Devopsec: Rapid Security in the Cloud with AWS and CIS
summary
An open‑source tool that automates CIS AWS Foundations checks and AWS best‑practice tests at the account level and runs them inside CI/CD pipelines, detecting (not preventing) misconfigurations. It integrates with GoCD, Jenkins, TeamCity or Bamboo, blocks promotions on failed security tests — demo shows a deployment halted because RDP was open to the Internet, then a remediation script fixes it and the pipeline proceeds. Claims low cost (under $2/month) and configurable per‑architecture tests.
AI-written summary · about
chapters (10)
- 0:00Devopsec and AWS security
- 1:15DevOps vs Devopsec principles
- 2:37AWS CI/CD security
- 4:01AWS security test tool
- 5:23CI/CD security workflow
- 8:51Demo: blocking failures
- 10:49Demo: successful tests
- 11:30Scheduled vs event-driven tests
- 13:05Security tools comparison
- 14:30Tool cost and features
related talks
29mPragmatic Security Automation and DevSecOps in the Cloud
36mImproving Security while Reducing Toil with DevSecOps
37mDevelop and implement a successful DevSecOps approach
42mContinuous Security: Integrate security tools into your DevOps Pipeline
28mHow Remote Work is Driving the Need for Multi-Cloud DevSecOps: How to Build a Pipeline
15mSecurely configure your AWS environments with CIS & Qualys
46mSecurity DevOps - Staying Secure In Agile Projects
28mMitigating OWASP Top 10 CI/CD with AWS