Clean Up on Aisle Cloud - Leveraging Compliance-as-Code for Cloud Security

Explore how Boeing tackles compliance and security challenges in cloud-native environments in this 26-minute conference talk. Learn about the complexities large companies face when adopting cloud technologies, including managing new data sets and resources. Discover how Boeing leverages compliance-as-code with cloud-native and open-source tools, particularly the CNCF project Cloud Custodian, to address issues such as unauthorized Windows 2012 image launches, accidental public S3 Bucket configurations, and ensuring EKS cluster compliance with NIST standards. Gain insights into streamlining solutions for compliance and security misconfigurations in public cloud environments, and understand the importance of maintaining proper security measures while embracing cloud innovation.