A Complete Guide to Modern DevOps Implementation

This video will give you an overview about the course.

In this video, we will see the tools used and what is the author’s environment.

• Learn about course tools and authors environment

In this video you will look at what is DevOps

• Learn what DevOps means

• Learn about the goals of DevOps

• Get an introduction to the core set of methodologies and concepts

DevOps evolved out of necessity in order to resolve some detrimental deficiencies.

• Understand where did the term DevOps come from

• Look at the problems that DevOpsis trying to resolve

• What took place in order to cause the formation of DevOps?

You may have heard some conflicting terminology and references to DevOps. Is DevOps a team, methodology, or philosophy? In this video, we will look at the context of DevOps.

• Learn what contexts are referenced by the term

• Learn the key areas of DevOpsin reference to context

• Translate those areas to the core makeup of DevOps

In this video, we will look at the people that makeup DevOps.

• Learn what DevOps means to an organization

• What does a DevOps engineer do?

• Learn who performs DevOpsand their roles

Philosophy plays a big part in everyone’s lives. What does philosophy have to do with DevOps? In this video, you will look at the philosophy of DevOps.

• Is there a difference between culture and philosophy?

• Can we do DevOps?

• Grasp the correlation between philosophy, culture, and principals

In this video we will look at the Cloud technologies can enhance DevOps capabilities.

• Understand how was cloud computing born?

• Look at the advantages and disadvantages of cloud services

• Understand what the cloud can do for DevOps?

There are a lot of cloud providers. In this video, you will look at what you should choose to meet your needs

• Learn what providers are available

• Discover cloud provider service types

• Pick a cloud provider

This video will get a brief on Azure which is a cloud provider under the Microsoft Umbrella.

• Look at when did Azure come into service

• Learn where to get information on Azure

• Understand the Azure structure

In this video, you will look at how can I use Azure

• Sign up for a free account

• Learn portal navigation

• Learn how to manage subscriptions

This video will give you a brief on how are resources created and managed?

• Learn how resource groups work

• Find resource groups of interest

• Learn how to use resource groups

This video will give you a brief on how VM is created in the Azure portal

• Pick a VM image

• Choose a VM type

• VM ports and networking

In this video, you will look at how access is controlled to resources

• Use access control

• Learn about permission inheritance

• Create a key vault and learn about different kind of permissions

Are there other ways besides the portal to interact with Azure?

• Learn about the CLI within the portal

• Learn about command line access tools

• Learn about the Azure SDK

This video will focus on API which is a very common type of interface for interacting with services.

• Learn how the REST API documentation works

• Learn about some common patterns within Azure

• Learn about the REST API and authentication

In this video, you will look at using the Rest API.

• Usage of tools to make requests

• Learn what requests are necessary

• Learn how to request information from the API

This video will give a brief on command line tool that runs natively.

• Understand CLI documentation and installation

• Understand CLI behind the scenes

• Learn about how subscriptions are managed

In this video, you will look at creating resources with the CLI.

• Look at the differences, advantages, and disadvantages

• Create resources with the CLI

• Delete resources

In this video, you will get a better understanding of what configuration as code is and how it applies to Docker and Kubernetes.

• Learn what is meant by configuration as code

• Learn why CaC is advantageous

• Learn how Docker and Kubernetes uses CaC

In this video, you will look at what container orchestration tools are and how are they beneficial?

• Learn the difference between a container and an image

• Learn how a container runs on a system

• Learn what orchestration tools do

In this video, you will see the basics of Docker.

• Learn to pull an image and where it is stored

• Learn the Docker image name syntax

• Learn how to run a container

In this video you will see how to stop containers, tag images, remove containers and images, and build a custom image.

• Learn how to stop and remove containers

• Learn how to tag an image

• Learn how build a Docker image

This video will give a brief on the tips on optimization, image inspection, and image storage.

• Learn how to run commands on the same layer

• Learn how to inspect images

• Learn how to store images

In this video, you will see how to create an instance. This video also introduces you to Kubernetes and kubectl.

• Kubernetes instance options

• Get cluster credentials

• Learn how to install kubectl in a Docker image

In this video, you will see KubernetesYAML files.

• Learn how to define a deployment

• Learn how to define a service

• Apply the YAML files to create the objects

In this video, you will get to understand infrastructure as code.

• Learn what is meant by infrastructure as code

• Learn what the problems IaC is trying to solve

• Learn why IaC is advantageous

In this video, you will look at how to accomplish IaC.

• Understand languages to use

• Look at the tools to use

• Learn the benefits and tradeoffs

In this video, we will look at how to install Terraform.

• Learn where to find the documentation

• Choose the correct platform

• Install Terraform in a container

This video will explain how Terraform works with a multitude of cloud and on-prem services and infrastructure.

• Learn where to go for documentation

• Learn how to tag an image

• Learn how build a Docker image

In this video, you will learn how to protect secrets and how to use variables.

• Learn where to go for documentation

• Learn variable properties

• Learn about different variable input types

In this video, you will learn how to create a resource group.

• Learn where to go for documentation

• Learn about the block signature

• Learn about the structure of a resource block

In this video, you will look at how to create a key vault.

• Learn where to go for documentation

• Learn about resource referencing

• Learn how to add inner blocks and their requirements

In this video, you will see what is a pipeline

• Learn the definition of a pipeline

• Learn what a pipeline does

• Learn how it applies to DevOps

In this video, you will see what pipeline orchestration tools are out there and how do I choose

• Learn what popular tools exist

• Learn some guidelines on how to choose

• Analyze the options

This video will explain how do I get started and use Azure DevOps

• Learn how to navigate

• Learn about Git and repos

• Learn how to create a build pipeline

This video will explain how do I edit a build and create and configure a release?

• Learn how to edit a build pipeline

• Lean how to create a release pipeline

• Learn how to configure artifact filters and approvers

In this video, you will look at the benefits and advantages of the visual editor and YAML file methods.

• Learn about the advantages and disadvantages of the visual editor

• Learn about the advantages and disadvantages of the YAML configuration

• Some finial thoughts on choosing a method

In this video, we will look at what is monitoring and logging

• Learn the definition

• Learn what to monitor

• Learn when to monitor

In this video, you will look at what tools are available for logging and monitoring

• Learn about what popular tools exist

• Learn how to view metrics in Azure

• Learn about the logs query console

In this video, you will look at what is scripting

• Learn what scripting means

• Learn about some popular scripting languages

• Learn what pitfalls may arise with different languages

In this video, you will look at the tools available for logging and monitoring

• Learn about the format of bash scripts

• Learn how to use arguments

• Learn how to make options

This video will give you a brief on how can we use powershell to script

• Learn about params

• Learn about syntax

• Learn about functions

This video will give you a brief on how can we make custom tools to elevate our DevOps?

• Learn how to zone in on a specific function for the tool

• Learn about options

• Learn about implementation

In this video, you will look at what are the project details

• Learn the scenario

• Learn about the team

• Learn about the applications

This video will give a brief idea on how do we get started

• Learn how to create a project

• Get your bearings on the tool layout

• Learn about the boards

This video will give you a brief on how do we setup the teams and boards

• Learn how to invite team members

• Learn how to add teams

• Learn about creating tickets

In this video, you will see how do we setup repos and clone them

• Learn about access tokens

• Learn about project organization

• Learn how to clone repos

In this video, you will see how can we enforce best practices and policies

• Learn about branch labels

• Learn about branch policies

• Learn about build validation

In this video, you will see what are the needed resources and how do we create them

• Learn about the team resources requirements

• Learn how to organize a terraform project

• Learn about terraform resource composition

In this video, you will see how do we create more of the resources

• Learn to add key vaults

• Learn how to manage multiple resources

• A word about terraform and modules

In this video, you will see how do we create more of the resources?

• Learn how to create container registry created

• Learn about admin enabled

• Learn about data blocks

This video will brief you on how we can manage secrets and dynamic data?

• Learn about access policies and Terraform

• Learn about what to manage with Terraform

• Learn about the project secrets

This video will give a brief on how do we create a build definition

• Learn about the azure pipeline yaml

• Learn how to reference variable groups

• Learn about build steps

In this video, you will see how do we create a release definition

• Learn how to use tools in the release pipeline

• Learn about how artifacts are used in the release

• Learn how to use variable groups in environments

In this video, we will see how do we work more with the release

• Learn how to define secrets

• Learn more about injecting variables

• Learn about some common errors and fixes

In this video, we will see how do we add multiple environments

• Learn to create multiple environments

• Learn about pre and post conditions

• Learn about namespaces

This video we will see how do we monitor

• Learn about Azure monitoring

• Learn about AKS monitoring

• Learn about logs and alerts

This video will give you an overview about the course.

The traditional techniques of security verification are simply not adequate for this new paradigm. In this video you will see how digitalization and adoption of agile and DevOps practices has changed the way we create software.

• Deliver incremental software quickly

• Explore adoption of DevOps practices

• Learn the advantages of adopting DevOps practices

This video will give you a glimpse of severity of cyberattacks and you’ll see how to manage security risks in a rapidly changing world by adoption of DevOps principles.

• Learn about the continuous security assessment for making safe and secure software

• Embed security checks and verifications at different points of DevOps pipeline

• Fail fast, through automation and security integrating with development tools

In this video you will see the basic principles to be followed for a successful DevOps adoption. You will also see the benefits accrued out of it.

• Add robust security methods to traditional DevOps practices from day 1

• Learn the “Secure by Design" principle along with code review and security testing

• Learn about cost reduction by detecting and fixing security issues early

In this video you will see the strategy for transformation from DevOps to DevSecOps.

• Explore the team approaches to handle security challenges

• Address all the three areas of People, Process and Technology

In this video you will get to see the awesome work being done by OWASP around security.

• Obtain unbiased, practical information about application security

• Explore the OWASP resources and community

• Explore the OWASP top 10 vulnerabilities

In this video you will see how digitalization and adoption of agile and DevOps practices has changed the way we create software. The traditional techniques of Security verification are simply not adequate for this new paradigm.

• Explore Shift-Left Security checks and verifications

• Learn about AppSec Pipelines

• Know more about consistent processes

This video covers the best practices for automating different types of security tests.

• Know that application security solutions need to evolve with changing times

• Learn about the application security need that has been intensified with increasing risks

• Build a comprehensive automated security testing strategy

This video showcases the various tools which are available for performing different types of security tests and scans.

• Choose appropriate tools from different open source and commercial options

• Explore the tools introduced by OWASP

In this video you will see the importance of Red and Blue teams, which are two distinct teams of security professionals who are all working for the betterment of the company, but doing it in opposing ways.

• Approach to test resilience against any attack

• Learn the two-pronged strategy to attack and defend

• Perform an exercise to provide opportunity to challenge organization’s defenses realistically

In this video you will see how proper planning is quite crucial to address security requirements.

• Define proper functional and non-functional requirements.

• Take the first step which is to identify all the risks

• Explore the security user stories for various stakeholders - User, Admin, Business Owner

In this video you will see how to take care of security principles during design and architecture phase.

• Get to think about security from architecture phase

• Identify the core pillars of secure architecture - Confidentiality, Integrity, Availability

• Follow best practices for a secure architecture

This video shows how to apply the techniques of threat modelling, data flow diagrams and attack surface to build a secure and robust design. This would lay the foundation of a secure software.

• Identify the important assets and protect them

• Learn the iterative process from design and throughout the application life-cycle

• Learn about STRIDE model

This video explores the importance of proper Identity and access management to allow only authorized users to access the system and resources.

• Create, maintain, and use digital identities

• Learn the major steps for inventory management– Define, Map, Assign

• Manage identity and access across different phases – Discover, Harvest, Refine.

This video demonstrates the significance of performing code reviews in order to discover vulnerabilities and security related weaknesses.

• Augment standard code review practice with security considerations

• Secure code reviews look for software weakness early on

• Check for areas more prone to weaknesses

The aim of this video is to learn about the security hardening.

• Explore the importance of hardening

• Study the hardening lifecycle

• Take a look at the different automation tools

In this video you will see how Static Application Security Testing helps in finding vulnerabilities earlier in the development cycle.

• Analyze software during coding and unit testing phase

• Scan source code and look in binaries and configuration files

• Judiciously chose static analysis tools to perform static application testing

In this video you will see how to perform Static Application Security Testing by embedding SonarQube into CI/CD pipeline.

• Demonstrate static analysis testing

• Explore the use of WebGoat, a deliberate vulnerable application

• Learn about SonarCloud

This video explorers how Dynamic Application Security Testing helps in finding vulnerabilities on a running application.

• Analyze running application for weaknesses

• Learn about black-box testing where attacks are performed on running application

• Judiciously chose dynamic analysis tools to perform dynamic application testing

In this video you will see how to perform Dynamic Application Security Testing by embedding Zed Attack Proxy into CI/CD pipeline.

• Demonstrate dynamic analysis testing

• Explore the use of WebGoat, a deliberate vulnerable application

• Know more about ZAP

This video showcases newer techniques of performing Security Analysis Testing.

• Instrument code for performing novel security testing and protection

• Use IAST to detect vulnerabilities in a running application

• Use RASP to prevent vulnerabilities from being exploited

In this video you will see how to audit the open-source components being used in any application.

• Make sure that the safe and secure open-source components are being used

• Track usage of OSS components

• Set up policies around vulnerability management and license compliance

In this video you will see how configuration of infrastructure should be secured.

• Identify and mitigate risks to infrastructure configuration

• Follow best practices - Isolation, Firewall and Identity based access

• Use Docker container for a safe and secure environment

In this video you will see how key management and identity management provides safe access to your applications.

• Explore management of encryption keys through their entire lifecycle

• Use KMS to provide organization exclusive custody of encryption keys

• Use identity management to control user information

In this video you will see how companies like Netflix continuously test their production environment with various kinds of chaos. You will also see how fuzz testing can be used to expose system vulnerabilities against malicious input.

• Provide seamless service in distributed / cloud computing environment

• Simulate production environment with various failure scenarios

• Learn about the fuzzing technique

In this video you will see how a system should be monitored for security related incidents.

• Leverage both security information and event management

• Monitor for violations and assign distinct categories

• Know what the judiciously chosen metrics provide

In this video you will see the benefits of good Governance practices and regular audits.

• Manage organization's overall governance, risk management and compliance with regulations

• Track metrics across application security process, risk and SDLC

• Learn more about regular audits

In this video you will see how to respond to security incidents and perform digital forensics to contain the impact and prevent future incidents.

• Learn about having a proper incident response emergency plan

• Aim to prevent incidents by identifying trends in the adversary community

• Learn that Proper Incident Response minimizes losses and mitigates the exploited weakness