What is DevSecOps?
Hackitect's playground
Oct 11, 2022 14:30
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Did you ever wonder what is the magical DevSecOps? It connects developers, security, and operations in one cooperative team. DevSecOps like DevOps is a methodology and cultural aspect of development and innovation.
DevOps tooling like Software composition analysis, SAST, DAST, IAST, and Runtime application protection baked in CI/CD developed by engineering with M-shaped skills make the real DevSecOps culture.
Cloud security automation like IaC deployments and scanning of IaC is a big part of today's practices. All of that goes hand in hand with SBOM (Software bill of materials) and IBOM (Infrastructure bill of materials)
A necessary part of DevSecOps is learning and automation. Especially scaled learning from each other in between the teams.
Resources used in the video :
https://cloudsecurityalliance.org/blog/2021/09/09/six-pillars-of-devsecops-series/
https://digital.ai/devops-tools-periodic-table - DevOps periodical table
https://dsomm.timo-pagel.de/ - DevSecOps maturity model.
My own infographics for explaining the important matter.
https://github.com/sottlmarek/DevSecOps - DevSecOps tooling library
https://aws.amazon.com/blogs/devops/building-end-to-end-aws-devsecops-ci-cd-pipeline-with-open-source-sca-sast-and-dast-tools/
---
Author: Marek Šottl
Web: https://www.sottlmarek.com
Twitter: https://twitter.com/sottlmarek
Connect with me: https://www.linkedin.com/in/mareksottl/
Subscribe: https://www.youtube.com/channel/UCy0S_HftNM7Fy0ksEOUHc-Q?sub_confirmation=1
Science & Technology
#aws
#amazon web services
#devops tips
#devsecops
#what is devsecops
#devops
#cloud devops
#cloud devsecops
#devsecops training
#devsecops masterclass
#devsecops explained
#amazonwebservices
#snyk
#sast
#dast
#iast
#rasp
#threatmodeling
#sca
#sbom