IAM Confused: Getting work done and keeping SecOps happy - Nic Vermande, Otterize

This talk explores the challenges faced by developers as they navigate AWS IAM policies and Kubernetes network policies during deployment. The speaker illustrates the experience of Otis, the first otter developer, who encounters obstacles from the security and compliance team trying to enforce strict access controls. As Otis adapts to these challenges, he learns to implement Kubernetes principles in a declarative manner, providing insights into best practices in cloud security and compliance within a DevOps framework. This session addresses key topics such as microservices architecture, container security, and the importance of balancing development speed with security measures.