DevSecOps Best Practices: Secure Everything You Have
summary
Practical DevSecOps guidance for securing cloud-native systems on AWS, covering how to define security requirements for architectures, apply AWS security services and concepts, and manage risks for cloud solutions. Includes concrete best practices and patterns for integrating security across development and operations in cloud environments.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:06DevSecOps mindset
- 3:33Threat modeling
- 5:20IDE security plugins
- 7:27Static application security testing
- 9:13Dependency and secret scanning
- 10:58Supply chain attack prevention
- 12:04Dynamic application security testing
- 13:28Cloud configuration checks
- 15:16Penetration testing and API security
- 16:37Operate and monitor
- 19:46Threat intelligence and incident response
- 20:49Security mindset
- 22:12Breaking silos
related talks
47mCloud Computing: DevSecOps — security all the way
49mDevSecOps but Secure! Developing More Securely, Continuously
25mDevSecOps: Security Automation at Scale
38mDevSecOps - what does it mean and where is it taking us?
29mPragmatic Security Automation and DevSecOps in the Cloud
31mDevSecOps, or How to Integrate Security into DevOps Practices
50mSeamless Integration of Security Practices into the DevOps Pipeline
53mAchieving End-to-end Security on AWS