Security controls in infrastructure as code

The development, deployment and management of software applications have shifted dramatically in the past 10 years. This fundamental shift is what we now know as development operations (DevOps). Infrastructure as Code (IaC) is one of the main tenets of DevOps. Previously, manual configuration via cloud providers’ UI consoles and physical hardware used to take place. But now, with the concept of IaC, the IT infrastructure can be automated by using blueprints that are easily readable by machines.

[1]  Elisabetta Di Nitto,et al.  Infrastructure-as-Code for Data-Intensive Architectures: A Model-Driven Development Approach , 2018, 2018 IEEE International Conference on Software Architecture (ICSA).

[2]  Akond Rahman,et al.  Anti-Patterns in Infrastructure as Code , 2018, 2018 IEEE 11th International Conference on Software Testing, Verification and Validation (ICST).

[3]  Martin Fowler,et al.  Refactoring - Improving the Design of Existing Code , 1999, Addison Wesley object technology series.