AWS, Immutable Infrastructure, and PCI

Transcript

1. AWS, IMMUTABLE INFRASTRUCTURE, AND PCI
 Slides: https://speakerdeck.com/pcorliss/
2. WHO IS THIS ? • Philip Corliss • @pcorliss (Gmail, Twitter, Github) • Cheese Enthusiast • Engineering Manager • Braintree
3. BraintreePayments.com
4. Where We Were/Are • Physical Datacenters • Level 1 PCI DSS Compliant Service Provider
5. AWS, The Natural Choice • PCI 1 Firewalls, VPCs • PCI 9 Physical Access • PCI 10.1 Audibility
6. Immutable Infrastructure • PCI 6.1 Security Patches • PCI 11.5 File Integrity
7. Scoped Access • PCI 7 Restrict Access
8. CVVs • PCI 3.2 Do Not Store CVVs
9. Secrets & KMS
10. Greenfield Development
11. S3 Isn’t Near-Line Storage PCI 10.7 Retain audit trail history for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from backup).
12. VPCs • PCI 4: Encrypt Data Across Public Networks
13. Huge Wins
14. Evolving Platform
15. WHO’S THIS GUY? • Philip Corliss • @pcorliss (Gmail, Twitter, Github) • Cheese Enthusiast • Engineering Manager • Braintree