Learning DevSecOps: A Practical Guide to Processes and Tools

by Steve Suehring

How do some organizations maintain 24-7 internet-scale operations? How can organizations integrate security while deploying new features? How do organizations increase security within their DevOps processes? This practical guide helps you answer those questions. Steve Suehring provides unique content to help practitioners and leadership successfully implement DevOps and DevSecOps. Learning DevSecOps emphasizes prerequisites that lead to success through best practices and then takes you through some of the tools and software used by successful DevSecOps-enabled organizations.

You'll learn how DevOps and DevSecOps can eliminate the walls that stand between development, operations, and security so that you can tackle the needs of other teams. With this book, you

- Learn why DevSecOps is about culture and processes, with tools to support the processes

- Understand why DevSecOps practices are key to deploying software

- Deploy software using a DevSecOps toolchain and create scripts

- Integrate processes from other teams earlier in the software development lifecycle

- Help team members learn the processes important for successful software development

PLEASE When you purchase this title, the accompanying PDF will be available in your Audible Library along with the audio.

Genres: Computer Science, Technology, Software, Programming

Audible Audio

Published August 27, 2024

Reviews

[GLOWIE · Rating 2 out of 5]

That book is really something special. The author tries to provide an overview of what DevSecOps is. He correctly states, that this term - alongside others - is kind of a not well defined buzzword.

The actual content of the book tries to walk a silver line, starting with basics of TCP/IP and various protocols, over bash scripting, over docker and kubernetes. However, everything is so vague that literally blogposts with a read time of 15 minutes include more practical and useful examples. The book is full of rants, e.g. against systemd, but the actual value of the tools described is near zero. To showcase, the book explains how to install docker, pull docker images and list running docker containers. That's it. Same level of complexity on Bash scripting or k8s.

I can really not recommend this book. As it has been part of HumbleBundle I got it, but even that price was too much, imho.

[Andrei Gavrila · Rating 2 out of 5]

I didn't like it. At all.

It's a mix of everything with too little focus on DevSecOps—especially lacking on the SEC part.
I dropped the book at 53%.

I'm sorry to be the first one to review it with such a harsh conclusion but in my opinion, this is a book to skip.

[Linus · Rating 2 out of 5]

The book was not necessarily bad, but I felt there was a lack of focus. Often it felt like there were explanations of specific tools/commands rather than focusing on how to think security-wise.

[Carlos Chacon Chavarria · Rating 2 out of 5]

I got the audiobook and 90 minutes talking about intro stuff like ping, dns, ttl :|