Skip to main content
CPEBuddy
IaC Meets Reality: Engineering for the Cloud You Have

IaC Meets Reality: Engineering for the Cloud You Have

Source: YouTube · SANS Cloud Security · published Oct 30, 2025 · 26:05

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

[BLUF] This talk explores the practical challenges of implementing Infrastructure as Code (IaC) in complex, compliance-heavy environments with diverse teams. 0:07

Key Takeaways:
• The speakers operate within a small team managing dozens of development teams across different tech stacks, time zones, and cultures. 0:26
• Their environment is heavily regulated, requiring strict adherence to HIPAA, PCI, and SOC standards. 0:43
• The presentation focuses on the gap between theoretical IaC principles and their real-world application. 0:07

[Closing statement] The speakers aim to share lessons learned from navigating these constraints while adopting IaC practices.

Sources:

  • 0:07 Introduction to the topic of infrastructure code.
  • 0:26 Context about the team size and diverse development environment.
  • 0:43 Discussion of compliance requirements like HIPAA and PCI.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Thank you everybody for coming and thank you to the organization for having us. We are going to talk about infrastructure code specifically when it meets reality. But as this is a talk that comes from our personal experience first we need to give you some context about us. So Okay. Okay, this is us. We work in a small team between two and four people with different environment like really different. We had like dozens of development teams different tech stacks different time zones even like 10 hour of difference, different cultures like very diverse. And we work in a very compliance heavy environment subject to HIPAA, PCI, socks like Pokemon like catch them all. And we were embracing infra as code. Okay. But first let's introduce ourselves. I'm Andoni. I work as cloud security engineer at …