Tag: policy as code
GitOps in the Wild: Scaling Continuous Delivery in Hybrid Cloud Environments
Ankur Mahida | | continuous delivery, devops automation, drift detection, GitOps architecture, GitOps at scale, GitOps best practices, GitOps case study, GitOps challenges, GitOps governance, GitOps observability, GitOps security, hybrid cloud GitOps, hybrid cloud operations, infrastructure as code, Kubernetes delivery, multi-cloud DevOps, Open Policy Agent, policy as codeA deep dive into scaling GitOps for hybrid and multi-cloud environments, exploring architecture, governance, security, observability and real-world enterprise practices ...
Common IaC Security Issues and How to Fix Them
Durojaye Olusegun | | audit logging, automated compliance, CI/CD pipeline security, cloud infrastructure, cloud misconfiguration, cloud security incidents, CloudFormation, configuration drift, devsecops, drift detection, hardcoded secrets, IaC automation, IaC best practices, IaC governance, IaC security, IaC vulnerabilities, infrastructure as code, least privilege access, policy as code, secrets managementLearn the top five Infrastructure as Code (IaC) security vulnerabilities, their fixes, and best practices to prevent misconfigurations, drifts, and breaches ...
env zero Revamps Infrastructure Automation Platform for AI Era
Mike Vizard | | AI agents, cloud compliance, Cloud Governance Platform, Cloud Security, CloudFormation, devops automation, IaC, infrastructure as code, infrastructure automation, kubernetes, MCP, Model Context Protocol, policy as code, Static Code Analyzer Agent, TerragruntEnv Zero (formerly env0) has revamped its Cloud Governance Platform with AI and MCP support, including a new Static Code Analyzer Agent to streamline IaC governance, compliance, and security across tools like ...
Simplifying Authorization at Scale: The Importance of DevOps Workflows with Flexible, Scalable and Secure Access Control
Rakan AlZagha | | access control, Authorization-as-a-Service, cloud-native security, devops, microservices, policy as code, scalable authorizationDevOps has transformed how developers build, deploy, and manage infrastructure and applications, making automation, scalability and rapid iteration core to modern development workflows. While much of the software delivery process has evolved, authorization ...
Continuous Compliance for Cloud-Native CI/CD Pipelines
Manvitha Potluri | | Audit-ready pipelines, CI/CD, cloud-native, continuous compliance, devsecops, Infrastructure as Code (IaC), policy as code, Regulatory automationHow DevOps teams can embed auditability without sacrificing delivery speed ...
Will Policy-as-Code Still Matter if AI Generates Most Code?
Organizations should start embedding PaC into their AI workflows today. Tools and emerging AI-focused platforms are the first line of defense in the automated future ...
Best of 2024: Policy-as-Code Will Rule Your CD Pipelines
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools ...
Policy-as-Code Will Rule Your CD Pipelines
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools ...
Red Hat Plans to Add Policy-as-Code Tools to Ansible Platform
Red Hat is previewing a policy-as-code capability for the Ansible Automation Platform that promises to make it simpler to apply and enforce governance and compliance policies. Demonstrated at the Red Hat Summit ...
What OpenTofu 1.7 Means for DevSecOps
With built-in end-to-end encryption, OpenTofu is a natural DevSecOps fit ...
5 Time-Saving and Problem-Solving Technologies for DevOps Teams
Gilad David Maayan | | automation, challenges, devops team, policy as code, service mesh, test automationDevOps professionals have several common hurdles to successful implementation. Here are five technologies that can help ...
Policy-Based Governance: Modernizing Authorization for the Enterprise
Rom Carmel | | Cloud-based Environments, devops, governance, policy as code, Policy-based governance, privileged access managementChange of control and management of access in the privileged environment requires a new approach to the solutions we use for privileged access governance ...
