Running on Amazon EKS – How Greenlight Gets Security Right
0 likes•146 views
The document outlines Greenlight's journey as a financial technology company focused on teaching children money management, showcasing their growth and accomplishments since 2014. It addresses their transition to a microservices architecture and highlights security as a shared responsibility in service deployments. Additionally, the document discusses tools and practices related to Kubernetes and suggests further resources for improving security and compliance.
Running on Amazon EKS – How Greenlight Gets Security Right
- 1. Greenlight & StackRox Our Technical Journey
- 2. Quick Poll: your Kube journey
- 3. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. EARN SAVE SPEND GIVE Who we are Greenlight Helps Parents Raise Financially Smart Kids! LEARN
- 4. They managed money. They saved. $150+ MILLION MANAGED $171 $161 $106 $66 19-22 15-18 11-14 5-10 They earned. 1.8 MILLION CHORES They cared. What Greenlight kids accomplished in 2019 2.6 MILLION $ What kids saved for: Cars College Computers Airpods Christmas Average amount saved by age group Set aside to give in 2019 $912 $784 $355 $164 19-22 15-18 11-14 5-10 Average amount managed by age group
- 5. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. How we got here Greenlight Founded New features and start shift to microservices Greenlight 2.0 2014 2017 2018 2019 Focus on partner platform and microservice maturity Platform for Partners First Product to Market
- 6. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. Greenlight growth and technology timeline 2018 2019 2020 Started down the path defining the GL platform Started to get some scale with our microservices strategy Additional compliance and security requests from partner offering IncreasingImpact ofvulnerabilities
- 8. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. Greenlight application context Payment Processing GL Business Logic Vendor Logic Greenlight Data Consumer Apps Customer Service App Partner & Vendor Interfaces Greenlight Backend Application Code
- 9. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. Tenant 1 Tenant 2 Greenlight deployment strategy
- 10. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. Managed service vs managed expectations IaaS PaaS SaaS Security? Managed by vendor Managed by you
- 11. GREENLIGHT FINANCIAL TECHNOLOGY, INC PROPRIETARY & CONFIDENTIAL. Summary What we learned - Managed service != SaaS - Security is a shared responsibility - Chose tools that fit need and strategy What we like about StackRox - Aligned with deployment strategy - Aligned with organizational strategy
- 12. Quick Poll: your security priorities
- 13. 13©2019 StackRox. All rights reserved. So … how do we make all this a bit easier?
- 14. 14©2019 StackRox. All rights reserved. Multi-factor risk profiling vs. list of vulnerabilities • test vs. prod • running as root • exposed to the Internet • suspicious processes Leverage Kubernetes context to prioritize risk
- 15. 15©2019 StackRox. All rights reserved. Line-for-line details on which controls are relevant to containers and Kubernetes Dashboard-level overview to zero in on non-compliant controls Export detailed Excel of each individual control test to meet auditors’ demands At-a-glance view of compliance
- 16. 16©2019 StackRox. All rights reserved. Leverage k8s network policies for segmentation • See active vs. allowed paths • Auto generate updated YAML • Apply directly or via DevOps processes Automatically reduce the blast radius
- 17. 17©2019 StackRox. All rights reserved. Next Steps • Learn more about Greenlight! • Check StackRox technical blog content • EKS security best practices • Kube config best practices • How EKS vs. AKS vs. GKE stack up • Highlights of latest Kube/Istio releases • See Kube-native controls in action • Request an online demo