From the course: DevOps Foundations: Infrastructure as Code

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Security and compliance as code

Security and compliance as code

From the course: DevOps Foundations: Infrastructure as Code

Start my 1-month free trial Buy for my team

Security and compliance as code

“

Infrastructure as Code changes how we build our infrastructure, but it also changes how we break things. With Infrastructure as Code, a single bad pattern can spread through your infra code like wildfire. The good news is that with IAC, security and compliance can be evaluated at the code level, and not just by scanning production infrastructure after the fact. Let's discuss creating security policies as code, so we get safer delivery that doesn't slow teams down. One thing relevant to security is context. For example, a public S3 storage bucket in a sandbox environment is probably not a big deal. But a public bucket in production containing sensitive data is a very big issue. Now, how can you tell the difference? Infrastructure as code is where much of that context is explicitly spelled out. The code itself tells us the intended environment, data classification, and exposure. Tools that understand these…

Contents