Shift Left Security Workshop

Workshop #1 Details: Shift-Left Security

McAfee Enterprise and AWS Solution Architects will present an in-depth, hands-on session to improve your security posture for your applications running in  IaaS/PaaS environments:

• Learn how to build a layered security model that reducing risk cloud workloads, containers, and services you depend on for orchestration, network, and storage.
• Ensure Kubernetes and the overall cloud environment both meet security best practices and standards.
• Understand the nature of the CI/CD pipeline and the burden cloud-unfriendly security practices can put on developers.

In our hand-on scenario you’ll walk in the shoes of an infrastructure engineer working on applications running on AWS. We provide you with Continuous Integration / Continuous Delivery (CI/CD) tools like CodeCommit, CloudFormation and Jenkins. In the lab, we’ll integrate Jenkins with McAfee Enterprise MVISION Cloud to scan the CloudFormation template for security misconfigurations. Some examples of the tasks you’ll get to do:

• Find security misconfigurations with a containerized web application and surrounding infrastructure (Cloud Security Posture Management).
• Identify sensitive data exposed in Amazon Simple Storage Service (Amazon S3) Buckets (Data Loss Prevention).
• Learn how to help developers push code securely using a CI/CD process using Kubernetes, Jenkins, and Git repositories.
• Explore the “Shift Left” method to transparently add security checks to code BEFORE it gets pushed to production.

Space is limited for this workshop so RSVP soon to save your seat!

Workshop Prerequisites

1. Have a fundamental working knowledge and experience with AWS and related technologies including EC2 instances, S3 storage, text file configuration, Linux shells, etc.
2. Be familiar with information security concepts such as Data Loss Prevention (DLP), Security Frameworks such as PCI, HIPAA, or GDPR. Experience with products in the area are not required.
3. Have a roll-up-the-sleeves approach. While we do provide a lab guide, these workshops were designed so that you need to problem solve (and have fun) to complete the exercises.