5 ways to use devops in product infrastructure management final
1 like92 views
The document outlines five key ways to apply DevOps principles in managing product infrastructure, including designing networks with best practices, implementing layered security, and setting up a continuous delivery pipeline for infrastructure as code (IaC). It emphasizes the reuse of components in IaC processes and the importance of creating a robust feedback loop through testing frameworks. Additionally, it addresses technology constraints and operational considerations for deploying a two-tier application on AWS using various tools.
5 ways to use devops in product infrastructure management final
- 1. 5 ways to use DevOps principles in product infrastructure management Pradeep Bohra https://www.linkedin.com/in/pbohra/
- 2. Use Case & Constraints 1. Design the network using native best practices 2. Layered Security 3. Setup the CD Pipeline for IAAC 4. IAAC - Reuse Components and Re-contribute 5. Complete the feedback loop SUMMARY OF TOPICS
- 3. USE CASE CREATE INFRASTRUCTURE FOR A 2 TIER APPLICATION
- 4. TECHNOLOGY CONSTRAINTS DOMAIN AND CERTIFICATE AWS INFRA- PROVIDER AWS IAAC Terraform SCM GitHub OS CentOS 7.x ORCHESTRATION Jenkins SERVER CONFIG Ansible INFRA SIZING SIZING DOCUMENTATION
- 5. Design the network using Native Best Practices 1.
- 6. Resilency and Fault Tolerance Minimal Monitoring Scaling Backup and Restore Audits and Compliance Availability SLAs Deployment Interfaces
- 8. NETWORK ACLs (Blacklisting) Security Group (Whitelisting) SIEM RESOURCE POLICY AND IAM Controlled Access IP TABLES OS level whitelisting CIS BENCHMARKING OS Image Vulnerability OPERATIONS VA/PT, Threat Assesment, Threat Detection, Threat response, Security Patches, APPLICATION SAST, SCA, Container Image Scan, DAST, WAF OWASP, ESAPI DATA SECURITY Encryption at REST Encryption at Transit FORENSICS Framework to respond to a security incident
- 9. 3. CD Pipeline for IAAC
- 12. 4. IAAC - Reuse Components and Re- contribute
- 14. 5. Completing the feedback loop
- 15. CREATE ROBUST TEST FRAMEWORK WRITE TEST CONFIG ALONG WITH CODE WRITE COMPARISION CRITERIA LEVERAGE NATIVE SERVICES FOR TEST TECHNICAL DEBT DECOMMISSIONING MAINTAIN DAR
- 16. QUESTIONS THANKS