Shift Left - How to improve your security with checkov before it’s going to production

Shift Left - How to improve your security with checkov before it’s going to production

• 1.
  Anton Grübel, AWSDevOps Engineer SHIFT LEFT How to improve your security with checkov before it’s going to production
• 2.
  Me, Myself &I ● AWS Enthusiast ● Python Fan ● Open Source Contributor ● Playstation Gamer ● GitHub: gruebel ● PSN: anton-mai
• 3.
  About us 2017 Founded 100%AWS-focussed 20 Talents 33 AWS Certifications 1 AWS Competency 1 APN Ambassador 1 AWS Community Builder
• 4.
  What is ShiftLeft? Shift Left is a practice intended to find and prevent defects early in the software delivery process. The idea is to improve quality by moving tasks to the left as early in the lifecycle as possible. Kirstie Magowan (bmc)
• 5.
  Shift Left model
• 6.
  Shift Left security
• 7.
  IaC security tools ●cfn-nag ● terrascan ● KICS ● tfsec ● terraform-compliance ● AWS CloudFormation Guard ● checkov
• 9.
  checkov features ● Over1000 built-in policies ● Supports Terraform (+ plan), CFN, ARM, Docker, Kubernetes, Helm, SLS ● Supports AWS, GCP, Azure ● Custom checks written in Python or YAML ● GitHub Action available ● pre-commit hook available ● Output as CLI, JSON or JUnit XML
• 10.
  Further reading ● https://www.checkov.io/3.Custom%20Policies/Custom%20Policies%20Overvi ew.html ●https://aws.amazon.com/blogs/mt/introducing-aws-cloudformation-guard-2-0/ ● https://aws.amazon.com/blogs/infrastructure-and-automation/use-git-pre- commit-hooks-avoid-aws-cloudformation-errors/ ● https://github.com/antonbabenko/pre-commit-terraform
• 11.
  Keep shifting left! globaldatanetglobaldatanet.com [email protected]