Building a Secure AWS Golden Image Pipeline with Packer, Vault and Terraform

Relying on post-provisioning updates and customization can only take you so far. Baking in security fixes, compliance and configuration as part of your OS image eliminates the attack window while your image is insecure (post provisioning), speeds up the end-to-end provisioning process, and can even be used to setup an 'immutable' design.

Mihai Criveti and Elif Samedin will provide an end-to-end demo of a Terraform, Vault, and Packer-based CI/CD workflow for building secure and compliant OS images. Triggering Ansible and OpenSCAP for OS image compliance and post-install steps.

Speaker: Mihai Criveti
GitHub: @crivetimihai
Twitter: @CrivetiMihai

Speaker: Elif Mosessohn-Samedin
GitHub: @UnfriendlyGrinch
Twitter: @elifsamedin

#Terraform #AWS #ImmutableInfrastructure

HashiCorp provides infrastructure automation software for multi-cloud environments, enabling enterprises to unlock a common cloud operating model to provision, secure, connect, and run any application on any infrastructure. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, Nomad, Boundary, and Waypoint allow organizations to deliver applications faster by helping enterprises transition from manual processes and ITIL practices to self-service automation and DevOps practices.

Twitter: @hashicorp