 examples.
Fortifying Microservice Security with SPIRE and OPA
Learn how to enhance microservice security using SPIRE for authentication and OPA for authorization. Discover scalable solutions for reliable service-to-service and end-user access control in complex environments.
Using Open Policy Agent to Meet Evolving Policy Requirements
Explore how Open Policy Agent enables rapid development and deployment of evolving security policies for Kubernetes platforms, meeting diverse compliance requirements across commercial and government environments.
Customizing OPA for a "Perfect Fit" Authorization Sidecar
Explore customizing Open Policy Agent (OPA) for enhanced authorization: high-performance gRPC API, Kafka decision logging, and OAuth2 Rego functions. Tailored solutions for improved security and integration.
Secure Policy Distribution With OPA
Explore secure policy distribution using OPA's signed bundles. Learn how to verify authenticity, prevent corruption, and reduce attack surfaces in policy enforcement systems.
DevOps All the Things - Creating a Pipeline to Validate Your OPA Policies
Learn to streamline OPA policy validation using unit, mock, and integration testing for Kubernetes clusters, featuring a live demo of applying changes to ephemeral clusters and deploying via GitOps.
Open Policy Agent Intro
Introduction to Open Policy Agent (OPA) and Gatekeeper: Learn about policy enforcement for cloud-native technologies, featuring demos and updates on latest features.