Reference no: EM133142387

CLOUD DevOpsSec Assignment -

Description - A company has commissioned you to prepare a case study to develop a plan for provisioning and configuration of web applications through a full lifecycle CI/CD pipeline. You are required to prepare a report to document the case study for web applications created primarily in a specific programming language. The programming language is assigned based on the penultimate i.e. second to last digit of your Student ID as described in the Table Programming Language.

The company asks you to identify all the relevant cloud-based services offered by Amazon Web Services (AWS) and third-party tools that enable the creation of the full CI/CD pipeline that incorporates mechanisms to support secure application development and secure execution in production. Note that you do not have to implement the CI/CD pipeline, but document all of the above through a report.

Penultimate (i.e. second to last) digit of Student ID	Programming Language
0, 1	Java
2, 3	C#
4, 5	Go
6, 7	Ruby
8, 9	C++

Deliverable - You are required to submit the following deliverable through the dedicated submission page available on the module's Moodle page.

A 3-4 pages report (formatted using the IEEE Conference double-column template1) which documents your case study taking into account the programming language the company uses to develop their web applications (i.e. assigned to you based on Table 1). The report should include:

Headline: title of the report, your name, student number, module, programme

Abstract - a 150-300-word executive summary of the case study and its main findings

Section 1: Introduction - set the scene of the case study including its objectives

Section 2: A comprehensive plan for provisioning and configuration of web applications through a full CI/CD pipeline, identifying suitable cloud-based services offered by Amazon Web Services (AWS) and third-party tools used at each stage in the pipeline to support secure application development and secure execution in production.

Include a diagram of the entire workflow highlighting the different stages in the pipeline; the diagram should clearly indicate where the different cloud-based services and third- party tools are used to support the CI/CD pipeline, and the relationships between these services/tools.

Ensure that you distinguish between the CI and CD in the diagram. The diagram should be fully explained in the text and have a meaningful caption. Note that the diagram should be created by you based on your own case study.

Section 3: Secure application development and secure execution in production - for the security aspects you must identify, integrate in the CI/CD pipeline, and discuss the cloud services/third- party tools available at least for the following stages:

-Security during Building

-Security during Testing

-Security during Monitoring

Section 4: Critical Analysis - for each of the cloud-based services and third-party tools proposed in the different stages of your CI/CD pipeline, provide a critical analysis of those cloud-based services and third-party tools to justify your selection/choice of a particular cloud based service/third-party tool as compared to other tools available for that stage.

Section 5: Conclusions including findings/interpretations - what did you learn and find out?

References - a complete list of academic works and/or online materials used in the report/case study.

References should be included as in-text citations using the IEEE referencing style.

Attachment:- CLOUD DevOpsSec Assignment File.rar