►
From YouTube: 5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh – Granville Schmidt
Description
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects
5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh – Granville Schmidt, Aspen Mesh
Building distributed systems is hard. Building distributed systems that are secure and compliant is even harder. A service mesh such as Istio can help solve engineering problems you’ll face when securing your services and complying with requirements found in GDPR, HIPAA, PCI-DSS and other standards and regulations. In this presentation, Granville will focus specifically on the security and compliance challenges that developers, operators and leaders face when building distributed systems in highly regulated industries; and show how to effectively leverage Istio to address them.
https://sched.co/MPey
B
A
A
A
A
I
just
so
the
first
one
is
lamentation,
so
we
need
to
verify
yeah
that
did
indeed
the
actor
making
their
last
unprotected
mo.
Second,
new
authorization
authorization.
There
is
verification
on
the
actor
to
make
sure
that
they're
allowed
to
access
the
closet
demo
account
the
county
will
appears
like
synonymous
with
auditing,
but
it's
really
the
mechanisms
for
recording
and
examining
the
activities
within
your
system.
Next
up,
I've
done
intended
how
we
go
about
protecting
our
data
service
or
in
any
manner
and
whatever
to
the
record
of
system
architecture
across
the
city.
A
A
A
A
So
we
take
the
moment
that
we
know
into
something
like
this,
where
we
have
the
encrypted
traffic
going
into
reverse
proxy,
we
have
our
decomposed
micro
services
and
used
to
make
them,
and
now
the
authentication,
authorization
and
the
code
base
in
the
reverse
proxy.
You
knows
how
did
this
and
then
we
also
have
long
antennae,
monitor
image
of
dangerous
impairments
of
this.
A
We
have
this
monitoring
services
service
traffic
attorney,
and
this
is
where
visually
really
difficult
to
actually
secure
and
ensuring
compliance,
because
these-
and
this
is
that
we
need
to
build
out
some
type
of
a
sort
of
tech
management
to
do
this
encrypted
communication,
and
this
involves
us
making
certificates
for
every
service
in
time.
Every
services,
as
well
as
well
good
to
do.
A
A
A
A
Multiple
policies
limiter-
this
is
a
very
interesting
piece
for
this
audience
and
when
this
presentation
is
not
so
with,
mixer
were
able
to
actually
hand
different,
which
we'll
see
in
a
second
which
will
tell
us
authentication
authorization
and
handle
all
the
term
that
comes
out
of
our
services.
So
the
personal
favor
simplicity,
management,
service,
or
that
is
do
it-
is
responsible
for
handling
all
in
Tooele
sorts
and
actually
send
me
down
a
lot
more
oxygen.
So
you
no
longer
need
to
baby
sit
yourself
down.
A
Deli,
a
misconfiguration
domination
and
you
deployed
to
your
production
cluster,
it's
one
that
ensures
everything's
in
concurrent
cipher
gender.
This
does
involve
automatically
you
don't
need
to
include
the
unrelated
container
and
your
employment
slavery.
Instead,
you
let
the
sidecar
and
check
us
in
then.
A
A
A
You
know
throughout
this
experience,
I
really
enjoy.
I
can't
seem
to
actually
doing
these
rules
without
the
engineers
to
solve
other
words.
I
said
what
better
time
didn't
you
talk
so
to
know
your
mission?
Should
you
choose
to
accept?
It
is
to
leverage,
in
this
year
remaining
Lewiston
and
portions,
of
the
content
or
performance
balance,
standards
and
regulations
for
its
hasta
nerds
health
care
application.
Without
this
message.
A
A
B
A
A
What
this
says
right
here
is
that
it's
gonna
be
strict
and
its
directors
will
tell
the
states
that
everything
talked
to
it
must
be
on
that
activity.
On
the
other
side,
we
have
the
destination.
This
tells
everything
else
inside
Romesh
that
and
it
talks
to
our
patients
and
their
top-secret
a
space
that
it
must
use
visually.
Tell
us
so
this
stuff
around
us
so
we're,
and
we
had
this
really
awesome,
pac-man
debate
certificates
from
RCA
for
the
midterm,
at
least
our
developer
services
and
employment.
A
A
We're
going
to
be
ancestor
and
they're
going
to
send
them
upon
for
the
no
specific
tops
here,
and
what
this
really
does
is
that
it
says
without
authorization,
without
explicitly
authorizing
services
to
talk
to
each
other.
There
anything
tonight
they
just
whip
it
out
and
then,
during
his
service,
the
service
from
the
nation's
leader
in
the
namespace
top
seeker
says.
B
A
Service
relax,
so
we
have
this
wall
and
we
need
to
actually
excite
us
all
more
than
two
years
that
were
actually
able
to
find
the
patient
you
all
to
the
subject
of
the
check-in
service.
Now
so
the
Chinese
service,
the
service
town
communities
and
we're
able
to
say
that
this
service,
now
when
economies
of
the
originating
estimate-
and
they
have
them
already
receptionist
so.
A
A
A
So
we
need
to
be
able
access
what
we're
going
to
do
Soviet
coming
from
Athens.
So
first
of
all,
this
is
an
amateur,
but
the
same
stuff
exists
across
more
than
computer.
Just
long
that
vessel
we
need
to
configure
the
proxy
access
file
to
standard
out
and
what
this
indicates
to
allow
us
to
actually
grab
these
cancel,
and
then
we
can
actually,
you
know,
spread
them
out
to
assist
with
choice.
A
A
A
A
A
A
Security
and
compliance-
that's
here,
if
there's
anything,
I
want
to
leave
here
today.
This
is
it
we
didn't
start
making
of
security
embarrassed,
sometimes
and
sometimes
within
our
compliance
first.
Neither
one
of
those
is
correct.
It's
so
easy
to
secure
system
we're
talking
about
regulations
and
standards.
Unless
we
can
prove
it,
it
doesn't
matter.
You
can
have
the
most
secure
micro
service
architecture
and
unless
you
enjoy
the
auditors
and
everything
that
there
was
vice
versa,
we
need
we've
been
through
the
compliance
bosses.
A
Your
systems,
not
a
messenger
compliance
regulations
and
standards,
really
provide
that
foundation.
Slack
team
is
to
build
off.
Their
management,
makes
them
in
the
bill,
but
they're
not
only
used
to
it
at
all,
so
just
make
sure
that
you
take
over
that
account
so
achieving
energy
plan.
So
please
don't
stop
there
and
thank.