Sec your DevOps with Atlassian Bamboo and AWS Inspector on AWS ECS Fargate
summary
Atlassian Bamboo pushes container images to ECR which triggers ECR image scan on push using AWS Inspector; images also get continuous rescans and EventBridge kicks off an ECS task that generates EventBridge-scheduled weekly Inspector reports emailed to HHS. Platform runs over 10 microservices on ECS Fargate with three isolated VPC environments and the ASPR RISC deployment is FISMA Moderate ASPR RISC deployment. Workflows include suppression rules for false positives, GitHub issues for upstream fixes, and a policy of small Alpine base images and scheduled remediation or POAMs.
AI-written summary · about
related talks
38mAccelerating innovation through AWS Cloud technology
21mAWS On Air ft. Amazon Inspector
37mDevelop and implement a successful DevSecOps approach
53mMicrosoft DevOps on AWS
28mMitigating OWASP Top 10 CI/CD with AWS
18mBreaking Bad (Habits) - Continuous Security Throughout Your DevOps Pipeline
18mGlobal security at maximum velocity: Multi-Region and hybrid DevSecOps
15mDevopsec: Rapid Security in the Cloud with AWS and CIS