Develop and implement a successful DevSecOps approach
summary
Shows a concrete CI/CD pipeline using AWS CodeCommit, CodePipeline, CodeBuild, ECR scans and CodeDeploy to ECS/EKS that automatically fails build on high vulnerabilities and forces fixes before prod. Cites Amazon scale of 150+ million deployments/year and an example customer running ~1,500 deploys/day with WAF, GuardDuty, Inspector and Security Hub wired into compliance dashboards. Demo changes a site color, ECR finds a high vuln, pipeline blocks deploy until the base image is updated and a clean scan allows a blue/green release.
AI-written summary · about
chapters (13)
- 0:00Introduction and audience poll
- 1:27Meet Amy and her DevOps journey
- 4:34Team topologies and Amazon's model
- 6:39Amazon's two-pizza teams and microservices
- 11:17AWS pipeline tools and demo setup
- 13:43Live pipeline demo and security scan
- 18:18Deployment pipeline reference architecture
- 20:03Securing the pipeline and application
- 23:15AWS security services overview
- 25:19Security of vs in the pipeline
- 29:56Hootsuite's DevSecOps implementation
- 35:09Key takeaways and summary
- 36:58Q&A session
related talks
23mCI/CD at Scale: Best practices with AWS DevOps Services
23mCI/CD at Scale: Best Practices with AWS DevOps Services
43mBuilding a Secure DevOps Pipeline
59mDevOps for the Discouraged
37mA Secure Continuous Delivery Pipeline
28mMitigating OWASP Top 10 CI/CD with AWS
01h 02mTransforming IT pros to DevOps gurus: Ssecure your new tech stacks
36mThe Road To Being Rugged