logo

Panel Discussion: Securing the Golden Path: Adding Guardrails for Developers Without Getting in Their Way!

2022-10-24

Authors:   Aradhna Chetal, Kapil Bareja, Jim Bugwadia, Anil Karmel, Elizabeth Vasquez Alban


Summary

The conference presentation discusses the importance of building a golden path for Cloud Native organizations to ensure security and compliance. The path should be unique to each organization and based on the type of data they are trying to protect and their regulatory requirements. Automation and observability are key components of the golden path.
  • Building a golden path is crucial for Cloud Native organizations to ensure security and compliance
  • The path should be unique to each organization and based on their data and regulatory requirements
  • Automation and observability are key components of the golden path
The speaker emphasized the importance of observability in building a golden path. By automating and building templates or policies, organizations can easily identify if their applications are meeting security and compliance standards. This observability also allows security teams to identify which policies are failing more often and how they can better enable developers to build secure environments.

Abstract

Is it possible to increase both agility and security? We all know that as organizations are increasingly driven to deliver faster, security often gets overlooked. So, how can organizations adopting cloud native best practices balance the growing complexity of securing modern applications against the ever increasing organizational drivers for speed? In this session, the panelists will discuss how security and operations teams can collaborate to provide developers with a “secure golden path” that promotes security best practices without compromising agility. The panel discussion will cover how the adoption of cloud native systems impacts security, the cloud native lifecycle, and highlight organizational best practices for adopting cloud native systems. The panelists will also provide practical tips and guidance on how cloud native systems can offer composable and programmable options for policy as code and continuous compliance across the software delivery pipeline to create automated guardrails for developers.

Materials: