Security Wine (бывший - DevSecOps Wine)

First part: Cloud Security Posture Management - Aleksandr Slobodanyuk, Senior Security Systems Engineer.

• CSPM - general overview

• Overview of commercial and opensource tools

• How does it work?



Second part: Infrastructure as Code Security - Michael Yudin, Senior Security Systems Engineer & German Babenko, Senior Security Systems Engineer.

• Infrastructure as Code intro

• Security in IaC

• IaC security tools: AWS demo, GCP demo

• Verifying of Terraform code for AWS Cloud with integration of security code scanning tools in IaC pipeline.