Shift Left Security for DevOps
This chapter will discuss the different patterns we can use to infuse security into the DevOps pipeline. Shift left security is required from the first stages of concept, development, and operations to ensure the application runs safely in hybrid multi-cloud environments. Threat and vulnerability management are critical aspects of security and compliance programs. Enterprises are incorporating security into their DevOps pipelines to create DevSecOps pipelines. This chapter will discuss the patterns for identifying vulnerabilities in the cloud resources across infrastructure, middleware, and applications and how to remediate them. Configuration management is another important topic we will cover, which specifies how to manage and control configurations for cloud resources to enable security and facilitate the management of risk.
In this chapter, we will cover the following topics:
- Secure engineering and threat modeling
- The DevSecOps pattern...
