Loading…
BSidesSF 2018 has ended
View analytic
Monday, April 16 • 11:40am - 12:10pm
Managing secrets in your cloud environment: AWS, GCP, and containers (and beyond)

Sign up or log in to save this to your schedule and see who's attending!

Tweet Share
Feedback form is now closed.
Applications often require access to sensitive data at build or run time, known as secrets. As a cloud application developer, you have many options to store these secrets, such as in code, environment variables, or purpose built solutions. We’ll discuss what a secret is, how secrets are stored today and some common mistakes in secret management, identity as it relates to accessing secrets, criteria to evaluate a secret management solution, and common solutions for containers in AWS, GCP, and Azure, and lastly, unsolved security risks.

Users should walk away from the talk as experts on secrets management in the cloud. How to improve their secret management practices, and understand their current security and usability tradeoffs.
Presenters
avatar for Evan Johnson

Evan Johnson

Senior Security Engineer, Cloudflare
Evan Johnson is a member of the Product Security team at Cloudflare. He loves diet pepsi, chicken nuggets, and golang. No relation to the prolific Linkedin content producer, Mike Johnson.
avatar for Maya Kaczorowski

Maya Kaczorowski

Product Manager, Google
Maya Kaczorowski is a Product Manager in Security & Privacy at Google, focused on container security. She previously worked on encryption at rest and encryption key management. Prior to Google, she was an Engagement Manager at McKinsey & Company, working in IT security for large enterprises... Read More →

Managing secrets in your cloud environment BSidesSF 2018 PUBLIC pdf
Monday April 16, 2018 11:40am - 12:10pm
AMC - Theatre 7
  Track 3, Talk