Wednesday, February 17, 2021
Talk to executives in IT divisions of large enterprises about security and invariably the conversation will hover around
Is DevSecOps the only thing you need to do for security in your IT division or is there more?
What impact does bringing in secure culture in an engineering context mean?
What handshake is needed between the IT function and the security / risk function for large enterprises?
How does this impact roles and responsibilities of a developer?
This talk is an attempt to answer questions such as these using a real world examples of transformations seen in Fortune 100 companies.
Thursday, February 18, 2021
The Lean Startup is based on the idea of having a Build-Measure-Learn loop, and making it as short as possible. In this session, you will learn how to shorten the Build stage, so that you don't waste precious R&D resources and money, and still experiment and validate ideas.
Real-life examples will be presented, based on work in Ad-Tech and Fintech companies.
In this session, we’ll explore how to secure your delivery pipelines, from development to deployment with key learnings including:
- Combining continuous packaging with integration & delivery.
- Applying holistic security principles across the whole value stream.
- Using infrastructure-as-code techniques to build, stage, and deploy.
Friday, February 19, 2021
Benchmarking cloud providers is difficult and time-consuming. In 2017 our cloud provider decisions were based on tests and informed assumptions. But when we started to see results that contradicted our assumptions, we dug further. Were our assumptions leading us astray?
This led us to develop the Cloud Report, a benchmark comparison of Amazon Web Services (AWS),Google Cloud Platform (GCP), and Microsoft Azure. Every year since, cloud infrastructure improves, so we have developed a cadence of benchmarking to keep our own engineering team, as well as our customers, at the cutting edge. In this talk, John breaks down how we benchmark each of the clouds, how we select the benchmarks, and the difficulties that we encounter -- no matter how variables we control for.
You have successfully stepped on the Kubernetes bandwagon and joined the multitude of companies who think Kubernetes will solve all their problems. But no one told you how. What kind of DevOps processes need to be build on top of Kubernetes to reap the benefits of all that was promised ? How do you do CI/CD, monitoring, On calls, upgrades, maintenance and more. More, so how do you do all this when your Enterprise runs on bare metal and machines go down and never come up for weeks ? You will leave this talk with a recipe for doing DevOps within your Enterprise using Kubernetes. You will become more confident of the exact steps you need to follow to deliver a good experience for your internal developers while still maintaining their trust and zero downtime for their applications. You will also learn about delivering software using staged manner across your data centers. All of this will be shared from a real experience of running Kubernetes clusters at Salesforce.