A hallmark of DevOps is the constant search for more secure methods to protect infrastructure, a process known as hardening. Part two of “Securing Our AWS Infrastructure” details how we integrated CloudWatch with CloudTrail and set up alarms for crucial activities.
A hallmark of DevOps is the constant search for more secure methods to protect infrastructure, a process known as hardening. One change we recently implemented was to move away from managing SSH keys and whitelisting IP’s to leveraging AWS Systems Manager Session Manager to securely connect to our EC2 instances.
IT Risk management is an ever expanding area of interest throughout the software development community. Traditional risk management practices are applied to ensure organizations can withstand unfortunate events like power outages and natural disasters. Additional processes are layered on to deal with events particular to production software systems, such as security vulnerabilities or severe bugs.