Securing Cloud DevOps in PaaS, IaaS, and SaaS Settings from Pluralsight

The usage of DevOps tools like Docker and Kubernetes has expanded. This course introduces you to securing cloud DevOps environments in PaaS, IaaS, and SaaS settings, DevOps practices, and activities across various types of cloud platforms.

The adoption and usage of DevOps tools such as Docker and Kubernetes has more than doubled. Find out why learning DevOps will be a requirement for every cyber security professional in order to compete in the cloud economy. In this course, Securing Cloud DevOps in PaaS, IaaS, and SaaS Settings, you'll learn how to apply operational security process automation in DevOps driven cloud environments such as AWS. First, you'll explore how to secure PaaS, SaaS, and IaaS DevOps environments. Next, you'll discover how to address OWASP security guidelines as part of the CI/CD pipeline. Finally, you'll delve into securing Infrastructure as Code (IaC), along with securing container management and orchestration activities. When you’re finished with this course, you’ll know how to function as a DevOps security practitioner, and be responsible for securing DevOps related processes, procedures, and technologies to ensure optimal and timely security throughout the ongoing DevOps lifecycle.

What's inside

Syllabus

Course Overview

DevOps, Cloud, and Their Impact on Traditional Security Architecture

Securing PaaS, IaaS, and SaaS Development Environments

Addressing 2017 OWASP Security Guidelines as Part of the CI/CD Pipeline

Securing Infrastructure as Code

Securing Container Management and Orchestration Activities

Course Summary and Next Steps

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Examines security practices for DevOps environments across PaaS, SaaS, and IaaS

Taught by Chad Russell, a highly regarded cybersecurity instructor

Explores OWASP security guidelines as part of the DevOps security process

Develops skills in securing Infrastructure as Code (IaC) for DevOps environments

Provides guidance on securing container management and orchestration activities

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Securing Cloud DevOps in PaaS, IaaS, and SaaS Settings with these activities:

Review Cloud and DevOps Concepts

Show steps

Start by refreshing your understanding of fundamental cloud and DevOps concepts. This will provide a solid foundation for the course material.

Browse courses on Cloud Computing

Show steps

Read articles or watch videos on cloud computing basics.
Explore DevOps principles and practices.
Review the different cloud service models (IaaS, PaaS, SaaS).

Explore Docker and Kubernetes Basics

Show steps

Learn the fundamentals of Docker and Kubernetes to enhance your understanding of DevOps tool usage.

Browse courses on Docker

Show steps

Watch introductory videos on Docker concepts like containers and images.
Install Docker on your local machine and run basic commands.
Create a simple Dockerfile and build a container image.

Explore OWASP Security Guidelines

Show steps

By familiarizing yourself with OWASP guidelines, you can proactively identify and mitigate security vulnerabilities in your DevOps processes.

Browse courses on OWASP

Show steps

Read through the OWASP Top 10 Security Guidelines.
Identify how these guidelines apply to your current DevOps practices.
Develop a plan to implement these guidelines in your DevOps pipeline.

14 other activities

Expand to see all activities and additional details

Show all 17 activities

Compile and review study materials

Show steps

Helps establish familiarity with a range of DevOps topics.

Browse courses on DevOps

Show steps

Gather course materials, including notes, assignments, and presentations.
Organize materials by topic or relevance.
Review materials to reinforce understanding and identify areas for improvement.

Participate in a DevOps Discussion Group

Show steps

Engage with peers to exchange knowledge and insights on DevOps best practices. This will expand your perspectives and enhance your understanding.

Show steps

Join a DevOps discussion group or forum.
Actively participate in discussions and ask questions.
Share your knowledge and experiences with others.

Practice with Kubernetes and Docker

Show steps

Hands-on practice with core DevOps tools will reinforce your understanding and improve your ability to apply them in real-world scenarios.

Browse courses on Kubernetes

Show steps

Set up a Kubernetes cluster on your local machine.
Create a simple containerized application.
Deploy the application to your Kubernetes cluster.
Monitor the application and troubleshoot any issues.

Configure a Docker Container

Show steps

Gain hands-on experience with Docker by configuring a container from scratch. This will solidify your understanding of containerization.

Show steps

Install Docker on your system.
Create a Dockerfile for your application.
Build and run your Docker container.

Follow Tutorials on Kubernetes Orchestration

Show steps

Enhance your practical skills by following tutorials on Kubernetes orchestration. This will enable you to manage and scale containerized applications effectively.

Show steps

Find reputable tutorials on Kubernetes orchestration.
Work through the tutorials hands-on.
Deploy a sample application using Kubernetes.

Practice securing container management and orchestration activities

Show steps

Provides hands-on experience in securing container management and orchestration activities.

Browse courses on Container Security

Show steps

Set up a testing environment with Docker and Kubernetes.
Configure security controls for container images, registries, and orchestration.
Run vulnerability scans and penetration tests on the environment.

Discuss OWASP Security Guidelines

Show steps

Engage in group discussions to explore OWASP security guidelines and their role in DevOps pipelines.

Browse courses on OWASP

Show steps

Review the OWASP Top 10 security risks.
Identify vulnerabilities in a CI/CD pipeline and suggest mitigation strategies.
Share best practices and experiences with peers.

Build a hypothetical cloud DevOps environment

Show steps

Reinforces understanding of cloud DevOps environments and their implementation.

Browse courses on Cloud Deployment

Show steps

Design the architecture of the cloud DevOps environment.
Select and configure the necessary tools and technologies.
Deploy the environment and test its functionality.

Secure Infrastructure as Code

Show steps

Develop IaC scripts that incorporate security best practices to enhance the security of your deployments.

Browse courses on Infrastructure as Code

Show steps

Choose an IaC tool like Terraform or Pulumi.
Write IaC scripts to provision and manage cloud resources.
Implement security controls and policies in your IaC scripts.

Attend a Workshop on DevOps Automation

Show steps

Immerse yourself in DevOps automation by attending a workshop. This will provide you with practical experience and insights into industry best practices.

Show steps

Find and register for a reputable DevOps automation workshop.
Actively participate in the workshop exercises and discussions.
Apply your learnings to your own DevOps initiatives.

Write a blog post on DevOps Security Best Practices

Show steps

By synthesizing your knowledge and sharing it through a blog post, you can deepen your understanding of DevOps security and contribute to the broader community.

Show steps

Identify key DevOps security best practices.
Research and gather information on these practices.
Write a blog post that outlines these best practices in a clear and concise manner.
Publish your blog post and share it with the community.

Write a Blog Post on OWASP Security Guidelines

Show steps

Deepen your knowledge of OWASP security guidelines by writing a blog post about them. This will help you synthesize and communicate your understanding.

Show steps

Research OWASP security guidelines.
Identify the most relevant guidelines for DevOps.
Write a blog post explaining the guidelines and their importance.

Design a Secure DevOps Pipeline

Show steps

Apply your learning by designing a secure DevOps pipeline that incorporates best practices from the course. This will demonstrate your ability to implement DevOps security in real-world scenarios.

Show steps

Identify the key stages in your DevOps pipeline.
Research and incorporate security measures for each stage.
Create a detailed design document outlining your secure pipeline.

Mentor Junior DevOps Engineers

Show steps

Reinforce your knowledge and skills by mentoring junior DevOps engineers. This will enhance your understanding through teaching and provide valuable support to others.

Show steps

Join a mentoring program or find a junior DevOps engineer to mentor.
Share your knowledge and experience with your mentee.
Provide guidance and support to help your mentee grow professionally.

Career center

Learners who complete Securing Cloud DevOps in PaaS, IaaS, and SaaS Settings will develop knowledge and skills that may be useful to these careers:

Cloud Security Engineer

A Cloud Security Engineer is responsible for securing cloud environments, including cloud DevOps environments. This course will help you to learn the skills and knowledge you need to succeed in this role, including how to secure PaaS, IaaS, and SaaS DevOps environments.

See salaries and explore the career path for Cloud Security Engineer

DevSecOps Engineer

A DevSecOps Engineer combines the principles of DevOps and security to improve the security of software development. This course will help you to learn how to apply operational security process automation in DevOps driven cloud environments, which is essential for a DevSecOps Engineer.

See salaries and explore the career path for DevSecOps Engineer

DevOps Engineer

A DevOps Engineer combines the principles of development and operations to improve the speed and efficiency of software development. This course will help you to learn how to secure cloud DevOps environments in PaaS, IaaS, and SaaS settings, which is essential for a DevOps Engineer.

See salaries and explore the career path for DevOps Engineer

Cloud Architect

A Cloud Architect designs and manages cloud computing solutions. This course will help you to learn how to secure cloud DevOps environments, which is essential for a Cloud Architect.

See salaries and explore the career path for Cloud Architect

Security Architect

A Security Architect designs and implements security measures for an organization. This course will help you to learn how to secure cloud DevOps environments, which is essential for a Security Architect.

See salaries and explore the career path for Security Architect

Information Security Analyst

An Information Security Analyst is responsible for identifying and mitigating security risks. This course will help you to learn how to secure cloud DevOps environments, which is essential for an Information Security Analyst.

See salaries and explore the career path for Information Security Analyst

Security Consultant

A Security Consultant helps organizations to improve their security posture. This course will help you to learn how to secure cloud DevOps environments, which is essential for a Security Consultant.

See salaries and explore the career path for Security Consultant

Security Operations Center Analyst

A Security Operations Center Analyst monitors and responds to security incidents. This course may be useful for a Security Operations Center Analyst who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for Security Operations Center Analyst

Security Engineer

A Security Engineer designs and implements security measures for systems and applications. This course may be useful for a Security Engineer who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for Security Engineer

Systems Administrator

A Systems Administrator manages and maintains computer systems and networks. This course may be useful for a Systems Administrator who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for Systems Administrator

Software Developer

A Software Developer designs and develops software applications. This course may be useful for a Software Developer who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for Software Developer

Network Security Engineer

A Network Security Engineer designs and implements security measures for networks. This course may be useful for a Network Security Engineer who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for Network Security Engineer

IT Security Manager

An IT Security Manager is responsible for the security of an organization's IT systems and data. This course may be useful for an IT Security Manager who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for IT Security Manager

IT Auditor

An IT Auditor reviews and evaluates an organization's IT systems and controls. This course may be useful for an IT Auditor who wants to learn how to secure cloud DevOps environments.

See salaries and explore the career path for IT Auditor