9

Implementing DevSecOps with AWS

Equifax, a credit reporting agency, reported unauthorized access to the personal records of 143 million US citizens in a data breach in 2017 that went unnoticed for 76 days (https://www.csoonline.com/article/3444488/equifax-data-breach-faq-what-happened-who-was-affected-what-was-the-impact.html). What started as Common Vulnerabilities and Exposures (CVE) in Apache Struts, a well known framework used by Java applications, resulted in financial and reputational damage for the company. Even after corrective measures, a few servers remained unfixed due to the dependency on manual processes. These gaps, combined with teams’ lack of awareness of security breaches in general, were exploited by malicious actors to gain ...

Get AWS DevOps Simplified now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.