API World + CloudX + Dev Innovation Summit 2024: Full Schedule

arrow_back View All Dates

10:00am PST

OPEN SESSION (CloudX): Modern Auth & CloudOps Access: Made Easy

Wednesday November 6, 2024 10:00am - 10:25am PST

Chase Doelling, JumpCloud, Principal Strategist

Security driven development does little good if your own front door is left wide open. This session will dive into modern auth techniques with a little history from RBAC to ABAC and how to implement passwordless access to your most critical resources.

Speakers

Chase Doelling

Principal Strategist, JumpCloud

Chase is a Principal Strategist at JumpCloud, designing authentication strategies and evangelizing customer solutions. He has been working in venture-backed startups across identity, security, integration, and DevOps for the last decade. Chase is a frequent speaker on topics from... Read More →

Wednesday November 6, 2024 10:00am - 10:25am PST
CloudX -- Main Stage

CloudX: Cloud Architecture & Infrastructure, Cloud Security

Talk Type OPEN Session
Track or Conference CloudX, CloudX: Cloud Architecture & Infrastructure, Cloud Security (CloudX), Hybrid & Multi-Cloud (CloudX), OPEN Session
In-Person/Virtual In Person

11:00am PST

PRO SESSION (CloudX): How We Implemented Zero Trust Security Using Cilium

Wednesday November 6, 2024 11:00am - 11:25am PST

CloudX -- Stage 1

Lakmal Warusawithana, WSO2, Technology Evangelist

Implementing a zero trust approach is essential for security, as it involves verifying and validating every request, irrespective of its origin or location.

In the initial implementation of Choreo, our internal Developer Platform as a Service, we faced challenges in controlling all network access and enforcing authentication, authorization, and seamless network traffic encryption at scale, which is vital for the Choreo cloud service. However, by employing Cilium, K8s, and a cell-based architecture, we were able to develop a scalable platform that upholds zero trust security principles.

The combination of Cilium's eBPF-powered layer 3, 4, and 7 network policies, Hubble Observability, IPSec security, and a cell-based architecture enabled us to address all the critical elements of a zero trust platform successfully.

In this talk, I will detail all the challenges we faced and the strategies we employed to overcome them.

Speakers

Lakmal Warusawithana

Technology Evangelist, WSO2

Lakmal Warusawithana is the Senior Director - Cloud Architecture of WSO2. Lakmal has a long history of working in open source, cloud, and DevOps technologies and has been Vice President of Apache Stratos PaaS Project. Lakmal has also presented at numerous events, including ApacheCon... Read More →

Wednesday November 6, 2024 11:00am - 11:25am PST
CloudX -- Stage 1

CloudX: Cloud Architecture & Infrastructure, Cloud Security

Talk Type PRO Session
Track or Conference CloudX, Cloud Security (CloudX), CloudX: DevOps Summit, DevSecOps (CloudX)
In-Person/Virtual In Person

11:30am PST

PRO SESSION (CloudX): Harnessing Sandboxing for Secure Application Deployment

Wednesday November 6, 2024 11:30am - 11:55am PST

CloudX -- Stage 1

Ajay Kidave, Clace, Founder

Sandboxing allows for secure software development and deployment. Running code in a sandbox allows installing and running applications while controlling what the applications can do. Sandboxing allows administrators to deploy an application and specify what fine grained operations it can perform. We introduce an open-source project built in go that implements sandboxing features to allow applications to be developed and deployed easily and securely.

Speakers

Ajay Kidave

Founder, Clace

Ajay Kidave is the Founder of Clace, an open source project which is using sandboxing to allow the secure development and deployment of internal applications. Previously, Ajay was the Chief Architect at SnapLogic, an enterprise data and application integration service. Before that... Read More →

Wednesday November 6, 2024 11:30am - 11:55am PST
CloudX -- Stage 1

CloudX: Cloud Architecture & Infrastructure, Deployment Strategies

Talk Type PRO Session
Track or Conference CloudX, Deployment Strategies (CloudX), Cloud Security (CloudX)
In-Person/Virtual In Person

1:30pm PST

PRO SESSION (CloudX): Simplifying Multi-Cloud Security and Networking using an AI-Powered Approach

Wednesday November 6, 2024 1:30pm - 1:55pm PST

CloudX -- Stage 1

Bhavin Desai, Google, Cross-Cloud Network Product Lead

Organizations increasingly adopt multi-cloud strategies to enhance agility and avoid vendor lock-in. However, this complexity creates challenges in networking, security posture management, and application development. This abstract highlights the potential of service-centric networking to streamline secure connectivity across hybrid and multi-cloud environments. It also explores AI-powered network security capabilities, including zero-trust architecture, next-generation firewalls, secure web proxies, and data loss prevention. By integrating these solutions, organizations can proactively defend their cloud networks, protect workloads, secure data, and ensure user security, ultimately accelerating distributed application development while maintaining a robust security posture.

Speakers

Bhavin Desai

Cross-Cloud Network Product Lead, Google

Highly accomplished cloud infrastructure and cybersecurity professional with a strong background in product management, technical solutions architecture, and cloud engineering. Proven expertise with 11+ years of experience in leading strategic initiatives, designing scalable solutions... Read More →

Wednesday November 6, 2024 1:30pm - 1:55pm PST
CloudX -- Stage 1

CloudX: Cloud Architecture & Infrastructure, Hybrid & Multi-Cloud

Talk Type PRO Session
Track or Conference CloudX, Hybrid & Multi-Cloud (CloudX), Cloud Security (CloudX), CloudX: Cloud Architecture & Infrastructure
In-Person/Virtual In Person

2:30pm PST

KEYNOTE (CLOUDX): Sicura -- Automating Compliance for Cloud Image Building

Wednesday November 6, 2024 2:30pm - 2:55pm PST

CloudX -- Main Stage

Kendall Moore, Sicura, CTO

There are too many possibilities for base images in cloud environments and not enough time to validate which ones fulfill all of my requirements. Worse yet, I know that I have policies set by my security team that my infrastructure will be beholden to. So now what? I built an open source policy engine and image generator to implement directly into my build pipelines. I can start with any base image, apply my security policies that are verified by my security team, and now have a baseline that I can rapidly scale my infrastructure from.

Speakers

Kendall Moore

CTO, Sicura

Dedicated to optimization and designing effective workflows for continuous integration and continuous delivery, Kendall understands the melding of operations and development to quickly deliver code to customers. Has experience with the Cloud and monitoring processes as well as DevOps... Read More →

Wednesday November 6, 2024 2:30pm - 2:55pm PST
CloudX -- Main Stage

5. KEYNOTES & FEATURED, CloudX

Talk Type OPEN Session
Track or Conference OPEN Session, CloudX, CloudX: Cloud Architecture & Infrastructure, Cloud Security (CloudX), Cloud Infrastructure (CloudX)
In-Person/Virtual In Person