Introduction to DevOps
Software Development Introduction
Software Development Life Cycle
SDLC Models - Waterfall Models, V Models, Sprial Models
What is DevOps Methodologies
Why DevOps?
DevOps Life Cycle
Tools used in DevOps
Course Syllabus
Basics of Virtualization
Introduction to Virtual Machines
Why Virtualization is Required?
How to install Virtual Box?
How to create VMs Using Virtual Box?
Virtualization with Vagrant
Introduction to Vagrant
Why Vagrant is Required?
How to Use Vagrant?
Vagrantfile
Learn how to Launch VMs Using Vagrantfile
Version Control - Source Code Managament
What is Source Code Management
Version Control Types - From Git to Bitbucket
Git Installation and Configuration
Open Source Git Introduction
What is GitHub and Bitbucket?
Life Cycle and Terminologies in Git
Creating Repo using Git
Basic Git Commands
Checking Repo Status
Adding File to the Repo
Commiting File to the Repo
Removing Staged File from the Repo
Removing Commited File from the Repo
Checking Logs of the Repo
Creating, Deleting the Branches
Merging Git Branches
Resolving Conflicts
Git Workflow
Working With GitHub / Bitbucket Repo
Continous Integration Tool - Jenkins
Continous Integration Introduction
Jenkins Introduction
Installing and Configuring Jenkins
What is Node?
Configuring and Setting Node
Jobs and Jenkins Plugins
Build Commands using Shell or Batch Commands
Creating Application Builds
Cloning the Sample Project
Creating Jenkins Projects and Configuring Git Repo
Jenkins Master and Slave Architecture
App Packaging in Jenkins
Creating Scheduled Build with Jenkins
Backup and Restore of Jenkins
Cleaning up past build
Post Build Triggers
Containerization Using Docker
Containerization Introduction
Docker Introduction
Installing and Configuring Docker
Docker Life Cycle, Components and Terminologies
Docker Operations
Docker Images
Docker Swarms
Docker Volumes
Docker Networks
Container Life Cycle
Using Dockerfile to Create Custom Image
Moving Docker Image to DockerHub
Pushing Web App to DockerHub
Configuration Management Using Puppet
Configuration Management Introduction - Puppet
Puppet Introduction
Installing and Configuring Puppet
Puppet Architecture
Puppet's Master Slave Setup
Puppet Resources
Puppet Classes
Puppet Modules
Puppet Manifests
Puppet Heira, Forge
Puppet Roles and Profiles
Writing manifest files
Deploying apps to Puppet Master
Configuring Test Builds
Performing Test Builds
Pushing App to Production
Configuration Management Using Ansible
Configuration Management Introduction - Ansible
Ansible Introduction
Installing and Configuring Ansible
Ansible Architecture
Ansible's Master Slave Setup
Ansible Play
Ansible Playbook
Ansible Roles
Ansible Tests and Variables
Ansible Tower, AWX and Galaxy
Advanced Playbook Usage
Applying Configuration Using Ansible
Configuration Management Using Chef
Configuration Management Introduction - Chef
Chef Introduction
Installing and Configuring Chef
Chef Fundamentals
Chef Cookbooks and Recipies
Chef Attributes
Chef Testing
Advanced Chef Usage
Continous Orchestration Using Kubernetes
Continous Orchestration Introduction
Kubernetes Introduction
Kubernetes Setup
Kubernetes Architecture
Kubernetes Pods
Kubernetes Deployment using YAML
Kubernetes Rollback and Update
Kubernetes ReplicationSet
Lables and Selectors in Kubernetes
DeamonSets
Services and Ingress in Kubernetes
Web Application Security using Acunetix
Introduction to Acunetix
Web app focussed DevSecOps Using Acunetix
Vulnerability scanning using Acunetix
Custom development integration using Acunetix
On-site hosting support using Acunetix
AD-based user management
Git Repository Support using Acunetix
Continuous Code Inspection Using SonarQube
Code Inspection Introduction
SonarQube Introduction
Startegy Planning
SonarQube Drive Code Reviews
IDE Integration
Security : Users, Group and Roles
Rule Profile Administration
Managing Projects
Infrastructure as a Code IaC Using Terraform
What is Infrastructure-as-Code?
IaC vs Configuration Management
Terraform Introduction
Terraform Architecture
Terraform Commands - Init, Plan, Apply, and Destory
Terraform Resources
Terraform Configuration Files
Terraform State and Project
Terraform in AWS
Continuous Testing
Continuous Testing Introduction
Software Testing Life Cycle
Testing Types
Test Driven Development - JUnit
Testing Web Application Using Jenkins
Image Building Tool - Packer
Image Building Introduction
Packer Introduction
Installing Packer
Setuping Packer
Running Packer
Provisioning Packer
Docker and Packer
Testing Packer
Pipelines and Workflow
Running Packer to create AWS AMI Images
Artifactory - JFrog Artifactory
Artifactory Introduction
JFrog Artifactory Overview
Install and Setup JFrog Artifactory
Integrating Jenkins Using Artifactory
Web Server - Apache Tomcat
What is Apache Tomcat?
Installing, Setup and Configuring Tomcat
Running Apache Tomcat
Jenkins Integration of Apache Tomcat
Build Management - Maven
Build Management Introduction
Maven Introduction
Maven Architecture
Maven Dependencies
Maven Plugins
Building POM Files
Maven Repositories
Maven Archetypes
Integrating Maven Files
Continuous Log Analysis Tools - ELK
Continuous Log Analysis Introduction
What is ELK?
ELK Installation
Components of ELK
Features of ELK
ELK
Configuring Logstash and Kibana
Analysing Logs with Logstash and Kibana
NPM - Node Packeage Manager
Node JS vs DOM JS
Node JS Introduction
What is NPM?
NPM Installation
Node JS – Web Server Coding and Development
Node JS - Using Express JS NPM Package
NPM Commands - init, install, run
NPM Build
SDLC and CI/CD pipeline security
What exactly is Secure SDLC?
SDLC Security Gates and Activities
Security Prerequisites ( Requirements)
Modeling of Threats (Design)
Secure by Default and Static Analysis ( Implementation)
Dynamic Evaluation (Testing)
OS Hardening and Web/Application Hardening (Deploy)
Compliance/Monitoring of Security (Maintain)
Maturity Model for DevSecOps (DSOMM)
Maturity levels and tasks involved
Four Axes in DSOMM
How to Advance from Level 1 to Level 4 Maturity
Maturity Level 1 Best Practices
Maturity Level 2 Considerations
Maturity Level 3 Challenges
Aspiration to reach Maturity Level 2
Using trade tools to perform the aforementioned activities in CI/CD
Embedding Security as part of the CI/CD pipeline
DevSecOps and the difficulties of pentesting and vulnerability assessment
Hands-on: Design a CI/CD pipeline for a modern application
Hands-on experience: Manage the findings in a fully automated pipeline
The Role of Software Component Analysis (SCA) in the CI/CD Pipeline
What exactly is Software Component Analysis?
The Challenges of Software Component Analysis
What should you look for in a SCA solution? (Free or Commercial)
SCA tools such as OWASP Dependency Checker, Safety, RetireJs, and NPM Audit, Snyk are being integrated into the pipeline
Demonstration of using OWASP Dependency Checker to scan third-party component vulnerabilities in Java code base
Hands-on Labs: Scan third-party component vulnerabilities in Javascript code using RetireJS and NPM
Hands-on Labs: Scan third-party component vulnerabilities in Python code base using Safety/pip
Static Analysis in the CI/CD Pipeline
What is Static Application Security Testing
Static Analysis and Its Difficulties
Incorporating SAST tools such as Find Bugs into the pipeline
Secrets scanning to prevent secret information from being exposed in the code
Writing custom checks to detect leakage of secrets in an organisation
DAST (Dynamic Analysis) in the CI/CD Pipeline
What exactly is Dynamic Application Security Testing (DAST)?
The Difficulties of Dynamic Analysis ( Session Management, AJAX Crawling)
Incorporating DAST tools such as ZAP and Burp Suite into the pipeline
SSL testing for misconfiguration
Misconfiguration of the server Secret folders and files are used for testing
Creating DAST baseline scans
Aqua Security as Application Security Platform
Introduction to Aqua Security
Aqua Security supported by Kubernetes
IaaS using Aqua Security
Vulnerability, Malware, and Secret Detection by using Aqua Security
Compliance Checking Using Aqua Security
CI/CD integration with Aqua Security
Static Code Analysis using Codecy
Overview of Codecy
Automated Code Review using Codecy
Git integration with Codecy
Live review
Self-hosting Option using Codecy
Static Application Security Testing using Checkmarx
Introduction to Checkmarx
Source Code Vulnerability Testing using Checkmarx
Open-source Code Security Scanning using Checkmarx
Gitlab
AWS integration using Checkmarx
Central Testing Platform using Checkmarx
Enterprise-level Support and Training
Automated Security using Prisma Cloud
An Introduction to Prisma Cloud
Automated security scanning using Prisma Cloud
Open-source foundations
Live feedback and mitigation
Policy editing using Prisma Cloud
Git integration with Prisma Cloud
Ghani
Senior DevOps Architect
He is a solutions architect, consultant and software developer that has a particular interest in all things related to Big Data, Cloud, DevOps, Security & API. He is recognized as an Cloud Master and is an AWS Certified Solutions Architect Professional, Azure DevOps, Azure Administrator & AWS Certified DevOps Professional. He loves to teach people how to use the AWS properly, to get them ready for their AWS certifications, and most importantly for the real world.
DevSecOps Training in Gurgaon Key Skills
- DevSecOps
- Codacy
- SonarQube
- Acunetix
- Logz.io
- GitLab
- Contrast Security
- Aqua Security
- XebiaLabs
- WhiteSource
Advantages in TutorsBot
- Placement Team for Job Assurance to Course Enroller
- Professional Trainer from IT Industry
- Deidicated Support Team for Training and Development
- Practical Training Program includes Hand On Project Session
- More than 150 Subject Matter Expert Community
- Five Years of Training Services Provider
- Placed More than 850 Students
