Securing the cloud involves more than configuring a service with best practices and monitoring it with a tool. The future of Cloud Security lies in the convergence of Cloud Engineering and DevSecOps, starting left by establishing a program where all outcomes are consistent, secure, and repeatable. Starting with the initial design and progressing to security as code enforcement, defining patterns, aligning visibility, alerting, and response will promote security by default, leading to consistent outcomes, higher levels of alert fidelity, and positioning security as a partner with teams rather than a roadblock.
Presented by Booz Allen Hamilton
