- Course
- Core Tech
Infrastructure-as-Code Security: Why, What, and How
In this talk, you'll learn about common IaC risks and best practices for securing infrastructure at scale using policy-as-code in both in build-time and run-time.
What you'll learn
Planning, provisioning, and changing infrastructure are vital to rapid cloud application development. Incorporating infrastructure-as-code into software development promotes transparency and helps prevent bad configurations upstream. It also presents another layer of risk. In this talk, you'll learn about common IaC risks and best practices for securing infrastructure at scale using policy-as-code in both in build-time and run-time.
Table of contents
About the author
DevSecCon is the global community dedicated to DevSecOps to help implement security in the overall development process.