Build for massive scale & security with the HashiCorp Cloud Platform

In this session, explore how to build scalable, secure, and manageable cloud infrastructure while enabling efficient engineering workflows using the HashiCorp Cloud Platform (HCP). Discover how to use HCP for infrastructure and security in public cloud projects through deep conceptual and technical insights. The session includes a reference codebase and live demo. Learn foundational principles and patterns for infrastructure and security lifecycle management that addresses process and people challenges and helps to upskill your engineering team to support rapid business and platform evolution.

Transcript

1. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
2. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Build for massive scale & security with the HashiCorp Cloud Platform Rosemary Wang DOP301-S (she/her) Chief Developer Advocate HashiCorp J. Cole Morrison (he/him) Senior Developer Advocate HashiCorp
3. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Infrastructure and security lifecycle management is the practice of changing infrastructure and security resources.
4. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Actions for lifecycle management create read update delete
5. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Building blocks of ILM/SLM Systems of record Self-service As code Immutability Standardization Modularization Monitoring Ephemerality Remediation Access Control Observability ILM SLM read create update delete scale
6. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Monitoring & observability
7. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Read Monitoring Observability Audit… Changes to infrastructure System access Identify… Drift Vulnerabilities Validate… Policy conformance Artifact provenance
8. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Demo 1. Audit infrastructure changes and identify drift 2. Audit system access 3. Monitor service status AWS Cloud Runtime Infrastructure Services Application on EC2 Infrastructure Lifecycle Management Security Lifecycle Management 1 2 3
9. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Modularization & access control
10. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Create Modularization Access Control Isolate… Changes to parts of system Least privilege access Decouple… Infrastructure dependencies Identity from access policy
11. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Demo 1. Decouple infrastructure through modules 2. Define least privilege access 3. Decouple identity from access policy AWS Cloud Runtime Infrastructure Services Application on EC2 Infrastructure Lifecycle Management Security Lifecycle Management 2 1 3
12. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Standardization & remediation
13. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Update Standardization Remediation Develop… Consistent application and infrastructure deployments Baseline for detecting anomalous behavior Improve… Predictability of changes and rollbacks Speed of fixes
14. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Demo 1. Standardize deployment and operations 2. Standardize access control 3. Provide just-in-time access for fixes 4. Establish baseline for service registration and status AWS Cloud Runtime Infrastructure Services Application on EC2 Infrastructure Lifecycle Management Security Lifecycle Management 2 3 1 4
15. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Immutability & ephemerality
16. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Delete Immutability Ephemerality Change… Resource by creation and deletion Time-to-live of resources to reduce attack surface Supports… Lower risk refactoring patterns Resiliency patterns for short-lived resources
17. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Demo 1. Create new virtual machine with new AMI 2. Create new credentials and delete old ones 3. Create new targets when old ones removed AWS Cloud Runtime Infrastructure Services Application on EC2 Infrastructure Lifecycle Management Security Lifecycle Management 1 2 3
18. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. As code, self-service, and systems of record
19. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Scale As code Self-service Systems of record Builds… Configuration or policy for automation Abstraction for complexity of knowledge Inventory of infrastructure, secrets, identities, and policies Enables… Orchestration across systems Anyone to extend system to support business needs Visibility and orchestration across systems at scale
20. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Demo 1. Enable self-service of application deployment and operations with internal developer platform 2. Maintain infrastructure self- service and system of record with infrastructure as code 3. Establish application system of record with service discovery 4. Establish access and credentials system of record with secrets management 5. Establish access system of record with secure remote access AWS Cloud Runtime Infrastructure Services Application on EC2 Infrastructure Lifecycle Management Security Lifecycle Management 1 2 4 5 3
21. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Summary
22. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Building blocks of ILM/SLM Systems of record Self-service As code Immutability Standardization Modularization Monitoring Ephemerality Remediation Access Control Observability ILM SLM read create update delete scale
23. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Learn more • Demo repository: github.com/jcolemorrison/hashistack-on-aws • Sign up for HashiCorp Cloud Platform: hashi.co/cloud • Tutorials: developer.hashicorp.com/tutorials
24. © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Thank you! © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Please complete the session survey in the mobile app Rosemary Wang @joatmon08 J. Cole Morrison @jcolemorrison