DevOps Foundations: DevSecOps

Security is a major concern in the DevOps world. There is a constant push for companies to move more quickly at scale, but security teams often struggle to keep up with testing. This course introduces you to the concept of DevSecOps and explains how an organization can build out a DevSecOps program that helps teams integrate security into the application development pipeline. Learn about the role of APIs, containers, security as code, and automation, and how a continuous integration and delivery framework can help your organization run security tests as often as developers want. Instructor Tim Chase also introduces some free tools and resources to help you get started on your DevSecOps journey.

Learning objectives
Define the core principles and components of DevSecOps integration within the traditional DevOps pipeline.
Analyze how security automation and testing can be effectively implemented throughout the continuous integration and delivery (CI/CD) process.
Evaluate the role of security as code and infrastructure as code (IaC) in maintaining consistent security standards.
Apply API security testing methodologies within a DevSecOps framework.
Demonstrate how to integrate automated security testing tools into the development lifecycle using available open-source resources.