Managing privileged access inside cloud environments is completely different from the corporate environment. We love Linux because it?s so fast to build and deploy web apps but the minute you want to put any kind of centralized security or control over that environment you risk running DevOps into the ground. The fact is DevOps needs elevated access like root and sudo to deploy code and fix issues as quickly as possible. However we also need a centralized way to manage that access so security policies are enforced on sprawling cloud hosts/containers. In this session we?ll talk about moving from heavy-handed access control to lightweight agile access guardrails that are built specifically for DevOps.

Back to BSidesCT 2019 video list