Scaling Security GROW WITHOUT COMPROMISING SECURITY 

 Scaling mitchellh 

 Scaling mitchellh 

 Scaling mitchellh Developer Operator Production 

 DevOps mitchellh Developer Operator Production 

 DevOps mitchellh Developer Operator Production Security? 

 DevOps mitchellh Developer Operator Production Security? 

 Scaling Anything mitchellh 1. Do less 2. Do it faster 3. Do more in parallel 

 Scaling Security How do you empower people 
 to build secure systems? mitchellh 

 Empowering Security mitchellh 

 Empowering Security • Developers: A powerful, idiomatic API • Operators: A pure-software solution that is easy to maintain and can run on commodity hardware • Security Engineers: Strict usage control, audit trails, 
 clear threat models mitchellh 

Vault mitchellh 

 Developers: An API for Security • HTTP (over TLS), JSON • Secret storage • Encryption services • Certificate creation and verification mitchellh 

 Operators: Its Just Software • Pure software, no hardware requirement • Stateless (pluggable data stores) • Active/standby HA • Read-scalability with replication (enterprise) mitchellh 

 Security Engineers: Fort Knox • N-Person Unseal • Audit trails • Access Control • Clearly defined threat model and architecture • Open Source, Audited, Compliance, feature support mitchellh 

 Scaling 
 Security mitchellh 

 Scaling Security mitchellh Developer Operator Production Security 

 Scaling Security mitchellh Developer Operator Security Core Security, Requirements, Practices, Audits Infrastructure Security, Network Security Application Security, Data Security 

 Scaling Security: Sec Engineer • Allowed behavior • Encryption algorithms • Key hierarchies, 
 rotation policies • Audit logs mitchellh Core Security, Requirements, Practices, Audits 

 Infrastructure Security, Network Security Scaling Security: Ops • Network layout/config, routing tables, etc. • OS security, user accounts, file permissions, etc. • Infrastructure creation, change process mitchellh 

 Application Security, Data Security Scaling Security: Dev • TLS connections • API auth/authz • Data encryption • Password request and usage mitchellh 

 Scaling Security Trust but verify at every level mitchellh 

Scaling Security GROW WITHOUT COMPROMISING SECURITY