Empower innovation and agility with security in DevOps
summary
A working multi-account, multi-region deployment pipeline (the DPRA deployment pipeline reference architecture) is built with AWS CDK and CodePipeline/CodeBuild, signs artifacts with KMS, enforces least-privilege IAM, and runs SAST (CodeGuru), SCA (Trivy producing an SBOM), performance tests (JMeter), and DAST (OWASP ZAP). The live demo completes and the ZAP scan reports OWASP ZAP DAST found 4 medium alerts, letting the pipeline continue under a configurable policy.
AI-written summary · about
chapters (14)
- 0:00Introduction to devsecops
- 2:16Devops and security culture
- 4:37Cultural and process tenets
- 7:01Pipeline metrics and goals
- 9:07AWS security ownership
- 12:23Securing the pipeline
- 15:07Security analysis integration
- 17:09Reference architecture overview
- 22:16Demo application overview
- 25:02Pipeline stages and tools
- 34:40Security scanning demonstration
- 40:02Getting started with DPRA
- 42:38Deep dive into pipeline code
- 51:30Conclusion and resources
related talks
37mDevelop and implement a successful DevSecOps approach
23mCI/CD at Scale: Best Practices with AWS DevOps Services
38mAccelerating innovation through AWS Cloud technology
23mCI/CD at Scale: Best practices with AWS DevOps Services
26mIntelligent Deployment Pipelines
05mDelivery-Transformation DevOps-Pipeline
25mDecoupling DevSecOps from CI/CD Pipelines
15mDevopsec: Rapid Security in the Cloud with AWS and CIS