Shift Left - How to improve your security with checkov before it’s going to production
- 1. Anton Grübel, AWS DevOps Engineer SHIFT LEFT How to improve your security with checkov before it’s going to production
- 2. Me, Myself & I ● AWS Enthusiast ● Python Fan ● Open Source Contributor ● Playstation Gamer ● GitHub: gruebel ● PSN: anton-mai
- 3. About us 2017 Founded 100% AWS-focussed 20 Talents 33 AWS Certifications 1 AWS Competency 1 APN Ambassador 1 AWS Community Builder
- 4. What is Shift Left? Shift Left is a practice intended to find and prevent defects early in the software delivery process. The idea is to improve quality by moving tasks to the left as early in the lifecycle as possible. Kirstie Magowan (bmc)
- 7. IaC security tools ● cfn-nag ● terrascan ● KICS ● tfsec ● terraform-compliance ● AWS CloudFormation Guard ● checkov
- 9. checkov features ● Over 1000 built-in policies ● Supports Terraform (+ plan), CFN, ARM, Docker, Kubernetes, Helm, SLS ● Supports AWS, GCP, Azure ● Custom checks written in Python or YAML ● GitHub Action available ● pre-commit hook available ● Output as CLI, JSON or JUnit XML
- 10. Further reading ● https://www.checkov.io/3.Custom%20Policies/Custom%20Policies%20Overvi ew.html ● https://aws.amazon.com/blogs/mt/introducing-aws-cloudformation-guard-2-0/ ● https://aws.amazon.com/blogs/infrastructure-and-automation/use-git-pre- commit-hooks-avoid-aws-cloudformation-errors/ ● https://github.com/antonbabenko/pre-commit-terraform
- 11. Keep shifting left! globaldatanet globaldatanet.com hello@globaldatanet.com