From the course: Advanced Practices in Application Security
Unlock this course with a free trial
Join today to access over 25,500 courses taught by industry experts.
Cloud security automation and infrastructure as code (IaC) security
From the course: Advanced Practices in Application Security
Cloud security automation and infrastructure as code (IaC) security
Welcome to this video, Cloud Security Automation and Infrastructure as Code Security. Imagine if every infrastructure deployment in your organization automatically followed security best practices without requiring manual security reviews or post-deployment fixes. What if it were actually easier for developers to deploy securely than insecurely? That's exactly what we'll achieve with Infrastructure as Code Security Automation. In this video, we'll explore the fundamental security challenges with Infrastructure as Code and demonstrate how to solve them through automated policy enforcement. You'll see a live walkthrough of implementing security scanning with Chekhov, learn to identify and fix common IEC misconfigurations, and understand how to embed security controls directly into your infrastructure templates. By the end of this video, you'll be able to design and inherently secure infrastructure's code by implementing security-first design patterns, secure configuration templates, and…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.