February 18, 2022

Catch IaC Drift with Firefly

52 minutes

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Bret is joined by Eran Bibi, a co-founder and CPO of Firefly to discuss Cloud and Kubernetes drift, and dealing with unmanaged resources and policy violations in Infrastructure as Code. Streamed live on YouTube on January 13, 2022.

Unedited live recording of this show on YouTube (Ep 154). Includes demos.

★Topics ★
Firefly
Becoming a DevOps Engineer

★Eran Bibi ★
Eran Bibi on Twitter

★Join my Community ★

Best coupons for my Docker and Kubernetes courses

Follow me on Patreon and support this show!

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

(00:00) - Intro

(00:42) - Bret custom intro

(02:06) - Live show

(02:56) - Eran's background

(04:51) - A new set of challenges

(06:04) - Why create Firefly?

(09:43) - How Firefly started

(10:14) - The Drift: What is it?

(13:51) - Bret brought down Netflix

(14:39) - Who is to blame?

(17:45) - Comment and question

(19:16) - Put changes in code

(19:53) - Question

(23:28) - Bret's dream

(24:39) - Demo

(25:02) - The four asset categories in Firefly

(28:37) - Example

(31:21) - What other IaC does it support?

(34:23) - Question

(38:35) - Question from Bret

(42:48) - Question from chat

(44:35) - Demo

(46:57) - Question

(50:06) - New features coming?

(51:25) - Show winding down

(51:56) - Team in chat answering questions

(52:47) - Template outro

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

...more