Tag: DevOps compliance
Building SOC 2 Compliant CI/CD Pipelines on AWS with GitHub Actions
Artur Yolchyan | | Amazon ECR security, artifact traceability, AWS CI/CD pipeline, AWS compliance, AWS deployment pipeline, AWS multi-account architecture, CC6.1 access controls, CC7.1 vulnerability management, CC8.1 change management, container image promotion, cross-account ECR access, DevOps compliance, ECR lifecycle policies, ECR repository architecture, ECR scan on push, GitHub Actions OIDC, immutable artifacts, Secure software delivery, SOC 2 change management, SOC 2 CI/CDHow to design a secure, traceable AWS CI/CD pipeline using separate accounts, centralized ECR, OIDC and immutable image promotion for SOC 2 ...
AI-Powered DevSecOps: Navigating Automation, Risk and Compliance in a Zero-Trust World
Michelle Buckner | | AI in DevOps, CI/CD pipeline security, cloud security best practices, continuous compliance, DevOps compliance, FedRAMP DevOps, GRC automation, microservices security, NIST compliance, security automationBreaking down how artificial intelligence (AI) is reshaping DevSecOps, the security pitfalls that come with it and how to balance the raw efficiency of automation with the actual realities of risk mitigation ...
