Elevate your enterprise data technology and strategy at Transform 2021.
Netflix’s crazy cloud engineers are at it again — this time with a new open-source tool to optimize the company’s use of Amazon’s public cloud.
The goal is to ensure that Netflix stays secure as several engineers with different accounts change configurations for different parts of Netflix atop Amazon Web Services.
Hence the development Security Monkey, which began in 2011.
“We needed a way to understand how AWS configuration changes impacted our security posture,” Jason Chan, Kevin Glisson, and Patrick Kelley of Netflix’s cloud security team wrote in a blog post about the project. “It was also critical to have access to an authoritative configuration history service for forensic and investigative purposes so that we could know how things have changed over time. We also needed these capabilities at scale across the many accounts we manage and many AWS services we use.”
Netflix stands out as one of the most high-profile companies that depend heavily on Amazon’s cloud. It also gets props for sharing its inventions with the rest of the world under open-source licenses alongside a handful of other companies, like Airbnb and Pinterest.
With Security Monkey, an admin at a company running applications on AWS can check out historical information about configurations, as well as issues that meet certain criteria. And the person can explain why a certain possible vulnerability is acceptable.
VentureBeatVentureBeat's mission is to be a digital town square for technical decision-makers to gain knowledge about transformative technology and transact. Our site delivers essential information on data technologies and strategies to guide you as you lead your organizations. We invite you to become a member of our community, to access:
- up-to-date information on the subjects of interest to you
- our newsletters
- gated thought-leader content and discounted access to our prized events, such as Transform 2021: Learn More
- networking features, and more