DevOps In The World of Serverless - PureSec @ Fullstack Radar Day
Download as PPTX, PDF0 likes133 views
PureSec, established in 2016, specializes in serverless security and is a pioneer in the serverless security category. The document highlights the rapid adoption of serverless architectures, with a significant percentage of AWS clients utilizing these technologies, and introduces PureSec's offerings, including a security platform for serverless applications. It emphasizes the evolving DevOps landscape and the importance of integrating infrastructure as code in serverless environments.
DevOps In The World of Serverless - PureSec @ Fullstack Radar Day
- 1. DevOps In The World Of Serverless
- 2. About Us ● 15 years of experience in cyber security in software development and management positions ● Leads PureSec’s engineering to build a brand new product in the brand new Serverless world ● Works In PureSec since early days ● Develops intensively in Serverless architecture for the last 2 years ● AWS certified and B.Sc in Computer Science
- 3. PureSec is 100% Serverless
- 5. Serverless Is The Future
- 6. 6 Serverless Architectures Adoption • By far, the fastest growing cloud segment • 21-46% of AWS clients utilize serverless. and growing* * 1. Cloud Foundry Foundation 2018 report (46%) 2. RightScale 2018 state of the cloud report (21%) 3. SumoLogic State of Modern Applications and DevSecOps in the Cloud 2018 (29%).
- 8. ״Serverless Is a State of Mind״ Ben Kehoe
- 9. HowTo DevOps in the Serverless World?
- 10. PureSec - Security for Serverless • Established in 2016 • Serverless security category designer • First to market with SSP - Serverless Security Platform SERVERLESS SECURITY PIONEER RECOGNIZED THOUGHT LEADER Cybersecurity veterans and thought leaders SUPERSTAR TEAM
- 11. Controls the perimeter of each function in order to prevent malicious input from entering Controls function behavior in order to ensure it works as intended Code & configuration analysis to detect & mitigate misconfigurations and known vulnerabilities During CI/CD When Invoked Deep Visibility During Execution Static Analysis Serverless App Firewall Behavioral Protection Security Posture Management
- 12. 100% SERVERLESS
- 13. Limited list of AWS serverless managed services Not Only Functions ● Serverless ≠ FaaS (Function as a Service) ● Servicefull applications that stitch together additional resources AWS FargateAWS Lambda DynamoDB Amazon Aurora Serverless API Gateway Simple Queue Service Step FunctionsAppSync
- 15. A New Approach to DevOps
- 16. IaC is part of the application
- 17. Infrastructure As Code ● Manage technology stack through software ● Saved in version control system ● Developers become more involved in defining configuration ● Ops teams get involved earlier in the development process AWS CloudFormation
- 19. IaC Frameworks For Serverless
- 20. PureSec Pure IaC ● We use services which are not managed by the cloud provider ● For example, Auth0 as a User Identity service
- 21. Pure IaC
- 22. Fully automated deployments ● Testing environment = production environment ● Every developer can work on his own environment ● Disaster recovery
- 23. Going Beyond Cloud Provider Resources ● AWS CloudFormation Custom resources ● Custom provisioning logic ● You are responsible for the resource lifecycle
- 24. Lambda-backed Custom Resource DEPLOY INTERACTIONS CODE CODE REPOSITORY Lambda-backed Custom Resources More about custom resources
- 25. Summary ● Serverless is here to stay ● DevOps world is going to be changed ● You need to be prepared
- 26. We are hiring! ● Are you living and breathing cloud computing & cyber security? ● Do you share our belief that Serverless is the future of cloud computing? ● careers@puresec.io