Summary
In this chapter, you grasped the methodologies that enable writing secure code, which is essential to how modern cloud-native applications are written. You came to know the phases of the SDLC and elements of the STRIDE threat model from an exam’s perspective. You also learned that to design software code that is largely free of security flaws, it is essential to adopt a comprehensive strategy that includes the following:
- Adopting the SSDLC and threat modeling techniques, such as PASTA or STRIDE, to identify and mitigate potential security issues throughout the development process.
- Using the DevSecOps approach to ensure that security is an inherent component of the software development process—from development to deployment—by integrating security considerations into the CI/CD pipeline.
- Implementing access control and encryption to safeguard critical pipeline data, such as access keys and passwords.
- Using secrets management to store,...
