Test Automation for Deployments

ACM.26 Making sure code changes don’t break something else

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics | The Code

🔒 Related Stories: Application Security | Secure Code

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In the last post, I wrote about why you might want to consider having separate IAM administrators dedicated to the task of assigning permissions for users and compute resources on AWS. We left the policies associated with application roles in the hands potentially of application developers or an AppSec team. We’ll delve into that in more detail and consider who should handle resource policies in upcoming posts.

Why You Should Consider Separate IAM Administrators

This post is going to be short and sweet. If you follow on Twitter you might have noticed that I finally got covid and it hasn’t exactly been “no symptoms”. Hopefully, I am on the mend. The bugs in my code will have to wait.

In my last post I explained how and why I centralized the IAM scripts to a…