Rolling out a test CI/CD workflow for DevSecOps
To put things into practice, we’ll deploy a test pipeline in an AWS account to demonstrate the usage of various tools (AWS and open source) from a security perspective. More concretely, let’s consider a requirement that almost every modern software development team needs to address – securely delivering Docker images at scale. In real-life scenarios, you should consider deploying the output artifacts (Docker images) from such workflows to dedicated test environments where DAST investigations can be performed. This is particularly useful before deploying the image into subsequent environments (pre-prod, prod, and so on).
To have a visual mind map of what we are going to build, let’s dive into the details with an architecture diagram that highlights the end-to-end flow.
Understanding the target architecture of the DevSecOps pipeline
A pipeline definition in AWS CodePipeline consists of at least two stages...