Cloud Native Security & Policy Management

Improved security is a key benefit of cloud-native technologies, because of immutability and segregation of resources in containers, microservices, serverless and cloud infrastructure. The assumption that applications are inherently more secure in containers without adding additional layers of security is a misconception. In this session, we will discuss some key threats in a cloud-native platform. Misconfigurations being a leading cause of security incidents, and Kubernetes configurations are complex to secure and manage at scale. We will also discuss a solution to this challenge of managing configurations via policies and share “Kyverno”, a Kubernetes native policy management solution, and will demonstrate how Kyverno policies can help secure and automate complex configurations, using a policy as code approach.