Automating Compliance for Cloud Image Building

Thursday, Aug 15 9:45 AM - 10:45 AM Room 103

Description

There are too many possibilities for base images in cloud environments and not enough time to validate which ones fulfill all of my requirements. Worse yet, I know that I have policies set by my security team that my infrastructure will be beholden to. So now what? I built an open source policy engine and image generator to implement directly into my build pipelines. I can start with any base image, apply my security policies that are verified by my security team, and now have a baseline that I can rapidly scale my infrastructure from.