AI-Driven DevSecOps Part 2: Protecting Kubernetes Microservices with the Kong Ingress Controller

AI-Driven DevSecOps Part 2: Protecting Kubernetes Microservices with the Kong Ingress Controller

Source: YouTube · SANS Cloud Security · published Jun 24, 2026 · 58:31

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

This is part two of a series on AI in DevSecOps, focusing on using AI to evaluate microservices in a Kubernetes cluster and designing API gateway patterns using Kong Gateway 0:27.

Key Takeaways:
• The session builds on previous discussions about agentic coding and MCP versus skills debates, shifting focus to service evaluation 0:00.
• The primary goal is to utilize AI to assess microservices or private services installed within a Kubernetes environment 0:32.
• The presentation explores design patterns for configuring an API gateway to manage traffic to these services 0:42.
• Kong Gateway is highlighted as a specific example of an API gateway option, among many others available for this use case 0:46.

The discussion aims to provide practical insights into integrating AI-driven evaluation with robust API management strategies in modern infrastructure.

Sources:

  • 0:00 Introduction and context of the webcast series
  • 0:27 Transition to today's topic of AI evaluation
  • 0:32 Objective of evaluating microservices in Kubernetes
  • 0:42 Overview of API gateway design patterns
  • 0:46 Introduction of Kong Gateway as an example

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Welcome everybody to today's webcast. This is part two of our series which was kicked off by John Zeolla last month. If you missed that, we'll get you some links out to it as we go. John walked through some really interesting agentic coding concepts and ways to integrate agentic coding into DevSecOps and add some controls and some additional tools. We had some good MCP versus skills debates in that discussion. Today's topic is going to use AI in a different way, which is going to be to help us evaluate some microservices or private services that we've got installed in a Kubernetes cluster. And then we'll look at some design patterns for setting up an API gateway in front of those services, which in this example will be the Kong Gateway, which is one of many options that I'll give you at le…