EP165 Your Cloud Is Not a Pet - Decoding 'Shifting Left' for Cloud Security

Topics covered:

• You’ve done a BlackHat webinar where you discuss a Pets vs Cattle mentality when it comes to cloud operations. Can you explain this mentality and how it applies to security?
• What in your past led you to these insights?  Tell us more about your background and your journey to Google.  How did that background contribute to your team?
• One term that often comes up on the show and with our customers is 'shifting left.'  Could you explain what 'shifting left' means in the context of cloud security? What’s hard about shift left, and where do orgs get stuck too far right?
• A lot of “cloud people” talk about IaC and PaC but the terms and the concepts are occasionally confusing to those new to cloud. Can you briefly explain Policy as Code  and its security implications? Does PaC help or hurt security?