DevSecOps in Kubernetes

The talk is about how to or how to not implement cloud native projects in highly regulated environments.

24.5.2024

Muhammad Ihsan Haikal Sukmana

2 min

Kubernetes Security

DevSecOps in Kubernetes

Table of Contents

Contributors

Muhammad Ihsan Haikal Sukmana

Muhammad Ihsan Haikal Sukmana

facebook social icon

linkedin social icon

The talk is about how to or how not to implement cloud-native projects in highly regulated environments. You will get some insights into real-world projects where Kubernetes is used to run the latest applications and control critical infrastructure in Germany and Europe.The examples include container gardening and how to convince developers to deliver minimal and compliant containers, onboarding security team members to get the Sec into DevOps, running CI/CD pipelines with 3rd party vendors, air-gapped cloud-native architectures, and running clusters with the highest availability.

‍

Watch the talk here.

facebook social icon

linkedin social icon

Read Other Interesting Blog Posts

The Best of Mitigant Blog Articles in 2023

Read Mitigant's top 10 most-performing blog posts in 2023 about cloud-native security and cyber resilience.

series: best of mitigant

Leveraging Adversary Emulation for Effective Cloud Forensic Analysis

December 20, 2024

Adversary emulation provides a practical approach for enhancing cloud forensic analysis for security operation teams. This blog post offers valuable insights on using these approaches to supercharge cloud incident readiness.

Threat Detection, Adversary Emulation

MITRE ATT&CK Cloud Matrix v.16: New Techniques & Why You Should Care Part I

November 20, 2024

The MITRE ATT&CK Framework v.16 was released in October 2024 with over 19 new techniques. This blog discusses two new Cloud Matrix sub-techniques: Modify Authentication Process: Conditional Access Policies (T1556) and Resource Hijacking: Cloud

MITRE ATT&CK, Threat Detection, series: mitre attack cloud matrix

The Best of Mitigant Blog Articles in 2025

January 8, 2026

This article highlights our top blog articles in 2025, from AI security to Cloud Attack Emulation, including research referenced in Splunk's Security Analytics Story and pioneering Adversarial Exposure Validation.

series: best of mitigant

Cyber Resilience

Leveraging Security Chaos Engineering for Cloud Cyber Resilience - Part I

In today's rapidly evolving threat landscape, cyber resilience is crucial for organizations to effectively defend against and thwart...

Security Chaos Engineering, series: cyber resilience sce

Cyber Resilience

MITRE ATT&CK Cloud Matrix: New Techniques & Why You Should Care. Part I

February 27, 2024

The MITRE ATT&CK Framework has become an essential aspect of modern cybersecurity architecture. The framework provides critical ...

MITRE ATT&CK, Threat Detection, AWS Security, series: mitre attack cloud matrix

Cloud Attack Emulation 101: Shallow Waters

October 23, 2025

In Part I of this series, we explored why adopting the adversary mindset matters. In this second part, we explore how cloud attack emulation works, examine fundamental attack building blocks, and outline how to evolve an effective security strategy.

Cloud Attack Emulation, Adversary Emulation, series: cloud attack emulation 101

The Best of Mitigant Content in 2024

January 5, 2025

This article highlights our website's top 10 most performing content that resonated most with our audience. The list includes blog articles and webinar sessions ordered from the most performing content.

series: best of mitigant

Feature Release

Feature Release: Leveraging AI for Adversary Emulation

November 2, 2025

We are excited to announce three groundbreaking features that represent a significant leap forward in Cloud Attack Emulation & offensive security: AI-Powered Attack Report Summarization, AI-Powered Attack Recommendations, and Bring Your Own Role.

Adversary Emulation, Feature Release

Cyber Resilience

Super Charging Cloud Detection & Response with Security Chaos Engineering

Effective Cloud Detection & Response (CDR) strategies are imperative for promptly identifying and responding to cloud security events.

Security Chaos Engineering, Threat Detection

Cyber Resilience

Demystifying Security Chaos Engineering - Part II

The first part of this blog series discussed the origins of chaos engineering and how its application to cloud-native security could...

Security Chaos Engineering, series: demystifying sce

Cyber Resilience

Security Chaos Engineering 101: Fundamentals

This article discusses the positioning of Security Chaos Engineering (SCE) as a security engineering discipline, encouraging cybersecurity professionals to leverage its inherent benefits.

Security Chaos Engineering, series: security chaos engineering 101

Cyber Resilience

Demystifying Security Chaos Engineering - Part I

We are witnessing an upsurge of high-profile attacks in recent times, and the attacks that impacted prominent companies are the most...

Security Chaos Engineering, series: demystifying sce

Cyber Resilience

Security Chaos Engineering 101: Getting Your Hands Dirty

Security Chaos Engineering (SCE) is a novel approach to cyber security; its core fundamentals are based on the principles of chaos engine

Security Chaos Engineering, series: security chaos engineering 101

Cyber Resilience

Defeating Ransomware Attacks With Security Chaos Engineering - Part I

The rate of ransomware attacks has rapidly increased in recent times to an alarming 105% so much that the last two years are dubbed...

Security Chaos Engineering, series: ransomware sce

Cyber Resilience

Security Chaos Engineering 101: The Mind Map & Feedback Loop

This is the third article in the Security Chaos Engineering 101 series. The first article laid the foundation for considering Security...

Security Chaos Engineering, series: security chaos engineering 101

Cyber Resilience

Defeating Ransomware Attacks With Security Chaos Engineering - Part II

The first blog post in this 2-part series discussed ransomware’s impact, existing countermeasures, and limitations of these countermeasur

Security Chaos Engineering, series: ransomware sce

Cyber Resilience

Leveraging Security Chaos Engineering for Cloud Cyber Resilience - Part II

The first part of this blog series discussed the difference between cyber resilience and cyber security and decoupled the concept of...

Security Chaos Engineering, series: cyber resilience sce

Emulating and Detecting Scattered Spider-like Attacks

This article shows how to leverage Threat-Informed Defense to effectively tackle cloud threat actors, e.g., Scattered Spider. Practical attacks & appropriate defense are demonstrated using Mitigant Cloud Attack Emulation & the Sekoia SOC Platform.

Threat Detection, Adversary Emulation

Rethinking Cloud Security Strategies with Adversarial Exposure Validation

December 7, 2024

Gartner recently introduced Adversarial Exposure Validation (AEV) as an approach that empowers organizations to focus on validated exposures rather than chasing unimportant vulnerabilities. This article dives deep into AEV for cloud infrastructure.

Cloud Attack Emulation, Adversary Emulation

Cloud Attack Emulation 101: Getting Started

This blog post provides foundational information on leveraging Cloud Attack Emulation for security effectiveness by adopting the attacker's mindset and playing the devil's advocate to detect security flaws and blind spots.

Cloud Attack Emulation, Adversary Emulation, series: cloud attack emulation 101

Cloud Attack Emulation & Detection Engineering: A Match Made in Heaven

February 9, 2024

Cloud Attack Emulation and Detection Engineering are revolutionizing how we tackle cyber threats in cloud infrastructure...

Threat Detection, Cloud Attack Emulation, AWS Security

Cloud Compliance

Is Your Cloud NIS2 Ready?

February 22, 2024

Ensuring the cloud is secure, compliant, and resilient is one of the responsibilities of cloud customers. One of the upcoming...

Compliance

Cyber Resilience

Navigating the Trifecta: Balancing Cybersecurity, Compliance, and Cyber Resilience

February 26, 2024

Cybersecurity teams have a single goal: to keep the business safe from malicious entities. However, the path to achieving this goal is...

Compliance, Security Chaos Engineering

Cyber Resilience

Cloud Attack Emulation: Enhancing Cloud-Native Security With Threat-Informed Defense

Speed and agility are essential for effectively achieving cybersecurity goals in this cloud-native era. High-performing engineering ...

Cloud Attack Emulation, Threat Detection

Cloud Compliance

What is Continuous Cloud Compliance?

Cloud infrastructure has become the operating system for digital transformation initiatives. Enterprises are rapidly adopting cloud...

Compliance

Drift Management in Cloud Infrastructure

Managing cloud drifts is one of the challenges faced by cloud-native enterprises. While it might be easy to orchestrate complex cloud...

Compliance

Why Securing Your Cloud-Native Infrastructure is Necessary

Cloud-native adoption has risen in the past few years, which powers today's digital IT infrastructure. According to Flexera's State of...

Compliance

Cloud Compliance

CIS Benchmarks for Cloud Infrastructure Security Compliance

You have probably seen or read the term CIS benchmarks when searching for cloud security compliance on the Internet. CIS benchmark is...

Compliance

Cloud Compliance

Why You Might Need BSI C5 Compliance for Your Cloud Infrastructure

With numerous cloud security best practices and standards available on the market, Germany's Federal Office for Information Security...

Compliance

Cyber Resilience

MITRE ATT&CK Cloud Matrix: New Techniques & Why You Should Care - Part II

The MITRE ATT&CK Framework v.14 was released in October 2023 with over 18 new techniques. In the first part of this blog,

MITRE ATT&CK, Threat Detection, AWS Security, series: mitre attack cloud matrix

Cloud Attack Emulation: Democratizing Security Operations in the Cloud

Security operations are the nerve of organizational cybersecurity efforts. An organization’s security policy typically aims to keep it safe by implementing preventive, detective, and recovery measures. Security operations ensure this ambition by s...

Cloud Attack Emulation, Cloud Penetration Testing

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

Amazon Bedrock's Achilles heel is the adoption of S3 as a RAG data source, leading to several GenAI attack vectors, including data poisoning, denial of service & S3 ransomware. This article delves into these attack vectors, detection, and mitigation.

AI Security, AI Red Teaming, AWS Security

Feature Release

Feature Release: Adversary Emulation Meets GenAI & More

We are excited to release powerful features to the Mitigant Security Platform: Attack Emulation for AWS GenAI services, Mitigant API, and support for AWS Organizations. These features empower organizations to use GenAI cloud services securely.

AI Security, Feature Release, AWS Security

Demystifying Amazon Bedrock LLMJacking Attacks

October 13, 2024

LLMJacking attacks are increasingly targeting GenAI workloads on Amazon Bedrock. Cybercriminals illegally gain access to Large Language Models during LLMJacking attacks and resell this access via chatbots for profit.

AI Security, Threat Detection, AWS Security

Exploring the Threat Landscape for GenAI Cloud Workloads

October 28, 2024

With GenAI adoption rising significantly in various sectors over the past years, the threat landscape associated with GenAI will also evolve rapidly. Learn more about what security challenges can potentially threaten the cloud GenAI workloads.

AI Security, AWS Security

Feature Release

Feature Release: January 2025

January 30, 2025

We are thrilled to introduce a range of new features to the Mitigant Platform: Attack-as-Code, Attack Scheduler, Kubernetes Vulnerability Prioritization, and DefectDojo Integration.

Feature Release, Cloud Attack Emulation, Kubernetes Security

Feature Release

Feature Release: Cloud Attack Emulation for Azure

We are excited to announce the release of Mitigant Cloud Attack Emulation for Azure, a feature that has been popularly requested. We are thrilled to empower organizations using Azure with seamless cloud adversary emulation.

Cloud Attack Emulation, Feature Release, Azure Security

Demystifying The Most Pervasive Cloud Attack Techniques

Red Canary recently released the 2025 Threat Detection Report. This article discusses the most prevalent cloud attack techniques discussed in the report, including further insights and practical countermeasures for organizations.

Threat Detection, Cloud Attack Emulation, AWS Security

Navigating The Storm: Understanding the Potential Threat Landscape of Cloud GenAI Services

Prepare for the rapidly evolving cloud GenAI workload's threat landscapes with this blog post in collaboration with European Champions Alliance

AI Security, AWS Security

Feature Release

Feature Release: Multi-Cloud Attack Emulation

We are excited to announce several features recently added to the Mitigant Cloud Security Platform. Multi-cloud attack emulation is a key feature, enabling seamless orchestration of attacks across AWS and Azure.

Cloud Attack Emulation, Feature Release, AWS Security, Azure Security, Kubernetes Security

Ultimate Combo: Cloud Attack Emulation meets Microsoft Sentinel

This article delves into the powerful synergy between Microsoft Sentinel and Mitigant Cloud Attack Emulation. Together, these cloud-native security products form an ultimate combo, empowering proactive detection and response.

Threat Detection, Azure Security

Mitigant Attack Builder: Custom Cloud Attacks in Seconds

November 21, 2025

Mitigant Attack Builder empowers defenders to build cloud attacks within seconds, enabling production-ready security tests without sacrificing time and quality.

Cloud Attack Emulation, Feature Release

CSPM Scans Are Not Cloud Penetration Tests: Understanding the Critical Differences

December 9, 2025

This blog addresses the misconception that CSPM scans are equivalent to cloud penetration tests. Understanding the critical differences between configuration auditing and security validation is essential for a robust cloud security posture.

Cloud Penetration Testing

Introducing the Mitigant Threat Catalog: From Static Descriptions to Dynamic Executions

February 13, 2026

We are launching (1) Mitigant Threat Catalog, a free, interactive resource that transforms MITRE ATT&CK cloud techniques into executable CLI commands, (2) The Cloud Attack Language, a format for effectively constructing complex, multi-step attacks.

Threat Detection, series: threat catalog

Mitigant Threat Catalog: 61 Techniques & 12 AWS Services Added

Mitigant Threat Catalog massive update! We added 61 techniques & 12 AWS services, totalling 91 techniques across 32 AWS services. The catalog now includes techniques across 11 MITRE ATT&CK tactics.

Threat Detection, AWS Security, series: threat catalog

Feature Release

Feature Release: Cloud Penetration Testing with Prowler and Wiz Integrations

Mitigant Cloud Pentests now integrate with Prowler and Wiz, enabling seamless validation of CSPM findings through real, safe attack execution that surfaces SCP-aware privilege-escalation paths, fully visualized and mapped to compliance benchmarks.

Cloud Penetration Testing, Feature Release

Effective Red Teaming in the Agentic Era: Amazon Bedrock (Part I)

AI Red Teaming plays a central role in AI quality of service, ensuring end users are not harmed or frustrated by malicious output. This article provides practical AI Red Teaming guidance for Amazon Bedrock.

AI Security, AI Red Teaming, AWS Security, series: bedrock red teaming

AgentCore or AgentSore: Cross-Agent Privilege Escalation in Bedrock AgentCore

Bedrock AgentCore starter toolkit ships an overly permissive IAM role that attackers exploit to compromise critical AgentCore components. This article discusses practical exploitation of these weaknesses, detection opportunities & countermeasures.

AI Security, AI Red Teaming, AWS Security

Effective Red Teaming in the Agentic Era: Amazon Bedrock (Part II)

October 8, 2026

The AI attack surface spans beyond models; other components are similarly important and must be secured. This second part of the Bedrock Red Teaming blog series provides further practical guidance on means to continuously test Bedrock components.

AI Security, AI Red Teaming, AWS Security, series: bedrock red teaming

Expose Threats with AI-Powered Adversary Emulation

Safely run controlled cloud attacks and validate your real defensive capabilities in minutes. No credit card required.

Get Demo Environment

Start 30-day Free Trial