Infrastructure-as-Code Security: Why, What, and How
|
In this talk, you’ll learn about common IaC risks and best practices for securing infrastructure at scale using policy-as-code in both in build-time and run-time.
Planning, provisioning, and changing infrastructure are vital to rapid cloud application development. Incorporating infrastructure-as-code into software development promotes transparency and helps prevent bad configurations upstream. It also presents another layer of risk. In this talk, you’ll learn about common IaC risks and best practices for securing infrastructure at scale using policy-as-code in both in build-time and run-time.
Author Name: DevSecCon
Author Description:
DevSecCon is the global community dedicated to DevSecOps to help implement security in the overall development process. If you’re a security enthusiast & you want to learn more about how to better secure your team, then check out our community & resources.
User Reviews
Be the first to review “Infrastructure-as-Code Security: Why, What, and How”
Related Products
Microsoft 365 Messaging: Implementing a Hybrid Configuration and Migration
This course will teach you how to prepare for the MS-203 certification exam, and to learn how to migrate the Exchange server to the Exchange online environment or a hybrid solution.
Exam Alert: Design Business Continuity in Microsoft Azure
Preparing for an exam can be scary and confusing. This course will teach you what to expect and how to maximize your learning and be successful.
Securing Access to Microsoft Azure Storage
This course provides detail on the options available to secure the access to data services available in Azure Storage accounts.
Securing Microsoft Azure Data Access Endpoints
This course provides detail on the technologies and options available to secure the endpoints of data services that are available in Azure.
Leveraging Network Interconnection Options on the GCP
This course focuses on network interconnections where one or both of the connected networks are on the GCP. This includes understanding peering and interconnect as well as how shared VPCs and static and dynamic VPN are implemented.
Preparing for Your Professional Cloud Security Engineer Journey
This course helps learners prepare for the Professional Cloud Security Engineer (PCSE) Certification exam.
There are no reviews yet.