by andriejsazanowicz
By default, many container services run as the privileged root user. Every container is just a running process. Preventing root execution by using non-root containers (configured when the image is built) or a rootless container engine (some container engines run in an unprivileged context rather than using a daemon running as root; for example, podman) limits the … Read more
SecOps is a new paradigm for seamless collaboration between IT Security and IT Operations to more effectively mitigate risk, in much the same way that DevOps established a new way of working between application developers and IT Operations. Where traditional approaches to security and compliance have failed, SecOps deploys new work processes and solutions that … Read more
In order to audit an AWS environment it’s very important to know: which services are being used, what is being exposed, who has access to what, and how are internal AWS services an external services connected. This is basic AWS security checklist for Administrator: Identity and Access Management (IAM) In AWS there is a root … Read more
I often hear the same question, what are mandatory skills needed becoming a DevOps engineer or developing and operating specialists, especially for those who coming from strictly programming area. Where to begin for fresher or what is the best start point for someone how is a newbie in IT on his own? I can say … Read more