From the course: Securing Azure Infrastructure with Bicep
Unlock this course with a free trial
Join today to access over 25,500 courses taught by industry experts.
Defining security as code - Azure Tutorial
From the course: Securing Azure Infrastructure with Bicep
Defining security as code
- [Instructor] When we talk about Security as Code, we're fundamentally shifting how we think about implementing security in our cloud environments. Instead of treating security as something we configure manually, after our infrastructure is deployed, we're embedding security controls directly into the code that defines our infrastructure and integrating security measures throughout our entire software development lifecycle. Security as Code, or SAC, is the practice of integrating security measures and policies directly into the software development lifecycle, often through automated checks and tests within the CICD pipeline. Instead of treating security as a separate phase, that happens after development, Security as Code with security throughout your entire development process. Think about how we've evolved software development over the years. We moved from manual testing to automated testing, from manual deployments to CICD pipelines, and from documentation that gets outdated to…