Attendees will learn how to set up, harden, & secure a container pipeline in AWS in this talk using no servers for that pipeline. If you’re interested in integrating security and compliance into a container pipeline to realize the benefits of DevSecOps. We will be using these tools and techniques to secure a container pipeline and runtime.

Github Repo - Code Signing
Kind - Local Development
AWS ECR - Image Scanning - CVE
AWS Codepipeline/Build - CI/CD A
WS ECR - Immutable Tags
Run Time Security - Falco
Logging - FireLens Alerting - Cloudwatch
Auditing - Cloudtrail