Securing development and operations using automation

Automation is a must in DevSecOps. At a minimum, we should consider automating the following processes:

• Version Control
• Continuous Integration
• Continuous Testing
• Configuration Management & Deployment
• Continuous Monitoring

We talked about containers, side cars and orchestration. Clouds offer tools to also automate this as a completely managed service. Containerization with automated orchestration offers great benefits to companies. Orchestration platforms such as Kubernetes and the various managed Kubernetes services in public clouds, take care of the installation, scaling, and management of containerized workloads and services, including debugging and deployment of new versions of applications.

Containers are isolated by default. One failing container will not impact other containers. Individual containers can be updated without causing downtime for other containers. This also means that containers are protected very well from...