Build a Secure Developer Platform Using Argo, Istio and Vault

Slide 1

Slide 1 text

Build a Secure Developer Platform Using Argo, Istio and Vault Jona Apelbaum & Alessandro Vozza

Slide 2

Slide 2 text

Slide 3

Slide 3 text

Slide 4

Slide 4 text

4 | Copyright © 2022 01 02 03 04 05 06 Developer Portals Pimp your IdP with Service Mesh Multi-{tenant|cluster|cloud} Automate everything w/ GitOps + Demo Secure your workloads + Demo Wrap up Agenda Slide – 6 Items

Slide 5

Slide 5 text

5 | Copyright © 2022 Solo.io - Pick the right Cloud-Native building blocks Well Funded ($135M), $1B Valuation Satisﬁed Customers (135% Renewals) Cloud-native Technology Leadership Cloud-native Education Leadership Uniﬁed Platform for API Gateway | Multi-Cloud | Zero-Trust | Observability

Slide 6

Slide 6 text

Slide 7

Slide 7 text

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

Slide 11

Slide 11 text

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

Slide 17

Slide 17 text

Slide 18

Slide 18 text

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

Slide 24

Slide 24 text

Slide 25

Slide 25 text

Slide 26

Slide 26 text

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Slide 29

Slide 29 text

29 | Copyright © 2022 What is Zero Trust • Zero Trust (ZT) is a set of security principles that treats every component, service and user of a system continuously exposed to and potentially compromised by a malicious adversary • Zero Trust Architecture (ZTA) is an enterprise’s cybersecurity plan that utilises ZT concepts and encompasses component relationships, workflow planning, and access policies • Zero Trust Enterprise (ZTE) is the network infrastructure and operational policies that are in place for an enterprise as a product of zero trust architecture plan

Slide 30

Slide 30 text

30 | Copyright © 2022 Principles of Zero Trust • Assume no implicit or explicit trusted zone in network • Identity verification strictly enforced for all connections • Access Control strictly enforced for communication between apps and servers • Risk profiles, generated in realtime are used in resource access control • All sensitive data is encrypted both in transit and at rest • All events are continuously monitored, collected, stored and analysed to assess compliance with security policies • Policy management and distribution is centralised https://www.nist.gov/itl/executive-order-14028-improving-nations-cybersecurity