Implementing DevSecOps
In the previous chapters, we covered hybrid cloud and multi-cloud architectures and security aspects. In this chapter, we will explain how to embed security as part of the development process – DevSecOps.
DevSecOps is much more than a technology or a product – it is a cultural change (as we will explain in this chapter) that aims to enable development and embed security as part of a development process.
DevSecOps is a software development approach that integrates security practices into the DevOps process. In this chapter, we will review the cultural change that is DevSecOps. We will then have an overview of the implementation of a secure continuous integration/continuous deployment (or delivery) (CI/CD) pipeline, and we will review some services from AWS, Azure, and GCP that can assist organizations in implementing DevSecOps.
In this chapter, we will cover the following topics:
- Introduction to DevSecOps
- DevSecOps best practices...
