Answers: <p>Both Azure and AWS will have any container images built off their network pushed to their repositories using https which will encrypt the transfer (e.g. <a href="https://aws.amazon.com/ecr/features/" rel="nofollow noreferrer">AWS ECR encryption</a>).  Both of these providers offer ways to encrypt the transfer of data into their non-container storage solutions (often via https) and then offer ways to encrypt the data at rest.  Once it is on the cloud provider deploying to k8s can all be done securely within their servers.</p>
  
Answers: CC BY-SA 4.0
Answers: 2019-10-30T18:56:48.690Z
Answers: 2019-10-30T18:56:48.690Z
Answers: Wesley Rolnick
Body: <p>Right now, we have locally hosted (across multiple Datacenters) artifactory and Bitbucket. We're at a halfway point between Jenkins and Bamboo (with Jenkins beginning to make more traction against Bamboo).</p>
  
  <p>However, we're currently going through the task of building out a hybrid cloud platform, which is essentially going to be K8s on top of a cloud provider such as AWS or Azure. However, I've no idea how to approach <strong><em>securely</em></strong> deploying code or artifacts over the internet. Nor can I seem to find a 'best practice' cheat sheet. </p>
  
  <p>Any pointers? </p>
  
Tags: <jenkins><deployment><artifacts><bamboo>
Title: Secure deployments of on-prem artifacts to cloud
UserDisplayName: Alistair Hardy
ThreadText: # Secure deployments of on-prem artifacts to cloud
  
  (Asked by: username_0 on 2019-10-30)
  
  Right now, we have locally hosted (across multiple Datacenters) artifactory and Bitbucket. We're at a halfway point between Jenkins and Bamboo (with Jenkins beginning to make more traction against Bamboo).
  
  However, we're currently going through the task of building out a hybrid cloud platform, which is essentially going to be K8s on top of a cloud provider such as AWS or Azure. However, I've no idea how to approach ***securely*** deploying code or artifacts over the internet. Nor can I seem to find a 'best practice' cheat sheet.
  
  Any pointers?
  
  **Tags:** jenkins, deployment, artifacts, bamboo
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2019-10-30. Score: 1
  
  Both Azure and AWS will have any container images built off their network pushed to their repositories using https which will encrypt the transfer (e.g. [AWS ECR encryption](https://aws.amazon.com/ecr/features/)). Both of these providers offer ways to encrypt the transfer of data into their non-container storage solutions (often via https) and then offer ways to encrypt the data at rest. Once it is on the cloud provider deploying to k8s can all be done securely within their servers.
  
  
  ---
  
  