Flipkart, having grown from a startup to India’s largest e-commerce platform, has continually evolved its security posture to meet the demands of a dynamic, large-scale infrastructure. From an initial state of open access to all developers, our cloud environments have steadily advanced, to a state of centrally orchestrated, timebound, audited and restricted production access.

Over time, our policies have adapted to the diverse needs of virtual machines, containers, and databases across public and private clouds. By balancing centralized policy enforcement with application-specific flexibility, we enable teams to tailor security controls while ensuring critical policies remain tightly governed by central teams.

Key innovations include role-based access control for SSH into virtual machines, databases, and Kubernetes clusters, all secured with two-factor authentication. These controls, coupled with centralized firewalls, monitoring and approval workflows, significantly reduce human errors while streamlining production access.

Key Takeaways:

• Understand how Flipkart’s security policies have evolved from basic controls to robust security with minimal impact on user convenience.
• Learn how Flipkart dynamically manages security across public and private clouds, virtual machines, and containers at scale
• Explore how application-specific configuration empowers team managers to tune security options, while centralized teams ensure compliance with company-wide policies.

Audience:

• Cloud Security Engineers, Developers: Design and build secure access to virtual machines, containers, and databases.
• Infrastructure/ Operations Teams: Focused on building secure, scalable infrastructures.
• Technically Curious: Those interested in the ongoing evolution of cloud security within a fast-growing organization.