Read and Download Free eBooks
/
Categories
Browse by category
1,965 books to get lost inYours to read. Yours to keep.
No books found.
Try another title or author.
Try another title or author.
Ramaswamy Chandramouli describes how DevSecOps practices can be implemented for applications built from microservices and supported by a service mesh. This NIST report connects the development and deployment pipeline to the infrastructure on which services run, treating security as part of a repeatable software-delivery process.
The report examines the functions of continuous integration and continuous delivery, application security testing, and the configuration of the deployment environment. It discusses infrastructure as code, policy as code and observability as code, together with workflow approaches such as GitOps. These topics are related to the practical problem of coordinating many small services without losing control of security requirements.
The distinction between application code and its surrounding operational configuration is central to the report. A service mesh can provide shared communication and security functions, but those functions must still be configured, tested and observed as part of delivery. The report links these concerns to a common workflow rather than considering the pipeline and runtime environment independently.
Readers will find a technical account of the roles played by pipeline components and service-mesh capabilities, supported by the original diagrams and references. The emphasis is on implementation and architectural relationships rather than on a particular commercial product. Published in March 2022, the report is intended for software architects, developers and security practitioners working with cloud-native applications.
Ramaswamy Chandramouli. NIST SP800-204C (2022). https://doi.org/10.6028/NIST.SP.800-204C.