))
Demystifying Zero Trust: Key Policy Checks for Cloud Native Security with Zack Butcher
Manage episode 439333635 series 3533050
Content provided by TruStory FM. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by TruStory FM or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
Decoding Zero Trust Security for Cloud Native Environments
In this episode of Cyber Sentries, John Richards welcomes Zack Butcher, Founding Engineer at Tetrate, to explore the critical components of zero trust security for cloud native and microservice environments. Zack, with deep expertise from his time at Google and work with NIST, shares practical insights on achieving a zero trust posture.
John and Zack dive into the fundamental mindset shift required for zero trust - moving from implicit to explicit trust. They break down the five key policy checks that define runtime zero trust, and how these controls can enable identity-based segmentation. Zack illuminates how this approach allows organizations to boost assurance while strategically relaxing painful network-level constraints.
Questions we answer in this episode:
• What does Zero Trust really mean in practice?
• How can organizations adopt a Zero Trust mindset?
• What role does a service mesh play in Zero Trust?
Key Takeaways:
• Zero Trust requires making all trust explicit
• 5 key runtime policy checks define a Zero Trust posture
• Identity-based policies boost assurance and agility
Whether you're wrestling with Zero Trust definitions, microservice security, or cloud native challenges, this episode delivers a wealth of battle-tested wisdom. Zack's clear explanations and examples, combined with John's knack for extracting practical takeaways, make this a must-listen for anyone navigating the complex world of cloud native security.
Links & Notes
- Zack on LinkedIn
- Security Strategies for Microservices-based Application Systems (Sidebar has the A-D publications)
- A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments
- Tetrate Academy
- Learn more about Paladin Cloud
- Got a question? Ask us here!
- (00:04) - Welcome to Cyber Sentries
- (01:01) - Meet Zack
- (04:55) - Reflecting on the Journey
- (05:46) - Deep on Security Aspect
- (09:52) - Zero Trust and Definitions
- (15:35) - Consensus
- (18:09) - Availability and Assurance
- (22:28) - Driving Growth
- (25:44) - How AI Can Be Used for Security
- (30:07) - Links and Finding Zack
- (30:36) - Wrap Up
17 episodes
Share
