Agenda and keynotes

18h00 - 18h30: Welcome & Food

18h30 - 19h00: Shift Left with security posture management for IaC

(Michiel Brinkman and Tijl Van den Broeck - Google)

Too often vulnerabilities are discovered late in production, and not all of these vulnerabilities are source code issues, many of them are mere misconfigurations in Infrastructure of Code using insecure settings. If only these configurations could be detected and remediated at check-in time. This session will cover how to use Google Cloud's Security Command Center's IaC scanning capabilities to cover this gap and fix any security issues in the IaC configuration before they are applied.

19h00 - 19h30: Testing Terraform Code

(Jonathan Bernaerts - FlowFactor)

Terraform is a powerful tool for managing infrastructure as code, but ensuring the quality and security of your Terraform configurations is crucial. In this session, Jonathan will explore the importance of testing Terraform code and introduce various static analysis tools that can help you catch issues early in the development process. You will learn how to integrate these tools into your workflow, enabling you to maintain robust and secure infrastructure configurations.

19h30 - 20h00: Secrets Consumption Patterns For GCP Cloud Run

(Rob Barnes - HashiCorp)

Cloud Run can be a developer’s best friend when it comes to running applications, but how can we manage the secrets that these applications need at run time securely?

In this demo driven session, I will show you some consumption patterns that can be used to securely inject secrets into your application run time environment, using HashiCorp Vault. You will learn how to set up Vault Agent as a side car, how to configure authentication, and how you can store secrets for your applications to consume.

20h00: Drinks & Networking