SAST Testing of IaC using Checkov (DevOps the Hard Way series)
Regularly testing IaC with SAST tools like Checkov makes it easier to catch cloud security and policy issues, even before they are implemented in real-world environments.
Regularly testing IaC with SAST tools like Checkov makes it easier to catch cloud security and policy issues, even before they are implemented in real-world environments.
In this post, we deploy our containerized software from Amazon ECR to the Kubernetes cluster we built earlier on AWS.
We test the new container image created in the previous post. Once we've verified it runs ok, we upload it to Amazon Elastic Container Registry (ECR) on AWS.
We examine the different parts of a predefined Dockerfile, and use the Docker CLI to build a container image based on that file.
In this post, we use Terraform's CLI to create an Elastic Kubernetes Service (EKS) Cluster on AWS.
We use Terraform's CLI to create an Amazon Elastic Container Registry on AWS, which is where our API container image will eventually be saved.
A look at essential Terraform commands and concepts. In this post, we also create an S3 bucket on AWS to store our Terraform "state" files.
With this blog now set up and running, the next project to cover will be DevOps the Hard Way (GitHub link). What is it? In the author’s own words, the labs in this repository involve setting up “...
This post goes over how this blog was secured over TLS by using the AWS CloudFront CDN. It also mentions an unexpected snag encountered along the way.
Some quick notes about AWS’ S3 static hosting, which is how this blog is being served to the Internet: If a custom domain name is used for the website being hosted, then: That domain...