Introduction

Learning Objectives

  • How to setup secure development environments
  • Building secure containers
  • Ensure secure best practices when running containers in production

Workshop structure

  • Workshop setup - Provision Cloud9 instance
  • Tooling install - install all the tools needed to work through this workshop and provision an eks cluster
  • Exercises
    • Development - Set up a secure Development environment with 3M and code commit signing
    • Build - Secure container building in this one
    • Pipeline - Scan code and containers for vulnerabilities and ensure secure practices are being followed
    • Run - Setup secure container running environment on Kubernetes

For an intro on Kubernetes please see