Hands-On Security in DevOps

Rapid release

Rapid, frequent, and iterative releases are very common for cloud services. This normally drives the need for DevOps practices. This can be both an opportunity and a challenge to security. The challenge is that a short period of frequent releases may not include enough time to do a full cycle of security testing. There are three maturity levels of DevOps practices:

Maturity level	Achieved	Technology adoption
Continuous integration	Source code repository and version control CI workflow with a daily build and unit testing	Jenkins Git Unit testing
Continuous delivery	Automated deploy to the staging environment Integration testing on the staging environment Deployment to production is done manually