How Duke Energy enforces cloud security at scale with Terraform & Vault, and 6 lessons

• Seven years ago, managing security and compliance was fairly straightforward at Duke Energy. • Most of the company’s applications ran on-premises. • Security teams had complete control over almost everything. • But when the 100-year-old, regulated utility moved to the cloud, all of that changed. • Enforcing security without hampering delivery speed became much more complicated. • In our conversation with Duke Energy, they told us about their requirements around maintaining speed under regulation.

Article Summaries:

• Seven years ago, managing security and compliance was fairly straightforward at Duke Energy. Most of the company’s applications ran on-premises. Security teams had complete control over almost everything. But when the 100-year-old, regulated utility moved to the cloud, all of that changed. Enforcing security without hampering delivery speed became much more complicated. In our conversation with Duke Energy, they told us about their requirements around maintaining speed under regulation. In this post, you’ll see how Duke Energy used infrastructure management standardization, policy as code, and

Sources:

• https://www.hashicorp.com/blog/how-duke-energy-enforces-cloud-security-at-scale-with-terraform-vault-6-lessons