Widespread adoption of cloud computing and DevOps have led to containers becoming the most popular and efficient way to deploy applications. However, containerization presents enterprise security risks that question existing security policies and compliance frameworks. This course provides a necessary understanding of known attacks required to improve the security of container application deployments.
On successful completion of this course, learners should have the knowledge and skills to:
- Use tools in the development stage to help convert requirements into source code.
- Leverage the security features available in most integrated development environments (IDEs) for multiple programming language support
- Identify and mitigate the most common IaC vulnerabilities, including Weak Authentication Tokens, Disclosure of Authentication Credentials, Excessive Privileges or Capabilities, Misconfigured Network Filtering and Missing Encryption