Description
SEC540: Cloud Native Security and DevSecOps Automation. This course is designed for security professionals to secure DevOps and Cloud Native environments by implementing security controls into automated pipelines. The course addresses common challenges including insecure CI/CD pipelines, cloud misconfigurations, and Kubernetes vulnerabilities. Through hands-on labs, participants will gain the skills needed to combat threats such as malicious code, compromised plugins, false positives, non-standard container images, and excessive permissions in Kubernetes. By providing a deep understanding of DevOps methodologies, this course teaches professionals how to attack and then harden the entire software development lifecycle, from version control to deployment in Kubernetes. The end result is the ability to integrate and enforce security policies to increase reliability, integrity, and security across cloud infrastructure and on-premises systems.
What you will learn
- DevOps principles for secure workflows: Learn DevOps principles for creating secure workflows.
- Security scanning integration: How to integrate security scanning into CI/CD pipelines.
- Confidential Information Management: Manage confidential information and automate infrastructure with IaC.
- Hardening and Monitoring: Learn how to harden and monitor containers and Kubernetes.
- Software Supply Chain Security: Securing the software supply chain with SBOMs and artifact signing.
- Automate compliance: Automate compliance with protection policies and automatic remediation.
- Building a Skilled Security Team: How to build a security team skilled in Cloud Native security and DevSecOps.
- Collaborate with DevOps team: Collaborate with DevOps team to integrate security early in development.
- Use Cloud Native Services: Use Cloud Native services for deployment, consolidation, and monitoring.
- Migration readiness: Prepare for adaptable container and Kubernetes migrations.
- Increase security with cloud monitoring: Increase security with cloud monitoring and automated response to threats.
- Implementing audit pipelines: Implementing centralized audit pipelines and “compliance as code”.
This course is suitable for people who:
- Anyone working in or moving to a public cloud environment.
- Anyone working in or transitioning to a DevOps environment.
- Anyone working in the field of Kubernetes, Containers, and Microservices.
- Anyone who wants to know where to add security checks, tests, and other controls to their cloud Continuous Delivery and DevOps pipelines.
- Anyone interested in learning how to migrate and secure DevOps workloads in the cloud, especially Amazon Web Services (AWS) and Microsoft Azure.
- Anyone interested in leveraging cloud application security services provided by AWS or Azure.
- Developers.
- Software architects.
- Operations engineers.
- System administrators.
- Security analysts.
- Security engineers.
- Auditors.
- Risk managers.
- Security consultants.
Course Description SEC540: Cloud Native Security and DevSecOps Automation
- Publisher: SANS
- Instructor: Eric Johnson , Ben Allen , Frank Kim
- Training level: Beginner to advanced
- Training duration: 16 hours and 40 minutes
- Number of lessons: 23
Course headings
Prerequisites for SEC540: Cloud Native Security and DevSecOps Automation
- The following are courses or equivalent experiences that are prerequisites for SEC540:
- Hands-on experience using Amazon Web Services (AWS) or the Microsoft Azure Cloud
- Familiarity with Linux command shells and associated commands
- Basic understanding of version control (git) and continuous integration systems (GitLab CI)
- Introductory knowledge of containers and Kubernetes is helpful (see references below to get started)
- Basic understanding of common application attacks and vulnerabilities (eg, OWASP Top 10) is recommended but not required
- Preparing for SEC540
- Students taking SEC540 will have the opportunity to learn and use a number of DevOps and cloud tools during the hands-on exercises. Getting a head start on the following tools, technologies, and languages will help students enjoy their lab experience:
- Running basic Git commands (clone, add, commit, push)
- Using GitLab for version control
- Getting Started with GitLab CI
- YAML
- Terraform HCL
- Terraform AWS Provider
- Terraform Azure Provider
- Learn Kubernetes Basics
- Container Security 101 by Jon Zeolla
- Aviata Workshop: Transitioning to Containerization by Ahmed Abugharbia
Course images
Sample course video
Installation Guide
After Extract, view with your favorite player.
Subtitles: None
Quality: 720p
Download link
Downloadly
Rapidgator
Password file(s): www.downloadly.ir
File size
2.01 GB
