Скачать или смотреть Best Practices For Infrastructure as Code With Firefly’s ValidIaC

Firefly (https://www.gofirefly.io/), the cloud asset management solution, scans the entire cloud footprint and Kubernetes cluster and codifies everything to IaC. Firefly recently launched its first open source tool ValidIaC, which helps to validate best practices for Infrastructures as Code (IaC).

“We built this open source tool because Terraform is challenging. I guess that you heard about the Shift Left approach. It means that instead of creating resources in the cloud, we use IaC to deploy them. And before the Shift Left approach, the only way to detect security issues or cost problems was only by using third-party tools, such as a CSPM (Cloud Security Posture Management) or CloudHealth,” says Sefi Genis, CTO and Co-Founder at Firefly, on the latest episode of TFiR Let’s Talk.

00:00 Intro
0:30 Intro to the company
1:06 Challenges for identity management in Cloud
2:14 Culture and people aspect of asset management
3:22 Why Firefly releases its code into Open Source
4:14 Are you using any code from ValidKube
4:41 What is the direct impact of ValidIaC on developers
6:35 How are you offering commercial support for the project
7:32 How easy is it to use ValidIaC
8:01 Why developers should learn about IaC tools
8:46 What other challenges are there for IaC
9:28 Ending