The DevSecOps pattern
Let’s get started!
Problem
How can we incorporate security into the development and operations phases?
Context
Cloud applications are developed, deployed, and managed seamlessly by bringing together development and operations. This enables enterprises to incorporate feedback from application end users as well as push out new features and functionality.
In the earlier development model, security was incorporated at the end of the application development phase. But when application code is continuously updated and deployed, security needs to be incorporated from the early stages of development to ensure it is running on a safe platform and is free from vulnerabilities. The enterprise needs to evaluate the operational risks, while the business owners need to be upraised about the same.
The security team can do security testing to ensure there are no vulnerabilities or weaknesses in the system before promoting the application to production...