References
Refer to the following resources for more details about the topics that were covered in this chapter:
- Security in Development – The IBM Secure Engineering Framework: https://www.redbooks.ibm.com/redpapers/pdfs/redp4641.pdf
- AWS Well-Architected: https://aws.amazon.com/architecture/well-architected/
- Microsoft Threat Modeling Tool: https://docs.microsoft.com/en-us/azure/security/develop/threat-modeling-tool
- DevSecOps controls: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/secure/devsecops-controls
- OWASP Dependency-Check: https://owasp.org/www-project-dependency-check/
- SonarQube – Code Quality and Code Security: https://www.sonarqube.org/
- AWS provides a model for building an end-to-end AWS DevSecOps CI/CD pipeline with open source SCA, SAST, and DAST tools: https://aws.amazon.com/blogs/devops/building-end-to-end-aws-devsecops-ci-cd-pipeline-with-open-source-sca-sast-and-dast-tools/
- IBM – DevSecOps: https...
