Integrating Security into DevOps

Infrastructure as Code

One of the the main tenets of DevOps is “Infrastructure as Code”. This is accomplished by defining your infrastructure (servers, network, storage) in a programming language and via tools that deploy that infrastructure automatically.

By doing so, infrastructure can now benefit from software engineering practices like version control, code review, and unit testing. Building on this theme has been the introduction of “Security as Code”.

As expected, this is the automation of security checks and gates via code and integrated into the overall DevOps process again following software engineering practices.

Of course, saying it is easier than doing it, so we cover the major points and provide direction in this guide.