Securing Autonomous Subsystems in Depth
In Chapter 9, Running in Multiple Regions, we covered how we can use cloud regions as another bulkhead to protect our systems from cloud provider disruptions. Running in multiple regions also improves performance for geographically dispersed users and provides a safety net that teams can leverage for regional canary deployments.
Now we turn our attention to securing our autonomous subsystems and services. Security itself is a kind of bulkhead against outside intruders. We will use cloud accounts as a bulkhead between autonomous subsystems and secure them and our CI/CD pipelines against attacks. We will learn how to secure the perimeter of the system along with the presentation and service tiers. We will also redact sensitive data and audit the system for compliance.
In this chapter, we’re going to cover the following main topics:
- Shared responsibility model
- Securing cloud accounts
- Securing CI/CD pipelines...
