Part 2: Implementing Security in Cloud Native Environments

This part focuses on building an AppSec culture, threat modeling for cloud-native environments, securing the infrastructure, and cloud security operations. It also introduces DevSecOps practices, emphasizing IaC, policy as code, and CI/CD platforms. By the end of Part 2, you will have a comprehensive understanding of how to implement and manage security in a cloud-native environment.

This part has the following chapters:

• Chapter 4, Building an AppSec Culture
• Chapter 5, Threat Modeling for Cloud Native
• Chapter 6, Securing the Infrastructure
• Chapter 7, Cloud Security Operations
• Chapter 8, DevSecOps Practices for Cloud Native