- Welcome to 'This is My Architecture'.
I am Hawn and today I am joined by Bindi from GoDaddy.
Welcome.
- Hey, thanks for having me.
- Before we go into your architecture, can you tell us a little bit about GoDaddy?
- Sure.
At a very high level, GoDaddy empowers our everyday entrepreneurs
to live out their dreams,
so that they can focus on the products that they're selling to their customers,
and we can take care of the business side.
- Got you.
So, with that security must be in your DNA?
- Absolutely.
I mean, in order for us to remain trusted partners for our everyday entrepreneurs,
it's like security has to be a part of our DNA.
And that means that we have to put it into consideration
for every design element that we talk through.
- Got you.
With that, how do you implement that in your environment?
- Absolutely.
Maybe we can walk through an example.
As a user, if they say,
“Hey, I want to create an application in our public cloud environment.”
They'll go to this thing here called a public cloud portal.
And that's really where they start their journey.
- So in that portal, what does it do?
Yeah, so it gives them full visibility into what stage they're in
before they can take production traffic in the cloud.
That'll go through a lot of that cloud readiness review,
which is another name for the process that they walk through,
is based on AWS, as well protected,
which is where we took our jumping off point.
It's going to go through your application security, your security,
your compliance, your privacy,
and several different aspects to be able to create this environment that says,
here's my project, what organization do I need to be a part of?
We have three organizations that they can select from.
And based off of that, they'll get seven accounts created
before they're even ready to take production.
So, in that up to six of those accounts are non-production accounts
where they can be in Dev, Dev private, et cetera,
completely isolated, and then one CI/CD account,
which is the only account that I can reach in and do deployments.
- As a solution architect, what are some of the best practices
that we need to consider within our design?
- Absolutely.
So, if we look at this and say that this is account A,
and this is account B,
this line here.
Let’s say in account A, there's some sort of vulnerability that was exploited,
because of these account boundaries, essentially,
you can consider this account isolated.
If we need to pull this account
and say, “Hey, we need to run forensics on it.”
You can consider it a contained environment for that vulnerability.
We can run forensics on it and even detonate it if needed,
reducing that blast radius.
So it wouldn't actually affect account B where we can then rebuild account A.
- So how are you preventing that lateral movement?
- VPC peering. We don't allow that.
If we need to have communications, we have either direct connect available
if they need to speak to your on-prem services,
or where you utilize our NAT gateway.
- Got you.
And with that, I see that you have EKS,
do you do some level of rotations?
We do.
Within EKS we have node rotations that happen every 24 hours.
They have to rebuild every 24 hours based on our Golden AMI
that has all the latest security patches,
all the latest security features, right?
So worst case scenario is a threat actor exploits vulnerability
or zero day or something,
they can only live up to 24 hours before everything is broken down
and built backup from the latest and greatest.
So, with those node rotations, and this isolation in place
that really allows us to contain and put security best practice in place.
Additionally, on that account level, we do have run about 80 checks every four hours
that says, “Are you sure you're not doing VPC peering?
What are your vulnerability scans? What are your configurations?
Are you rotating off of that Golden AMI on that ongoing basis?”
So that really allows us to strengthen our security posture.
- Awesome.
So, through node ration to always have the latest OS and when you're deploying
and also providing that account boundary and isolation to reduce the blast radius
really encompasses that zero trust environment?
- Yes, absolutely.
- Awesome.
Well, thank you so much for going over your architecture.
That is amazing, how you're able to enforce these best practices
so that you can be this trusted partner for your customers.
So thank you for that.
- Absolutely. Thank you so much.
- Thank you for watching, 'This is My Architecture'.