CSC 1029 Week 04 DevSecOps PDF

CSC 1029 DEVSECOPS  OBJECTIVES AGENDA: WEEK 04 Understand the issues 1. DevOps and DevSecOps surrounding security in today's 2. Microsoft DevSecOps business environment 3. IT Skills 2020 & Beyond Describe the different security 4. CI/CD...

CSC 1029 DEVSECOPS  OBJECTIVES AGENDA: WEEK 04 Understand the issues 1. DevOps and DevSecOps surrounding security in today's 2. Microsoft DevSecOps business environment 3. IT Skills 2020 & Beyond Describe the different security 4. CI/CD work roles a business is 5. Version Control involved with today 6. App Deployment Understand how a business 7. Kubernetes struggles with security 8. Where is DevSecOps Going? integration 9. Documentation 10.TODO & Resources for Help WHAT IS DEVOPS AND DEVSECOPS? DevSecOps brings a culture of “security for everyone” to teams. Everyone has a significant role to play in security at their organization. Security specialists are critical in this by mentoring, advising, and leading teams to ensure quality and security. Read the article: https://www.redhat.com/en/topics/devops/what-is- devsecops DEVSECOPS Watch the video Review Microsoft's DevSecOps Tools and Services Build secure apps on a trusted platform. Embed security in your developer workflow and foster collaboration between developers, security practitioners, and IT operators. DevSecOps Tools and Dev Sec Ops Services | Microsoft Azure IT SKILLS 2020 AND BEYOND 1. Review the IT Skills Standards: Software Development The National Convergence Technology Center was established to meet the workforce need for skilled specialists in Convergence Technology, Information Technology, and Cybersecurity. CI/CD Continuous Integration / Continuous Delivery and Deployment pipelines https://dzone.com/refcardz/introduction-to-devsecops VERSION CONTROL: GITHUB GitHub is where over 73 million developers shape the future of software, together. Contribute to the open source community. GitHub is a code hosting platform for version control and collaboration. It lets you and others work together on projects from anywhere. Git is the most widely used modern version control system, so whether you're a professional developer or if you’re learning how to code, Git can be very useful to you. APP DEPLOYMENT Watch the video to investigate app deployment 1. Traditional deployment to individual physical servers 2. Virtual Machine deployment 3. Container deployment KUBERNETES Kubernetes provides the building blocks for building developer platforms, but preserves user choice and flexibility where it is important. DEVOPS VS DEVSECOPS 1. Read the article: https://www.redhat.com/en/blog/devops-vs.-devsecops-heres- how-they-fit-together ROBUST DOCUMENTATION Teams may use the newest and best tools, but it may all be for naught if your teams fail to properly document and catalog concerns. Without documentation, it is hard to share learned lessons across teams. All of the code, applications, and security changes are for naught if your teams and individuals do NOT communicate. There is one aspect of communication that is often ignored in IT, and that is intent. EARN YOUR PRE-WORK GRADE Post your weekly discussion question and research solution to D2L TODO Complete Week 04 Content Module in D2L to 100% WHAT'S COMING UP NEXT...WEEK 05  QUESTIONS | CLARIFICATIONS | HELP Student Office Hours: Schedule Meeting with Julie o By Appointment (both on-campus and remote via Zoom) o Drop-In Times Available (on-campus) Email: [email protected] RRCC On Campus Tutoring: https://www.rrcc.edu/learning- commons/tutoring 24/7 Online Tutoring: D2L > Content > Resources for Help