Securing a Managed Jupyter Notebook Platform Using Istio and OPA
Explore how to secure a managed Jupyter notebook platform using Istio and Open Policy Agent (OPA) in this informative conference talk. Discover the Bloomberg Data Science Platform's approach to providing a multi-tenant environment for AI engineers to develop, train, deploy, and update models in production. Learn about the integration of Jupyter notebooks with data stores and ML services to accelerate the machine learning development cycle. Gain insights into enforcing user isolation and segmenting outgoing traffic while maintaining user convenience. Understand the implementation of Istio, WebAssembly (WASM), and OPA for user access authorization, as well as the use of Istio's egress gateway and Calico's network policies for L4-L7 traffic control. Acquire valuable knowledge on building ML infrastructure with robust security requirements, presented by Yao Weng and Yifan Zhang from Bloomberg LP.