SlideShare a Scribd company logo
1 of 87
Download to read offline
@awsgeek lucidchart.com
From Zero to
DevSecOpsin
60 Minutes
@awsgeek lucidchart.com
@awsgeek lucidchart.com
From Zero to
DevSecOpsin
60 Minutes
@awsgeek lucidchart.com
60 Minutes45
DevSecOpsin
From Zero to
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
…
AWS
Event
Producers
@awsgeek lucidchart.com
…
AWS
Event
Producers
@awsgeek lucidchart.com
@awsgeek lucidchart.com
1
@awsgeek lucidchart.com
1 2
@awsgeek lucidchart.com
1 2 3
@awsgeek lucidchart.com
1 2 3
@awsgeek lucidchart.com
<?php
require 'vendor/autoload.php';
$ec2 = new AwsEc2Ec2Client([
'version' => 'latest',
'region' => 'us-west-2'
]);
$res = $ec2->startInstances([
'InstanceIds' => [ id1, id2, ... ],
...
]);
@awsgeek lucidchart.com
"eventTime": "2018-02-07T22:18:40Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "StartInstances",
"awsRegion": "us-west-2",
"sourceIPAddress": "24.25.26.27",
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
"eventVersion": "1.05",
"principalId": "123456789012",
"arn":"arn:aws:iam::xx:user/jerry",
"accountId": "123456789012",
"accessKeyId": "abcdefghijklmnop",
"userName": "jerry",
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
AWS
Event
Consumers
@awsgeek lucidchart.com
AWS
Event
Consumers
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
1
@awsgeek lucidchart.com
<?php
require 'vendor/autoload.php';
$ct = new AwsCloudTrailCloudTrailClient([
'version' => 'latest',
'region' => 'us-west-2'
]);
$res = $ct->stopLogging([
'Name' => <trail name>,
...
]);
@awsgeek lucidchart.com
2
1
@awsgeek lucidchart.com
2
1
3
@awsgeek lucidchart.com
A
@awsgeek lucidchart.com
2
1
3
4
@awsgeek lucidchart.com
function processEvent(event, callback):
region = event['detail']['awsRegion']
message = {
'channel': SLACK_CHANNEL,
'text’:
"CloudTrail disabled in %s" %(region)
}
...
response = urlopen(req)
@awsgeek lucidchart.com
A
B
@awsgeek lucidchart.com
C
A
B
@awsgeek lucidchart.com
2
1
3
4
5
@awsgeek lucidchart.com
2
1
3
4
5
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
2
1
3
@awsgeek lucidchart.com
2
1
3
4
@awsgeek lucidchart.com
2
1
3
4
5
@awsgeek lucidchart.com
2
1
3
4
5
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
1
@awsgeek lucidchart.com
2
1
@awsgeek lucidchart.com
2
3
1
@awsgeek lucidchart.com
2
3
4
1
@awsgeek lucidchart.com
exports.subscribe = (event, callback) => {
...
const options = url.parse(slackUrl);
options.method = 'POST’;
...
const post = https.request(options,
@awsgeek lucidchart.com
2
3
4
1 5
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
1
@awsgeek lucidchart.com
2
1
3
4
@awsgeek lucidchart.com
2
1
3
4
5
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
@awsgeek lucidchart.com
1
2
3
4
5
6
@awsgeek lucidchart.com
@awsgeek lucidchart.com
ThankYou!
Read more:
lucidchart.com/blog/cloud
Follow:
@awsgeekon Twitter
See more:
awsgeek.com

More Related Content

Similar to ZendCon/OE: From Zero to DevSecOps in 60 Minutes

ZendCon/OE: Machine Leaning in the Cloud
ZendCon/OE: Machine Leaning in the CloudZendCon/OE: Machine Leaning in the Cloud
ZendCon/OE: Machine Leaning in the Cloudjerryhargrove
 
Deploying and Scaling Microservices
Deploying and Scaling MicroservicesDeploying and Scaling Microservices
Deploying and Scaling MicroservicesSam Newman
 
Cascadia PHP '18 - Machine Learning on AWS (for Noobs)
Cascadia PHP '18 - Machine Learning on AWS (for Noobs)Cascadia PHP '18 - Machine Learning on AWS (for Noobs)
Cascadia PHP '18 - Machine Learning on AWS (for Noobs)jerryhargrove
 
(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...
(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...
(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...Amazon Web Services
 
Serverless Development To Production Pipeline
Serverless Development To Production PipelineServerless Development To Production Pipeline
Serverless Development To Production PipelineChase Douglas
 
【IVS CTO Night & Day】Amazon Container Services
【IVS CTO Night & Day】Amazon Container Services【IVS CTO Night & Day】Amazon Container Services
【IVS CTO Night & Day】Amazon Container ServicesAmazon Web Services Japan
 
Testing and Monitoring and Broken Things | Nikki Attea | Sensu
Testing and Monitoring and Broken Things | Nikki Attea | SensuTesting and Monitoring and Broken Things | Nikki Attea | Sensu
Testing and Monitoring and Broken Things | Nikki Attea | SensuInfluxData
 
WCSD - GutenWhat? A Gutenberg FAQ
WCSD - GutenWhat? A Gutenberg FAQWCSD - GutenWhat? A Gutenberg FAQ
WCSD - GutenWhat? A Gutenberg FAQRoy Sivan
 
Podcast with Wordpress - Become Internet Rockstar
Podcast with Wordpress - Become Internet RockstarPodcast with Wordpress - Become Internet Rockstar
Podcast with Wordpress - Become Internet RockstarAlex Harris
 

Similar to ZendCon/OE: From Zero to DevSecOps in 60 Minutes (10)

ZendCon/OE: Machine Leaning in the Cloud
ZendCon/OE: Machine Leaning in the CloudZendCon/OE: Machine Leaning in the Cloud
ZendCon/OE: Machine Leaning in the Cloud
 
Deploying and Scaling Microservices
Deploying and Scaling MicroservicesDeploying and Scaling Microservices
Deploying and Scaling Microservices
 
Cascadia PHP '18 - Machine Learning on AWS (for Noobs)
Cascadia PHP '18 - Machine Learning on AWS (for Noobs)Cascadia PHP '18 - Machine Learning on AWS (for Noobs)
Cascadia PHP '18 - Machine Learning on AWS (for Noobs)
 
(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...
(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...
(ARC317) Maintaining a Resilient Front Door at Massive Scale | AWS re:Invent ...
 
Serverless Development To Production Pipeline
Serverless Development To Production PipelineServerless Development To Production Pipeline
Serverless Development To Production Pipeline
 
Docker on azure
Docker on azureDocker on azure
Docker on azure
 
【IVS CTO Night & Day】Amazon Container Services
【IVS CTO Night & Day】Amazon Container Services【IVS CTO Night & Day】Amazon Container Services
【IVS CTO Night & Day】Amazon Container Services
 
Testing and Monitoring and Broken Things | Nikki Attea | Sensu
Testing and Monitoring and Broken Things | Nikki Attea | SensuTesting and Monitoring and Broken Things | Nikki Attea | Sensu
Testing and Monitoring and Broken Things | Nikki Attea | Sensu
 
WCSD - GutenWhat? A Gutenberg FAQ
WCSD - GutenWhat? A Gutenberg FAQWCSD - GutenWhat? A Gutenberg FAQ
WCSD - GutenWhat? A Gutenberg FAQ
 
Podcast with Wordpress - Become Internet Rockstar
Podcast with Wordpress - Become Internet RockstarPodcast with Wordpress - Become Internet Rockstar
Podcast with Wordpress - Become Internet Rockstar
 

Recently uploaded

Factors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptxFactors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc
 
Slack Application Development 101 Slides
Slack Application Development 101 SlidesSlack Application Development 101 Slides
Slack Application Development 101 Slidespraypatel2
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024Results
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Scriptwesley chun
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationRadu Cotescu
 
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...gurkirankumar98700
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Servicegiselly40
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge
 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilV3cube
 
Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101Paola De la Torre
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays
 

Recently uploaded (20)

Factors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptxFactors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptx
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Slack Application Development 101 Slides
Slack Application Development 101 SlidesSlack Application Development 101 Slides
Slack Application Development 101 Slides
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Service
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of Brazil
 
Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptx
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path Mount
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 

ZendCon/OE: From Zero to DevSecOps in 60 Minutes