Events

Securing Terraform IaC with the Regula Policy Engine

In this Cloud Security Masterclass, Fugue’s Josh Stella (CTO) and Curtis Myzie (VP Engineering) will dig into using Regula, an open source policy engine for checking infrastructure as code. For this session they’ll focus on checking Terraform in development (HCL checks) and in CI/CD (Terraform plan checks). You’ll learn how to: Get started with Regula and pre-built policies (including CIS Foundations Benchmarks policies) Integrate Regula IaC checks into your git workflows and CI/CD pipelines Write custom policies using the open source Rego language This session is ideal for engineering and security teams using AWS, Microsoft Azure, or Google Cloud environments (or all 3!). While this session will focus on Terraform, if you use AWS CloudFormation you’ll still learn how Regula can work for your use case.

IaC Security with Regula's Pre-Built Policies

In this session, Fugue’s Ricardo Green (Principal Solutions Engineer) and Curtis Myzie (VP Engineering) will walk through how to ensure the security of your Terraform templates using some of the hundreds of pre-built Regula rules. You’ll walk away from this session with an clear picture of: Regula’s pre-built policies, including those mapped to the CIS Foundations Benchmarks Running security checks on Terraform (HCL) in development Integrating Regula’s checks on Terraform plan files in CI/CD pipelines You can also use your same Regula policies to check your running cloud environment using Fugue. This session will be specific for Terraform and AWS, but is applicable for any engineering and security teams using AWS, Microsoft Azure, or Google Cloud environments (or all 3!) — or using AWS CloudFormation.

Speaking Session: CSA Delaware Valley

Josh Stella, Co-Founder and CTO of Fugue is going to simulate two real-world cloud misconfiguration attacks to demonstrate in real-time how these methods work in evading datacenter security approaches and take advantage of common cloud misconfigurations that compliance standards miss. You’ll learn how these hacks go down, and how to spot previously-missed vulnerabilities and determine the blast radius of your cloud security gaps. 

About this Cloud Security Masterclass

• A one-hour live video session with open chat throughout, and extra time for Q&A following the main session
• Hands-on demonstrations of real-time cloud exploits using tools such as the AWS Console and Command Line


• A fun, interactive learning session (no boring powerpoint webinars here!)