Log4Shell
highlighted two things: (1) security is hard to get right
in a complex and dynamic world, and (2) even the
most robust, layered approaches may have a
BankInfoSecurity
Compliance
AsiaSecEditor) • April 5, 2021
Igor Markov (left) and Ori Bendet of Checkmarx
To deliver a secure infrastructure-as-code service, development teams must adopt a shift left strategy to bring all the applications and security under one umbrella to provide faster and continuous delivery of the fully automated code, according to Ori Bendet and Igor Markov of Checkmarx.
Markov says infrastructure as a code is the process of provisioning and configuring an environment through code instead of manually setting up the required devices and systems. Once code parameters are defined, developers run scripts, and the IaC platform builds the cloud infrastructure automatically, he says.