Environment and data security
The various environments and associated data are a company's most precious and vulnerable assets if not protected correctly. It is the DevOps engineer's job to ensure the best practices are implemented in an automated and scalable fashion. The following are a few concepts that will help drive further research on the topic:
- Principle of least trust and zero trust: Processes and applications are granted the minimum access they require to operate properly. It sounds simple but it is quite a large undertaking as each account needs to be audited to ensure it has correct access. The principle of least privilege is a core part of the zero-trust model; however, the zero-trust model is more comprehensive and is more stringent. Also, zero trust is more complicated to implement and maintain as many more access policies are needed. The following diagram shows the three principles of zero trust; verify explicitly, use least privilege access, and assume...
