Observability and Security: A Match for Cloud Native

Cloud native approaches are increasingly enabling decentralizing the operational and management responsibilities that flowed through centralized teams.

While this has the benefit of empowering product and engineering teams to ship faster, it also drives a need to similarly change our approaches to security and compliance workflows. Luckily these cloud native patterns also drive us to bake observability into our applications and infrastructure through metrics, distributed tracing and other approaches.

In this session, Ilan Rabinovitch will discuss how this monitoring data and the observability graph can help us better understand and detect security attack vectors, as well as serve as early indicators and signals of security related events.

Transcript

1. Observabilty, DevOps & Security:
 A Match Made in Cloud Native Ilan Rabinovitch
 ilan@datadoghq.com
2. $ finger ilan@datadog [datadoghq.com] Name: Ilan Rabinovitch Role: VP, Product & Community 
 Interests: * Monitoring and Observability * Open Source & Free Software * Community Event Planing
3. • SaaS based infrastructure and app monitoring • Open Source Agent • Metrics, Traces, Logs and now Synthetics • Processing many trillions of data points per day • Intelligent Alerting & Insightful Dashboards • Integrate with everything….. Datadog Overview
4. TW: @irabinovitch @datadoghq
6. TW: @irabinovitch @datadoghq 10 Ways to Shoot Yourself in the Foot w/ Kubernetes Rob Boll (Lead, Compute Engineering) Wednesday May 22 • 16:45 - 17:20 Kubernetes Networking at Scale Laurent Bernaille (Staff Engineer, Compute) Thursday, May 23 • 16:45 - 17:20 Kanary - Automated and Integrated Canary Testing Cédric Lamorinière (OSS Engineer) Tuesday, May 21 • 14:00 - 14:35 Datadog at KubeCon
7. jobs.datadoghq.com
8. DevOps Defined The Ultimate Definition 2014 CAMS Damon Edwards and John Willis DevOps Day LA
9. DevOps Defined The Ultimate Definition 2014 Culture A M S Damon Edwards and John Willis DevOps Day LA
10. Culture “organizations which design systems ... are constrained to produce designs which are copies of the communication structures of these organizations” - Melvin E. Conway
14. DevOps Defined The Ultimate Definition 2014 Culture Automation M S Damon Edwards and John Willis DevOps Day LA
16. Source: http://bit.ly/1qFylWK
17. “Cloud native technologies empower organizations to build and run scalable applications in modern, dynamic environments….” Cloud Native Definition
18. … to allow engineers to make high-impact changes frequently and predictably with minimal toil. Cloud Native Definition (continued)
19. Ideation / Design Development Operations/Deployment Retirement?
20. Operations/Deployment Ideation / Design Development Retirement? CI/CD
21. Operations/Deployment Ideation / Design Development Retirement? CI/CD Infrastructure as Code
22. Operations/Deployment Ideation / Design Development Retirement? CI/CD Infrastructure as Code
23. Operations/Deployment Ideation / Design Development Retirement? CI/CD Infrastructure as Code Autoscaling
24. DevOps Defined The Ultimate Definition 2014 Culture Automation Metrics S Damon Edwards and John Willis DevOps Day LA
31. “… enable loosely coupled systems that are resilient, manageable, and observable ..” Cloud Native Definition (continued)
32. Baked in observability…
38. Observation Points
44. Source: http://bit.ly/1YxJ7Jy
45. DevOps Defined The Ultimate Definition 2014 Culture Automation Metrics Sharing Damon Edwards and John Willis DevOps Day LA
46. Sharing Looping Back on Culture Describe the problem as your “enemy” not each other Learn Together
47. Sharing Looping Back on Culture Describe the problem as your “enemy” not each other Learn Together
48. Sharing Looping Back on Culture Describe the problem as your “enemy” not each other Learn Together
49. Sharing Using and Sharing the same metrics and measurements across teams is key to avoiding misunderstandings.
52. DevSecOps: The Cloud Native Approach 2019 Culture Automation Metrics Sharing Damon Edwards and John Willis DevOps Day LA