The Path to Zero-Touch Production: Securing Cloud Infrastructure Access

Explore a 48-minute conference talk that delves into implementing zero-touch production environments in cloud-native organizations. Learn how to minimize human interaction with production infrastructure while maintaining operational efficiency, based on Google's proven approach. Discover practical strategies for identifying why and how engineers interact with production environments, and implement secure alternatives using AWS access primitives. Master the implementation of Just-In-Time (JIT) access, temporary credentials, and automated operational scripts to reduce human error and security risks. Gain actionable insights for incrementally transitioning your organization toward a zero-touch production model, regardless of your current security maturity level. Drawing from experience building Infrastructure Security at Figma and other tech companies, understand the collaborative approaches needed to enhance security while maintaining operational effectiveness in cloud-native architectures.