Code-to-cloud security: How Palo Alto propels security through a one-click solution

SECURITY

Even though developers are moving fast, security is not moving in tandem. In fact, it’s not keeping up with the tech industry’s velocity and innovation, as evidenced by ongoing cybersecurity hacks.

Through Prisma Cloud, Palo Alto Networks Inc. provides a unified approach to cloud security for ultimate protection of AWS infrastructure, no matter where an enterprise is in its cloud journey, according to Ankur Shah (pictured), senior vice president and general manager at Palo Alto.

“There are over 26 million developers, less than 3 million security professionals,” Shah stated. “So security teams need just a simple one-click solution. They can sleep at night, keep the bad actors away. And that’s where Palo Alto Networks has been innovating in this area … AWS is one of our biggest partners.”

Shah spoke with theCUBE industry analysts Dave Vellante and Lisa Martin at AWS re:Invent, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed why comprehensive security is required in the cloud and how Palo Alto and Prisma Cloud fit in the picture. (* Disclosure below.)

How CI/CD security complements Prisma Cloud

Based on Palo Alto’s mission of building a single code-to-cloud platform, Shah believes the complicated software supply chain had to be revamped. That’s why CI/CD security came in handy.

“We need a platform player who can really deliver a unified cohesive platform solution for our customers because they’re sick and tired of buying point product,” he noted. “So our mission has been to deliver that code-to-cloud platform, and supply chain security was a missing piece. That’s why we acquired that for supply chain security, otherwise known as CI/CD security.”

Since Prisma Cloud is a cloud-native application protection platform, or CNAPP, it presents cloud security posture management, workload protection and cloud code security. Therefore, it enhances security through a shared responsibility model by foregoing point products, according to Shah.

“While AWS will guarantee securing the infrastructure layer … everything that is built on top of it — the new machine learning stuff, the new application, the new supply chain applications that are developed — that’s the responsibility of the CISO,” he said. “And that’s why we’ve always taken a platform approach where customers and the systems don’t have to worry about it.”

Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of AWS re:Invent:

(* Disclosure: Palo Alto Networks Inc. sponsored this segment of theCUBE. Neither Palo Alto nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE