Product Demo: Simplifying Your Cloud Security and Compliance with Fugue

Bringing your existing cloud environment into compliance and demonstrating it to management and auditors is a serious burden for cloud engineering teams.

Join us for a live video session as Ricardo Green, Senior Solutions Architect at Fugue, demonstrates how Fugue can simplify cloud security and compliance and make it less painful.

O'Reilly Infrastructure and Operations  Conference

Josh Stella, Fugue Co-Founder and CTO will present Simulating Cloud-Native Exploits Live: To Understand and Prevent Them

In this talk, Josh will run a live simulation of an advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data. Many of the misconfigurations exploited won’t be flagged by compliance scans and often aren’t considered risky by security teams.

At each step, he will share alternative approaches to architecting cloud infrastructure services to ensure our applications run efficiently while denying bad actors the tools and means to exploit them. Attendees will leave with actionable insights to evaluate their own cloud environment for misconfiguration vulnerabilities, how to address them, and how to bake secure cloud architecture approaches into software development.

Cloud Security Masterclass: Serverless Security 

In this Cloud Security Masterclass session, we’re going to dig into how security is different for serverless cloud infrastructure environments —and what hasn’t changed.  Fugue itself is an at-scale “serverless” SaaS product built on AWS, and Josh Stella (co-founder and CTO) is bringing Curtis Myzie (VP of Engineering) and Wayne Crissman (Director of Security) to walk through what it takes to keep data and applications secure in a serverless environment. 

This session will cover: 

• How going serverless “shifts” the Shared Responsibility Model
• The serverless attack surface — what’s changed and what stays the same 
• Modern serverless attack vectors, including IAM misconfiguration attacks
• The impact of serverless on compliance audits 
• Dos and don’ts to keep your serverless environment and data secure

Developer Week Cloud Edition-Seattle

Josh Stella Fugue Co-Founder and CTO will present: A Live Simulation of Cloud Misconfiguration Attacks

Josh will run a live simulation of an advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data. Many of the misconfigurations exploited won’t be flagged by compliance scans and often aren’t considered risky by security teams.

DevOps Days Buffalo

Josh Stella, Fugue CTO and Co-Founder will speak on: Addressing Cloud Security with Open Policy Agent (OPA)

OPA is an open source policy-as-code framework and toolset which can be used to validate policy compliance of cloud infrastructure environments. Learn how OPA works, how cloud engineering and dev teams can leverage it and other open source tools to prevent deployment of resource misconfigurations.

CSA EMEA Congress

Josh Stella, Fugue Co-Founder and  CTO will speak on Using OPA for Continuous Cloud Compliance with Cloud Infrastructure Policy-as-Code.

Open Policy Agent is an open source standard for policy-as-code that’s ideal for cloud infrastructure.  In this talk, Josh Stella, cofounder and CTO at Fugue, will walk through how OPA works and how cloud engineering teams can leverage it for their use cases, including validating infrastructure-as-code and integrating cloud security into CI/CD pipelines.  

• How OPA and the Rego policy language work for a variety of cloud security use cases 
• How developers can check Terraform against policy with Regula, an open source tool that uses OPA 
• How to use OPA with CI/CD tools to integrate cloud infrastructure security into automated delivery pipelines

Interop

We are excited to have Josh Stella, CTO and Co-Founder, speaking at Interop 2020 this year in Austin. Josh will be presenting: Simulating Real Time Cloud Misconfiguration Attacks to Improve Cloud Security

AWS re: Invent

Fugue is proud to be a sponsor of AWS re:Invent 2020. See you there!