Will Policy-as-Code Still Matter if AI Generates Most Code?
Organizations should start embedding PaC into their AI workflows today. Tools and emerging AI-focused platforms are the first line of defense in the automated future.
Best of 2024: Policy-as-Code Will Rule Your CD Pipelines
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools.
Policy-as-Code Will Rule Your CD Pipelines
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools.
Red Hat Plans to Add Policy-as-Code Tools to Ansible Platform
Red Hat is previewing a policy-as-code capability for the Ansible Automation Platform that promises to make it simpler to apply and enforce governance and compliance policies. Demonstrated at the Red Hat Summit and AnsibleFest 2024 conference, Matthew Jones, chief architect for Red Hat Ansible Automation Platform, told conference attendees this capability would, for example, make […]
What OpenTofu 1.7 Means for DevSecOps
With built-in end-to-end encryption, OpenTofu is a natural DevSecOps fit.
5 Time-Saving and Problem-Solving Technologies for DevOps Teams
DevOps professionals have several common hurdles to successful implementation. Here are five technologies that can help.
Policy-Based Governance: Modernizing Authorization for the Enterprise
Change of control and management of access in the privileged environment requires a new approach to the solutions we use for privileged access governance.
It Is Time for DevOps to Focus on Ops
The advent of both Agile development and DevOps were great steps in improving an IT process that had become ossified, with policies that alternated between resistance to change and trying to do things better/faster. Between them, Agile and DevOps broke the cycle of resistance … but only for development. The confusion around CI/CD is a […]
Cloud Drift Detection With Policy-as-Code
Cloud configurations can change and change often. Introducing new technologies, releasing new features and supporting new business requirements entail a constant flow of configuration changes in web application development. However, drift occurs regardless of how well-designed your IaC implementation is. The term “drift” is used to denote a state in which the actual state of […]
AWS Converts Cedar Policy-as-Code Tool to Open Source Project
At the Open Source Summit North America conference today, Amazon Web Services (AWS) announced it is making Cedar, a language for defining permissions as policies that includes automated reasoning to mathematically prove an IT environment is secure, available as an open source project. In addition, AWS launched SnapChange, an open source fuzz testing tool that […]
Declarative Compliance With Policy-as-Code and GitOps
In recent times, the quest for greater agility, faster releases, enhanced scalability, security and performance brought forth the advent of several automation tools, technologies and frameworks. Software development has evolved considerably over the years to mitigate these challenges. Monoliths have been split into microservices for improved scalability, maintenance and faster releases. Since DevOps is adept […]
Introduction to Cloud Custodian
Organizations continue to increase their footprint in the cloud. Yet, applying governance and enforcing policies across multiple cloud environments at scale is a challenging endeavor. Organizations typically have governance policies written in English, but translating them into enforceable code has historically required some custom workarounds. In the same vein as infrastructure-as-code (IaC), DevOps engineers now […]
Growing Adoption of Compliance as Code and Policy as Code – Techstrong TV
As DevOps has matured and more organizations have adopted an infrastructure as code methodology, alongside an increased importance of security, we are seeing compliance as code and policy as code being adopted by many organizations. Progress Software’s Chef products are helping lead this trend. The video is below followed by a transcript of the conversation. […]