Applying DevSecOps to AWS, Azure, and GCP
In the previous sections, we discussed the DevSecOps principles and how the pipeline is built with embedded security. In this section, we will look at the best practices of applying DevSecOps to the major public cloud platforms, that is, AWS, Azure, and Google Cloud Platform (GCP).
Working with DevSecOps in AWS CodePipeline
Before we start exploring DevSecOps in AWS, we need to understand that deployments in AWS should be based on the principles of the Cloud Adoption Framework (CAF). That framework covers specific security tasks and responsibilities, grouped into the four categories or principles for enterprise security that we discussed in Chapter 11, Understanding Security in DevOps:
- Prevention
- Detection
- Correction
- Direction
Note
AWS refers to these principles with different terminology for correction and direction. In CAF, these are subsequently called detective and responsive.
AWS offers native solutions...