AWS Zero Trust

Aaron is a DevOps engineer, solution architect, and all-around cybersecurity expert. He works for a global cybersecurity services company, is a member of the Cloud Security Alliance, and is a co-author of the up-and-coming Software Defined Perimeter Specification Version 2. Since last time (episode 18), Aaron was 1.5 years overseas supporting the Army and moved back to the U.S. last year to join Appgate as a Senior Solutions Architect.

Topics of Discussion:

[4:11] What types of things has Aaron observed that programmers don’t typically gravitate towards, but they need to give some attention to in just the overall IT and security space?

[9:42] Should developers be thinking about zero trust just for their production environments, or should they be thinking about it for their own working environments, as well?

[13:30] Is there a standard set of tags that someone could use from day one?

[15:15] A core tenet of Zero Trust is Enterprise Identity Governance.

[17:35] Do the cloud providers already have this mechanism of automatically discovering via tags and/or is there something that needs to be added to what they provide?

[22:36] What are the pros and cons of working with smaller vs. bigger companies?

[24:41] What does Aaron see for the future?

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer’s Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

Jeffrey Palermo’s YouTube

Jeffrey Palermo’s Twitter — Follow to stay informed about future events!

• Appgate — The leader in Zero Trust Network Access solutions

Zero Trust Thirty

• EO 14028 — Executive Order on Improving the Nation’s Cybersecurity
• Presidential memo on Moving the U.S. Government Toward Zero Trust Cybersecurity Principles
• CISA’s focus on Zero Trust — 508 search results
• CISA’s Zero Trust Maturity Model document
• NIST — Implementing Zero Trust Architecture
• Cloud Security Alliance — Software Defined Perimeter and Zero Trust
• Platform One — “An official DoD DevSecOps Enterprise Services team for the DoD” leveraging CNAP for secure remote access to cloud resources.
• Department of Defense (DoD) Cloud Native Access Point (CNAP) Reference Design (RD)

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.