Cloud Foundry Summit 2016

Running Cloud Foundry in a compliance and security focused environment (Diego Lapiduz and Bret Mogilefsky, cloud.gov - 18F). cloud.gov has adopted Cloud Foundry to host applications for government users in the cloud, tackling one of the core impediments to government service delivery today. In the process of doing that we had to turn up the security of the platform, write composable compliance documentation, and build tools to automatically scan the system and tenant applications. These processes and tools have been built in the open so other members of the community can contribute to them and reuse them in other contexts. 

This talk will show how Cloud Foundry and Bosh made it easy to centralize security and enable redeployment of the whole platform. We will also talk about how we built reusable and composable compliance documentation that can be shared publicly.