Two Lies and a Truth: An Angsty Journey to the Cloud

As Liberty Mutual announced the go-live date for placing 60% of its workloads in the cloud, a stunned security architect stared in disbelief. A few years and several lost hair follicles later, Liberty Mutual presented its RADAR automated security governance tool during AWS re:Inforce, the inaugural AWS security conference in 2019. In retrospect, the presenter thought of the game "two truths and a lie," and how the opposite seemed to be true regarding the promise of the AWS public cloud. Come hear the lessons learned as well as the details surrounding the development of a custom security governance tool and why built-in AWS tools didn't suffice.