From the course: Programming Foundations: Secure Coding (2018)

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Embrace security in deployment

Embrace security in deployment

- Deployment of code is one of those areas that all too often gets ignored when it comes to developing a secure coding plan. This is an unfortunate oversight, as there are many ways to improve the security of your system at this point. One of the weakest points of secure deployments is how you manage the sensitive configuration of the systems being deployed. The use of files on a file system or in a startup script all too often count as secure enough, when in reality, they fail. They expose significant attack vectors into your systems or the systems you depend on. There are, however, very powerful tools and patterns that can be leveraged to improve the secrecy and security of these sensitive data points. Some of the tooling have sophisticated APIs and startup routines that ensure your system will get its config, and no one else can. If you're deploying to a containerized framework, you also likely have built-in…

Contents