DevOps on AWS Radio

In this episode, Kinnaird McQuade, Lead Cloud Security Engineer at Salesforce, joins us to talk about his tools Cloudsplaining and Policy Sentry. Policy Sentry provides a framework for writing IAM policies to make it easier to create least privilege policies. Cloudsplaining can help find policies that may allow more access than required.

Keith Monihen joins hosts Scott Alexander and Shaug Evans this episode to talk about the Stelligent book club and how it helps create a culture of learning and shared connection among employees.

For full episode details, visit https://stelligent.com/blog/

Episode Notes

Hosted by Scott Alexander (@salexpdx) and Shaug Evans (@ohshaughnessy)

Interview Guest: Kinnaird McQuade @kmcquade3

Stelligent Guest: Keith Monihen @KeithMonihen

Episode Timeline

00:00 Podcast Introduction and welcome

01:00 Kinnaird McQuade interview

28:15 Discussion of Interview with Scott, Shaug, and Keith

33:00 Recent Blog Post

36:50 Stelligent Book Club

48:00 Closing Contact Information

Relevant Links

CloudSplaining https://cloudsplaining.readthedocs.io/en/latest/

Policy Sentry https://policy-sentry.readthedocs.io/en/latest/

Kinnaird McQuade Website https://kmcquade.com/

Open Source at Salesforce https://opensource.salesforce.com/

Salesforce Careers https://www.salesforce.com/company/careers/

AWS Nuke - https://github.com/rebuy-de/aws-nuke

Cloud Custodian - https://cloudcustodian.io/

Cloud Tracker - https://github.com/duo-labs/cloudtracker

Blog posts:

Trend Micro Smart Scan: https://stelligent.com/2020/05/22/is-my-container-image-secure-ci-cd-container-scanning-using-trend-micro-deep-security-smart-check-and-aws-codepipeline/

Amazon Inspector Introduction: https://stelligent.com/2020/05/08/introduction-to-amazon-inspector/

Implementing Amazon Inspector in Automated AMI Pipelines: https://stelligent.com/2020/05/08/implementing-amazon-inspector-in-automated-ami-pipelines/

CFN Leaprog: https://stelligent.com/2020/05/15/generating-least-privileged-iam-roles-for-cloudformation-and-service-catalog-with-cfn-leaprog/

Paul Duvall’s Forbes Article: https://www.forbes.com/sites/forbestechcouncil/2020/05/01/exponential-cloud-security/

Books:

The Year without Pants - https://www.amazon.com/Year-Without-Pants-WordPress-com-Future-ebook/dp/B00DVJXI4M

People Centric Security - https://www.amazon.com/People-Centric-Security-Transforming-Enterprise-Culture-ebook/dp/B015EZ2PT4

Accelerate - https://www.amazon.com/Accelerate-Software-Performing-Technology-Organizations-ebook/dp/B07B9F83WM

Clean Code - https://www.amazon.com/Clean-Code-Handbook-Software-Craftsmanship-ebook/dp/B001GSTOAM

Clean Architecture - https://www.amazon.com/Clean-Architecture-Craftsmans-Software-Structure-ebook/dp/B075LRM681

Intro/Outtro music - Atmosphere by Mi77er

https://soundcloud.com/mi77ermusic/atmosphere-original-mix-progressive-ambient-house

Hosts:

Scott Alexander (@salexpdx)

Shaug Evans (@ohshaughnessy)

Episode Timeline

01:08 What Is happening with the podcast

03:35 Michael Neil interview

18:30 Open Source at Mphasis Stelligent

21:15 Recent Blog Post

31:45 Closing Contact Information

Relevant Links

Mutato open-source framework for building containerized micro-services on the AWS ecosystem 

https://github.com/stelligent/mutato

Mu: Open source framework in go for deployment pipelines

https://github.com/stelligent/mu

Building Developer Sandboxes with Attribute Based Access Control

https://stelligent.com/2020/05/01/building-developer-sandboxes-on-aws-with-attribute-based-access-control-abac/

IAM Complexity blog post

https://stelligent.com/2020/03/27/thought-experiment-proposed-complexity-metric-for-iam-policy-documents/

Blog posts about remote work

https://stelligent.com/category/remote-work/

Podcast Details:

What Is happening with the podcast - The podcast has new hosts and a tweaked format to make it more useful to our listener. The interview is now at the front of the podcast and the news and discussion is the second half of the recording.

Michael Neil interview - Stelligent’s newest open source project Mutato (pronounced muh-tah-toe) joins the podcast to talk about the project. It is an open-source framework for building containerized micro-services on the AWS ecosystem. The project handles many of the details for new AWS users to get containers deployed to ECS and EKS quicker.

Open Source at Mphasis Stelligent - In addition to our projects, we also publish source code that supports our blog posts. One recent blog post is Eric Kascic’s “Thought experiment - Complexity metrics for IAM Policy documents”. In addition to the blog post, he wrote code that implements his idea and the repository is public for anyone to see.

Recent Blog Post - Several other recent blog posts are discussed including the recent series of articles about working remotely, Scott Nixon’s Building developer sandboxes with Attribute Based Access Control is discussed for teams that may have to share an AWS account and for the opening look into identification documents and their history.

Closing Contact Information - On Twitter, You can find Shaug Evans @ohshaughnessy and Scott Alexander @salexpdx, For more information about Mphasis Stelligent, visit https://stelligent.com

Intro/Outtro music Atmosphere by Mi77er

https://soundcloud.com/mi77ermusic/atmosphere-original-mix-progressive-ambient-house

In this episode, we chat with Michael Wittig an AWS Community Hero prior to re:Invent 2019 with some of our hopes and expectations of the conference, and we also dive into a number of topics including Michael's most recent book. In this episode, Paul Duvall and Michael Wittig will give you an overview of the Do's and Don'ts of Containers on AWS, the open source tool cfn-modules, de-mything the Serverless hype, and also covers cost related issues and the recent Savings Plans released in order to reduce your bill. To learn more about Stelligent, visit www.stelligent.com.

In this episode, we chat with Michael Neil a DevOps Automation Engineer here at Mphasis Stelligent about the  AWS IoT platform. AWS IoT consists of many products and services: Greengrass, IoT Core, Amazon FreeRTOS, and Device Defender.  It can be difficult to know where to start when piecing together each of the offerings to create an IoT solution. Paul Duvall and Michael Neil will give you an overview of the AWS IoT platform, guide you in how to get started with AWS IoT, teach you how to automate it, and walk through a use case using AWS IoT. To learn more about Stelligent, visit www.stelligent.com.

In this episode, we chat with Excella Co-Founder and Partner Jeff Gallimore about all things DevOps culture. In this episode we take a departure from our technical deeps dives to explore culture: how to measure culture, culture typology, psychological safety, how continuous delivery impacts culture, how culture affects performance, and more! We even get into a discussion around real-world experiences such as a joint venture called NUMMI. Listen here:

In this episode, Paul Duvall covers recent DevOps on AWS news and chats with Tom McLaughlin, founder of the consultancy ServerlessOps. The two dive deep into all things serverless including; use cases, serverless adoption curve, organization structures, serverless security and more! Listen here:

In this episode, Paul Duvall and Brian Jakovich cover recent DevOps on AWS news and get into a discussion about DevOps on AWS transformations for enterprises. The two discuss what they have seen with transformations based on their experience in working with dozens of enterprises over the past decade.

In this episode, Paul Duvall speaks with Stelligent Chief Architect and VP of Engineering & Delivery Casey Lee about containers on AWS. Casey, an AWS Container Hero dives deep into Amazon ECS, Amazon EKS, AWS Fargate and the open source tools used in the Kubernetes world. Lastly, Paul and Casey discuss how to best implement containers on AWS.

In this episode, Paul Duvall speaks with VP, Engineering & Delivery, Casey Lee for a brief preview of next months episode including updates on some of the new features to mu.  Along with a discussion with James Martin, an Automation Engineering Manager at 3M HIS.

In this episode, Paul Duvall and Brian Jakovich cover recent DevOps on AWS news along with a discussion with one of the founding fathers of Continuous Integration, Paul Julius.