Why We Chose Docker?● Isolated environment, immutable

images● Easy to use and well documented API● Large community ● Very good ecosystem● Faster deployment● Portability ● Ideal for microservices

Where Are We Using/Not Using Docker?

Image Creation

How Do We Control Our Services?

● Our deployment system● Who authorized to deploy?● Type of operations (depoy,

restart, stop, start, revert, branch, etc….)

● Flow control● Operation audit● Feedback loop● Testing & Staging environments

Security & Control Measures

● MFA ● Image scanning & traffic

monitoring● Immutable images, local

repositories for internal dependencies

● Private registry hosted in our “DC”● Deployment flow control & Audit● Vault (for secrets clean code)● VPC & Private subnets● AWS SG