Chapter 14: Security in the DevOps Process with DevSecOps

So far in this book, we have discussed in detail the development-operations (DevOps) culture as well as the DevOps tools that will facilitate communication and collaboration between developers and operations people (information technology-operations, or ITOps).

However, in this union, we have noticed that a very important aspect is often missing, which is security. Indeed, continuous integration/continuous deployment (CI/CD) pipelines and infrastructure as code (IaC) allow faster deployment of infrastructure and applications, but the problem is that to deploy faster, we do not include security teams, which causes the following:

• Security teams block or slow down deployments and therefore lead to longer deployment cycles.
• Security problems are detected very late in the infrastructure and in applications.

This is why, for some time now, security has been included in the DevOps culture by becoming a development...