Upgrade to Pro — share decks privately, control downloads, hide ads and more …

AWS, Immutable Infrastructure, and PCI

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Philip Corliss Philip Corliss
September 01, 2016
Programming
120
0

AWS, Immutable Infrastructure, and PCI

Avatar for Philip Corliss

Philip Corliss

September 01, 2016

More Decks by Philip Corliss

See All by Philip Corliss
Building a Platform on AWS
Avatar for Philip Corliss pcorliss
1
140
Developer Happiness - Building Systems & Tools
Avatar for Philip Corliss pcorliss
0
130
xss
Avatar for Philip Corliss pcorliss
1
350

Other Decks in Programming

See All in Programming
Inside Stream API
Avatar for Yuichi.Sakuraba skrb
1
730
AI 時代のソフトウェア設計の学び方
Avatar for 増田 亨 masuda220
PRO
29
13k
Honoでのサプライチェーン侵害対策 〜 3つのライブラリに学ぶ
Avatar for Yusuke Wada yusukebe
6
1.3k
New "Type" system on PicoRuby
Avatar for pocke pocke
1
960
JJUG CCC 2026 Spring: JSpecify で実現する Kotlin フレンドリーな Java API 設計
Avatar for ternbusty ternbusty
1
180
ユニットテストの先へ：テスト技法で要求・仕様を整理するJava開発実践 / Beyond_Unit_Testing_Practical_Java_Development_Techniques_for_Organizing_Requirements_and_Specifications
Avatar for SHIMANE, Yoshikazu shimashima35
0
410
Performance Engineering for Everyone
Avatar for Elena Tanasoiu elenatanasoiu
0
160
CSC307 Lecture 17
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
320
TSKaigi Night Talks 2026_TypeScriptでサプライチェーンの整合性を型に閉じ込める
Avatar for ギークプラス ソフトウェア事業部 geekplus_tech
0
390
Language Server 使ってる？ 〜VSCode と Zed の場合〜 / Are you using a Language Server? ~For VS Code and Zed~
Avatar for NAGATA Hiroaki handlename
0
790
Make SRE Operations Easier with Azure SRE Agent
Avatar for KAMEGAWA Kazushi kkamegawa
0
6.5k
OSもどきOS
Avatar for Sora Arakawa arkw
0
570

Featured

See All Featured
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
220k
Writing Fast Ruby
Avatar for Erik Berlin sferik
630
63k
We Are The Robots
Avatar for Honza Javorek honzajavorek
0
250
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
sira's awesome portfolio website redesign presentation
Avatar for ElsiraPls elsirapls
0
280
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
460
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
85
9.5k
Jess Joyce - The Pitfalls of Following Frameworks
Avatar for Tech SEO Connect techseoconnect
PRO
1
170
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
2.1k
RailsConf 2023
Avatar for Aaron Patterson tenderlove
30
1.5k
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
28
2.7k
Evolving SEO for Evolving Search Engines
Avatar for Ryan Jones ryanjones
0
220

Transcript

  1. AWS, IMMUTABLE INFRASTRUCTURE, AND PCI
 Slides: https://speakerdeck.com/pcorliss/

  2. WHO IS THIS ? • Philip Corliss • @pcorliss (Gmail,

    Twitter, Github) • Cheese Enthusiast • Engineering Manager • Braintree

  3. BraintreePayments.com

  4. Where We Were/Are • Physical Datacenters • Level 1 PCI

    DSS Compliant Service Provider

  5. AWS, The Natural Choice • PCI 1 Firewalls, VPCs •

    PCI 9 Physical Access • PCI 10.1 Audibility

  6. Immutable Infrastructure • PCI 6.1 Security Patches • PCI 11.5

    File Integrity

  7. Scoped Access • PCI 7 Restrict Access

  8. CVVs • PCI 3.2 Do Not Store CVVs

  9. Secrets & KMS

  10. Greenfield Development

  11. S3 Isn’t Near-Line Storage PCI 10.7 Retain audit trail history

    for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from backup).

  12. VPCs • PCI 4: Encrypt Data Across Public Networks

  13. Huge Wins

  14. Evolving Platform

  15. WHO’S THIS GUY? • Philip Corliss • @pcorliss (Gmail, Twitter,

    Github) • Cheese Enthusiast • Engineering Manager • Braintree