What are some security challenges of DevOps?

Did you find this post useful? Show some love!

Depending on how big your company is, there's a balance to achieve "least privilege" and trust.

As an example, with Git, you could provide read-only permissions to every member of the software dev team. Once you've done that, then you have to manage who should have write or admin privileges. CI/CD software can have a similar challenge. Everyone should be able to view test plans, but who should be able to change them?

You could delegate permissions by:

  • job title
  • internal team
  • seniority/tenure
  • training that individual has received

The list is longer, but those are a few themes I've seen. Next, you have to ask if the software you are using supports those permission strategies. Can you do permission group nesting? How do you handle offboarding?

Permissions aren't the only concern. You may also have homegrown tools that need audit trails. Is there a unified login system? How are pull request workflows enforced?

It can get a step more complicated with PCI-DSS or a publicly traded company. You may not legally be able to give some folks access, but you CAN tell them why.

I think this is a decent read on the subject, but there's probably more.

Nice perspective. Even I think homegrown tools are more vulnerable to security issues.

Classic DEV Post from Jul 13

What tools are in your toolbox?

There are a lot of wonderful tools that help us get stuff done quickly, here is a list of some I use.

Follow @lemuelogbunude to see more of their posts in your feed.
Pavan Belagatti
Some DevOps Guy From India.
More from @pavanbelagatti
[DevOps case study] Punchh achieved zero-touch CI/CD and DevOps as-code in less than a month.
#ci #cd #devops
Why use Terraform instead of other alternatives.
#terraform #devops #ci #cd
Trending on dev.to
dev.to Show us your octocat alter ego
#showdev #discuss
"youtube.com" is down - proving it with UI testing!
#showdev #devops #hugops
How to be an awesome open source maintainer?
#discuss #hacktoberfest #opensource
Let's talk about the state of auto-generated documentation tools for JavaScript
#discuss #javascript #tools
How to send AWS CloudWatch Alarms to Slack
#beginners #devops #opensource #howto
My Tests Are Being Maintained by Artificial Intelligence
#ai #machinelearning #testing #devops
Don't code your microservice like a monolith, keep it maintainable not over-engineered
#tips #webdev #devops #productivity
Book Review: Learn CloudFormation (With Tutorial)
#aws #devops