Implementing DevSecOps (LFS262)

Calendario

Estamos preparando nuevas convocatorias, déjanos tus datos a través del formulario y te avisaremos en cuanto estén disponibles.

Acerca del curso

This course begins by laying the foundation of DevSecOps, explaining the principles, practices, cultural aspects and tooling landscape. It then goes on to show you how to incorporate various practices into the Continuous Delivery pipeline: perform Software Composition Analysis (SCA) and add it to the Continuous Integration pipeline, perform static code analysis and project gating using SAST tools, implement security best practices while writing Dockerfiles to build images, scan container images for vulnerability, perform Dynamic Application Software Testing (DAST) on a live environment, set up a centralized vulnerability management system to provide visibility and alerting, and build a cloud native DevSecOps pipeline.

You will also use IaC effectively to enforce compliance, collect logs, analyze events to provide detection and monitoring of security issues, and learn to address cloud and container related risks. In order to make adoption of DevSecOps practices frictionless, this course focuses on usage of mostly open source software, at the same time providing enough flexibility to plug in a commercial alternative to match the implementation environment.

This course prepares you with real life professional skills to implement DevSecOps practices into the software development and delivery processes.

To make the most out of this course, you will need to:

Have working knowledge of Linux operating systems and the command line interface, Git, Docker, and Kubernetes.
Know how to build CI/CD pipelines, write Infrastructure-as-Code (IaC), run Ansible Playbooks, and understand observability concepts such as log management and monitoring.

Module 1: Course Introduction

Module 2: What Is DevSecOps?

Module 3: Setting Up the Lab Environment

Module 4: Building a DevOps Pipeline

Module 5: Securing the Supply Chain with SCA

Module 6: Static Application Security Testing (SAST)

Module 7: Auditing Container Images

Module 8: Secure Deployment and Dynamic Application Security Testing (DAST)

Module 9: System Security Auditing with IAC

Module 10: Securing Kubernetes Deployments

Module 11: Secrets Management with Vault

Module 12: Runtime Security Monitoring and Remediation

Documentación Oficial de This course Implementing DevSecOps (LFS262)

Formador Certificado por The linux Foundation
Más de 5 años de experiencia profesional
Más de 4 años de experiencia docente
Profesional activo en empresas del sector IT

Solicita información

CAS TRAINING, S.L.U. , le informa que la finalidad del tratamiento es atender a su solicitud de información, reclamación, duda o sugerencia que realice sobre los productos y/o servicios ofrecidos, así como para mantenerle informado de nuestra actividad la gestión de la relación que nos une, la prestación del servicio contratado, así como el envío de información que pudiera ser de su interés sobre nuestros servicios formativos y de consultoría de negocio.

Podrá retirar su consentimiento y ejercitar los derechos reconocidos en los artículos 15 a 22 del Reglamento (UE) 2016/679, enviando un correo electrónico a rgpd@cas-training.com, adjuntando copia de su DNI o documentación acreditativa de su identidad. Puede solicitar más información rgpd@cas-training.com o www.cas-training.com.