DevSecOps & DevOps with Jenkins, Kubernetes, Terraform & AWS

Course Curriculum

Chapter 1: Introduction

Lecture 1: Introduction and Course Agenda

Lecture 2: Quick tips on enhancing learning experience

Lecture 3: About the Course

Lecture 4: Understand End to End Case Study that will be implemented in this course

Chapter 2: Basics about DevSecOps and Security

Lecture 1: What is DevSecOps?

Lecture 2: Tools used for DevSecOps

Lecture 3: Basic Security Terms used in this course

Lecture 4: Terraform Basics

Chapter 3: Install Terraform and AWS CLI on Windows Machine

Lecture 1: Download Terraform on Windows Machine and Configure PATH in windows machine

Lecture 2: Create AWS Free Tier Account

Lecture 3: Create AWS Admin User

Lecture 4: Install AWS CLI and Authenticate with AWS

Lecture 5: Install Visual Studio Code on Windows Machine

Chapter 4: Work with Terraform to create DevSecOps Infrastructure in AWS

Lecture 1: Install Git on Local System (If not already installed)

Lecture 2: Clone Terraform Repo On Local System

Lecture 3: Open the Terraform Repo in Visual Studio Code

Lecture 4: Understand Terraform Script to create AWS Infrastructure for DevSecOps

Lecture 5: Understand shell script to install softwares on EC2 instance using Terraform

Lecture 6: Understand variables file in TF and create AWS Key pair to create EC2 using TF

Lecture 7: VPC Id for the infra creation

Lecture 8: Run Terraform Script to create AWS Infrastructure for DevSecOps

Chapter 5: DevSecOps with Jenkins on AWS EC2 instance – Integrate SAST in DevSecOps

Lecture 1: Find Jenkins Password and Complete Jenkins Setup

Lecture 2: New Jenkins UI Update: Global Tool Configuration renamed to Tools

Lecture 3: Configure Maven in Jenkins

Lecture 4: Install Required Plugins in Jenkins

Lecture 5: What is SonarCloud and its benefits?

Lecture 6: Create an account with SonarCloud

Lecture 7: Integrate SonarCloud in Jenkins Pipeline

Chapter 6: Integrate SCA scan in Jenkins DevSecOps pipeline

Lecture 1: What is Snyk and its benefits?

Lecture 2: Create an account with Snyk

Lecture 3: Integrate and run SCA scan in DevSecOps pipeline using Jenkins

Chapter 7: Build and Push Docker image to AWS ECR before Kubernetes deployment

Lecture 1: Understand docker image Build and Push Code and create docker login in Jenkins

Lecture 2: Create AWS ECR and create AWS credentials in Jenkins credential manager

Lecture 3: Build and Push docker image to AWS ECR

Chapter 8: Deployment to Kubernetes cluster (EKS) in AWS

Lecture 1: Create Kubernetes Cluster (EKS) using EKSCTL utility

Lecture 2: Add Kubernetes deployment stage in DevSecOps pipeline and add kube login

Lecture 3: Deploy Buggy web application on Kubernetes (EKS) using DevSecOps pipeline

Chapter 9: Integrate DAST scan in Jenkins DevSecOps pipeline

Lecture 1: What is OWASP ZAP and its benefits?

Lecture 2: Understand code written for integrating DAST scan in DevSecOps pipeline

Lecture 3: Run DAST scan and End to End DevSecOps pipeline using Jenkins

Chapter 10: Cleanup all the resources created in this course

Lecture 1: Cleanup resources created in the course using eksctl and Terraform

Lecture 2: Debugging: Some useful commands to fix issues during cleanup

Chapter 11: Report security vulnerabilities in JIRA

Lecture 1: Hands On: Create a JIRA account with Atlassian with custom JIRA site

Lecture 2: Hands On: Report SAST security issues in JIRA identified by SonarCloud

Lecture 3: Hands On: Report SCA security issues in JIRA identified by Snyk

Lecture 4: Hands On: Report DAST security issues in JIRA identified by OWASP ZAP

Lecture 5: Hands On: Integrate JIRA with SonarCloud to create tickets with one-click

Chapter 12: Next Steps and Bonus section

Lecture 1: DevSecOps Handbook

Lecture 2: Optional: Application Security As a Career

Lecture 3: Sample DevSecOps Engineer CV

Lecture 4: Bonus Lecture