Complete DevSecOps Bootcamp - Most Extensive Training OUT NOW 🚀

Key Takeaways

welcome to the def cops boot camp why did I create another boot camp specifically to teach about def secops according to several data Trend analysis def secops is the most demanded upcoming skill set needed in the job market why security breaches are expected to cost companies trillions annually so while devops solved the automated release of applications it kind of left out the security which still remained an afterthought and to bring security into the dev Ops processes and integrated into every step devops concept emerged and is becoming more and more popular so as you see security has huge impact and importance for companies and devops is a key role in implementing Security in devops processes that means an engineer equipped with this knowledge is highly valuable for any company that cares about security at all now as you already know devops is becoming standard in companies across the world and demand for devops engineers or Engineers with devops skills has grown drastically over the years that's why so many Engineers learn devops or completely Chang their careers to devops and why we created the devops boot camp as well so there's a strong trend of Engineers learning devops which is already a hugely valuable skill set and knowing devops will give you an absolute competitive advantage on the job market for many years to come whatever your engineering background is but devops is taking this even step further they're just a handful of devops Engineers worldwide who have the complete skill set to take over devops related tasks that companies are so desperately looking for so if you want to be in the absolute top place and stand out even among the devops and Cloud professionals this program will help you achieve exactly that it will make you extremely demanded and absolutely Irreplaceable and when you embark on a journey of learning such highly complex skill set as def cops you need a comprehensive guide and learning materials that will teach you the real life aspects and use cases of Def cops and actually prepare you with the Practical knowledge to take over the role or level up your current engineering role whether you are a developer or systems administrator Cloud engineer SRE whatever it is and that's exactly why we created this boot camp this is hands down the most value packed and extensive course that currently exists out there on this specific topic which provides tons of use cases practice references Hands-On demos and real life examples in fact more than 90% of the contents are Hands-On projects because you learn the best by actually doing things things also very important note is that we compressed tons of knowledge in this boot camp to make sure to give you the most amount of training and experience in the shortest amount of time possible because no matter how valuable a skill set is that you're learning you don't want to be spending years before you can actually use it and apply it in your career and that's why we have these intensive boot camps which has tons of Technologies and Concepts but is taught in such an efficient way no fluff no unnecessary time wasters clear structured path with a perfectly laid out curriculum so you can complete it within several month which is very short time for getting a complete education on some of the world's most highly demanded engineering roles however I'm not big on Theory and certificates I don't think that theory and learning for certificates are actually applicable to do the actual work I am a practitioner and I like to teach the Practical stuff which means in all of our courses and boot camps practical real life projects is the core and the theory and explanations are just there to support these real life projects and that's the only way I believe you will be ready not only to get hired so that you can learn a job but actually be able to implement things from day one at work because you just learn how things should be done in real world and not in classroom and we have hundreds of students that join the teams and were able to build full cicd pipelines full-fledged devops processes automate stuff from day one without actually needing to learn this stuff at work because they learned them in the boot camp now one of the main strategies we used here especially in Def cop's boot camp to achieve this is simply collaborating with multiple Dev seops professionals to make sure to capture all our different real life experiences because guess what different companies have different use cases and practices but even more than that I worked closely with and got inputs from Engineers of those tools themselves that are part of the def secops processes and part of the devops boot camp because obviously they know what they built and what are all the Practical use cases that different companies use those tools for and this is of course where the reach of our YouTube channel and status of do captain and AWS container hero helps me a lot because I can actually reach out to Engineers of different Technologies and talk to them and I actually make sure to always use this extensive network to the advantage of our students so all these knowledge of the Security Experts of different fields Technologies packed into this one boot camp which naturally means lots of time and effort went into putting together this boot camp it actually took took us almost 2 years to create the perfect balance of comprehensive practical but compact training in each lecture and I hope you will be able to see all that when you join the boot camp now before you rush to enroll in the boot camp full of excitement first let's actually find out do you fulfill the criteria needed to enroll in this boot camp because you need a lots of prerequisite knowledge for this if you're an engineer who has held any technical role already so if you are a software developer cloud or devops engineer maybe SRE or systems administrator Etc and very important in addition to those you already know and have worked with tools for containers container orchestration and most importantly cicd release pipeline then this boot camp is definitely for you so you have all the skills that are needed to start learning the things in this boot camp so adding dep Ops to your existing experience and knowledge will tremendously benefit your career and just help you in your job to add even more value at your work because just like devops devops encompasses and affects every single step of the software development life cycle so you will be affecting lots of different roles within your organization or within your project teams and again because it's practical we actually cover implementing devops in the entire software development life cycle where you also learn which other engineering roles you will be affecting and how that means to list all the prerequisites you need to know Essentials of cicd tools like Jenkins or gitlab C GitHub actions or something similar so this is an absolute must prerequisite you also need to know Docker terraform kubernetes Linux automation with python and AWS because in the dcops boot camp we use all of these Technologies but from a security perspective so all the basics and all the essentials of these tools need to be there and these are actually all the things you learn in our devops Boot Camp or a subset of things you learn there including Jenkins but for gitlab specifically which is the cic tool that we use in the def cops boot camp if you have zero experience with it we actually have a git Laci course as well where you will learn all the essentials that you will need for the def cobs boot camp so just make sure that either through our courses or from learning somewhere else or just work experience you check the boxes of this prerequisite list now if you are coming from more it operations background and want to start into devops and devops you will also want to have a good foundation of software development like you don't have to be super fluent in coding obviously because def cop's role is is not about coding but you have to understand the software development Life Cycle Concepts and this can also tremendously help here to connect the dots in multiple places more easily and the software development Basics and the entire life cycle basically the steps involved in that you actually learn in our it beginners course so if you want to up your skills in this area then that would be the course to start with however it's not a must so it's more of an optional requirement but that would definitely make it easier to do both devops and devops boot camps so basically you need knowledge and understanding of devops to the same level as you get in our devops Boot Camp or as I said an equivalent work experience and if you know my tutorials and courses already you know that I always always explain and take time to thoroughly go through the details of any concept or functionality that I'm demoing without assuming that people already know it in detail so I don't leave stuff out and that's why I make sure to cover the relevant Concepts and details in the appropriate courses and boot camps to make it easy for anyone to decide basically what skill set they want to learn properly and not repeating everything in every course so that means if something is not explained in detail in a def aops course it surely means that it was already explained in either devops Boot Camp or gcii course so that's basically a prerequisite if you fulfill that if you check all the boxes here then you're good to go so let's get to the actual contents of what you will learn when you enroll so basically what new powerful skills and expertise you will have once you have completed and worked through the entire boot camp and the first things first we start with Security Essentials or security Basics which is great since you don't need this as a prerequisite knowledge so even if you don't have security background this chapter covers all of that and it's important because security is a very broad topic and we need to cover all Security Essentials needed to lay the foundation for the entire upcoming training to fill any knowledge gaps specifically for death ccops in this chapter we also go through what's called owp top 10 categories a devops engineer should definitely know the OS foundation and be familiar with their work so this is a perfect introduction to them and one of their projects actively used as guidelines in application security so we go through this in detail deep diving and understanding each category and what security aspects they cover very important we're going to go through different security risks at different levels of the application whether it's the application code itself the runtime the infastructure and so on different security types explaining SQL injection path traversal xss or cross-site scripting client or server side request forgery and several others is part of security Basics and if you're a software developer alone this knowledge added to your current experience will make you 10 times better at your work if you understand the security Concepts behind the application security and as a non-software developer this is the central part of understanding what security threats an application or system systems around that application can even have before you learn how to secure stuff so this chapter is an absolute must for anybody who wants to understand core application security Concepts in order to learn about def secops so instead of just learning how to execute security scanning Tools in order to automate devops processes by just copy pasting the commands from the official documentation you actually learn what you are trying to secure with those tools or what security issues you are trying to validate and this is the difference between our educational material and any other courses which leave out such crucial knowledge and only focus on the tools and their features without teaching the concepts and purpose behind them after understanding the security essentials we've basically laid a good foundation to build on top of that and now understand the wise behind the devops why was there a need for it and what purpose does it have so here you will learn about the devops concepts the different types of defs acops automation tools the security scanning types what you automate and how and it's also important to understand def cops as its own engineering role and clear division of responsibilities between def cops and other engineering roles which is an extremely important but often ignored topic and this is an example of a direct reference to practice and how things are implemented in Real World versus the theory now let me add here if you just learned these two chapters that I just described and you didn't even continue with the rest of the boot camp you will already be more knowledgeable in security and defic cops then 80% of Engineers were not directly security Engineers which is pretty crazy to be able to learn all these in just first two chapters considering the importance of these highly complex topic and again we achieve that by dedicating lots of time to put together the essential topics crafting the project outline and going into the right level of detail in each lecture and now starts the action with all this knowledge we can start the exciting journey of learning def aops with Hands-On practice and integrating Security in every single step now the demo projects in the rest of the boot camp are divided into three main categories application security infrastructure and Cloud security and platform security for kubernetes specifically and each one of those alone in isolation is a huge topic so we cover all of them plus a couple of more things that I'm going to mention at the end the category of application security is the part where you learn tons of devops tools which help us automate security validation in our applic release process to basically validate whether our application code is secure or not and if not what security issues does it actually have and how can we fix them so we start off by setting up a base CI Pipeline with little to no security and this is done on purpose so that we can see a clear comparison of before and after security implementation securing the pipeline step by step and learning New devops Concept ceps and tools in each of these steps and as I said there are tons of devops Concepts and tons of things that go into automating application security with devops so we're going to start implementing automated Security checks to scan the application code for any leaked secrets in the code we're going to do extensive code testing using SAS tools which stands for setting application security testing and we also going to learn about software composition analysis to automate validating any thirdparty dependencies of an application for any security issues and as part of that we're also going to learn the concept of cves and how they reference known vulnerabilities in third-party public libraries so here we're going to learn the concepts of what each type of security scanning actually does and all the tools that help us automate those processes but when we do the automated security scanning we also want to visualize the results so we are going to learn how to generate reports of any of those automated Security checks how to use a vulnerability management tool called defect Dojo to upload those reports and use defect Dojo to help us find the fixes and find the remediation of the security issues we're also going to learn a very important concept of false positive analysis when working with security scanning tools and we're going to learn for the Practical real world reference why that is so important and how to configure the tools to minimize and reduce the number of false positives what we also going to do is based on the python Knowledge from devops we're going to actually automate the process of generating reports and uploading them to a vulnerability management tool which again is a use case that you would need in a practical real world application of Def secops because devops and devops is all about automating and this is part of that automation process and then very interesting and important we are actually going to dig into the example application that we are scanning for Securities and we're going to actually fix some of the issues like SQL injection issue the third party Library vulnerabilities and so on in order to understand how the fixes are done in general as well as important notes on understanding the tasks and responsibilities in devops process and how that applies to real world again and that is just the CI pipeline but of course the pipeline continues from CI to cicd with the addition of continuous deployment and eding a deployment part basically opens up a whole new world of security concerns that we need to handle with other Concepts and tools so here again we start off by building a completely insecure but realistic continuous deployment to AWS with bad security practices so that we can secure that step by step and see the comparison of before and after implementing def cops as part of that we're also going to learn a very important concept of image scanning because as you know Docker has become standard we are deploying our application as containers and container is a runtime for the application so we're not only concerned about how secure the application code is but also the environment where it's going to run which is container how secure that runtime is and again we're going to use def cops automation tools for container scanning and on top of that we actually learn how to configure automated scans on the docker repository itself and specifically in AWS ECR and again we're going to go a step further here and we're also going to see example of how to actually fix or remediate security issues found in a Docker image specifically and that brings us to the next step of the application release which is the deployment environment which as I said is a whole new world of security concerns and security Concepts that we need to consider we're going to learn about infrastructure and Cloud security because that's where the application will run and that's where the application will actually be accessible by the end users so completely exposed to public and definitely the best cloud platform to learn about Cloud security is AWS which is by far the most used Cloud platforms still in the world so that's what we'll be focusing on in this boot camp as well however I want to mention here is that as with any other tool that we're going to use in this boot camp my Approach is always Concepts before Technologies and this applies to AWS as well so even though we learn lots of AWS specific Services here you actually learn tons of many General Security Concepts that you can apply to any Cloud platform or infrastructure and that is extremely important to me to not just teach the tools and Technologies or technology specific things but the concepts so that you are actually empowered to go out there and use any tool that applies to that concept and that's why I made sure to have General Cloud security and infrastructure security Concepts in this part so what are some of the things that are included here we basically are going to learn about a very important concept of access management to security so we're going to learn the core AWS service for Access management of your Cloud platform which is I am service so we're going to go deeper here we're going to understand the secure and proper usage of users groups policies and most importantly the AWS roles and this is important because when we're automating things and instead of humans just doing manual stuff basically services and scripts and tools talk to each other and the whole thing is orchestrated with automation then we need to use roles extensively way more than users or groups we're also going to secure deployment to our environment which is going to be combination of secure access management but also secure network configuration to make sure that all the traffic getting to your virtual machines on AWS which are E2 instances all the traffic is secure and it goes through AWS authentication and authorization steps which means no sshing into the servers and what's more important no static private keys or user access Keys instead using rols and shortlived exess tokens for shortlived sessions here we have another step another concept that actually applies to application security but that comes after deploying an application to the end environment and that is a concept of dust or dynamic application security testing so sest or static application security testing is for the code the application code itself which is also called white box testing how however there are many security issues that will only appear when the application is actually running and interactions to that application is happening so basically D is simulating an attacker who is attacking or trying to heck into your running systems and again we're going to learn the concepts of D the tools and we're going to see how to secure our application after finding any issues or security findings with dust tests so going back to the infrastructure security again coming back to the automation concept because we want things automated we are actually going to go into details of how infrastructure as code helps in securing your infrastructure and why is it so important in devops and once we've understood that we're actually going to deploy that and use it to make our infrastructure more secure and we're going to use terraform here to basically build a secure WS infrastructure for our application deployment environment again with proper access management network security and so on and here we're going to go step further and we are actually going to learn not only how to secure our infrastructure using infrastructure as code tool but also how to automate the security checks when using infrastructure as code to create the infrastructure and in doing that we're actually going to use a concept of gitops where we're going to build a cicd pipeline for our terraform infrastructure as code script and add the security scanning or static security scanning in that pipeline just like we did for the application which is the definition of gitops of using Version Control tool for your infrastructure as code and treating it the same way as your application and as a final but very important part of cloud security and infastructure security we're going to learn the concept of logging and monitoring and we're going to understand exactly why and how logging and monitoring help us in securing our systems or even after somebody has infiltrated our systems and for the cloud security specifically we're actually going to learn two AWS services for logging and monitoring which are cloud trail and Cloud watch so we're going to learn about these tools in general but of course we need use cases we need Hands-On practice so we're going to configure those services to monitor the activity and behavior on our AWS Cloud platform across all different services and actually notify us when something happens that is a suspicious Behavior or something that may affect security of our systems and as part of that we're also going to learn how to monitor and alert on AWS Cloud costs using AWS budget service which is a small use case but also a useful one after the chapter of infrastructure and Cloud security we're going to move into a third giant part of this boot camp related to kubernetes platform security because as you know kubernetes has already become a standard in the cloud world and no devops related Boot Camp or course would be complete without covering kubernetes in it this means we are going to actually change our application development environment from simple virtual machines on AWS to a full-blown kubernetes cluster on AWS using eks and that means by introducing kubernetes cluster on top of Cloud infrastructure will introduce another world of security attack surface and security concerns which need to be addressed and our goal is to always equip you with the most in demand skills and most use cases so stopping at AWS and Cloud security was not an option for us here so learning how to secure kuun platform and applications running inside kui's cluster will be an absolute GameChanger in your career and I just want to note here that we are going to be first releasing the part one of this boot camp because as I said this boot camp is pretty large so we kind of divided it up into two parts and kubernetes platform Security will be another large part two of this boot camp but to cover on a high level the concepts and topics that you're going to learn related to kubernetes security obviously just like with Cloud security we're going to cover the access management to commes Cluster who has access what who can log in as an administrator to set up and configure stuff and how are those access credentials managed with the least privilege access so as part of this we're going to actually dive in and see again in practice not just the kubernetes native mechanism for access control which is kubernetes arbc mechanism role based access control with service accounts roles Ro bindings and so on but also its integration with aws's access management access management service called IM am which as you remember we mentioned in the cloud security so basically combining those two give us secure access control of eks cluster and again this is a very practical real world use case but of course aside for access management we also need to secure the applications running inside how we pull the private images into the Cs cluster how we make sure to secure the containers the pods running inside the cluster so that they don't become the entry points of security attacks to allow hackers to break out of the pods and access the whole kubernetes cluster so we're going to learn the concepts behind that as well as how to secure that part we're also going to learn the kubernetes native security related components such as Network policies so how to do micro Network segmentation and basically secure the exess on a pod level rather than on the cluster level and as part of that we also going to learn a third-party implementation of that we're also going to learn the concept of service smesh and how different features of service smesh actually help you secure your complex microservices applications in the kubernetes cluster and of course in addition to that we have the cluster entry points like Ingress controllers the load balancers which are also important considerations when we're talking about security so we're going to cover all of that and see actual real life use cases of those things one more super important and relevant topic is sensitive data Management in kubernetes because when we have applications that need to talk to each other we have databases we have other services that require authentication and authorization obviously we have lots of access keys or credentials and so on that needs to be stored securely so as part of this we're going to learn a very popular open-source tool from hash Corp called Vault so using Vault we're actually going to demonstrate how to store and use secrets and sensitive data in kubernetes and around kubernetes including the secret key management the secret data management for the applications storing any credentials and so on and finally again we want to automate processes we want to learn the automation parts of the security as well in kubernetes since we're learning def secops that means we're going to learn the tools for automatic scanning of security misconfigurations and security vulnerabilities of kubernetes manifests so when product teams deploy their applications to kubernetes Cluster using kubernetes manifest files we can automate the scanning of those configuration files for any security issues and as part of that we're also going to learn what's called policy as code so basically creating any security policies related to kubernetes and enforce those policies as part of the cicd pipeline for the application deployment process which is a super exciting and interesting topic and something that also makes working with kubernetes and managing security issues and misconfigurations in kubernetes way easier to handle from the kubernetes administrator side so this part is going to be completely packed with absolutely amazing exciting Concepts directly related to kubernetes but also involving lots of thirdparty tools and as I said this will upgrade your existing skills as an engineer to a completely new level and that's not even all we're not done yet a very important security related topic is compliance the need to automate things and make things fast and efficient in devops and devops World applies to compliance as well which we all know as this traditional bureaucratic manual effort that companies have to do to validate compliance of their projects but not in stops we will learn about compliance as code and the tools that help us automate compliance using code and scripts and compliance is an overarching concept that actually applies to all these three categories that we just went through from application security to infrastructure and Cloud security to platform security and as part of compliances code we're also going to learn about CIS benchmarks and how they are used as part of implementing compliances code and again all of this will be taught as Hands-On demo project so you're actually going to learn how to do all of these in practice and not just Theory and finally the last but not least def Sops is not only a technological change and technological implementation where you just put a dozen Technologies together and create automated processes but it's also a conceptual change or sometimes even cultural change in IT project teams in organizations so it's important to understand again in Real World what are the challenges and difficulties of introducing devups into a project or the entire organization how do you get Engineers on board how do you introduce devops strategically in teams step by step because here's the thing when you as an engineer learn about devops you're getting a completely different understanding and perspective of what benefits it has and by having this knowledge you will know exactly how it helps the business and teams but other people including Engineers who are not aware of those Concepts often may not have the same perspective and may not even think that this is something important or relevant or they just don't have time to research and understand why it's important so how can you be the driver for def cops in your project and organization to show the other team members and engineers years using incremental wins what value it has so here in this last chapter we cover some practical strategies and steps for dcops adoption in organizations and this could be another huge value add in your career because knowing this will let you provide massive value for the company strategically as well so that's basically the entire curriculum and as you see it's huge it has lots of Technologies lots of Concepts lots to learn and I'm happy that we can make all this knowledge available to the world one thing I want to stress here again is that the main focus of the entire boot camp just like in every other course or boot camp that we have is to learn and understand the concepts and think about the tools just as means to an end that means the cicd pipeline that we build the infrastructure as code project that we built all the different security scanning tools tools that we use all of that knowledge is easily transferable to any other cicd tool to any other security scanning tool even to any application using a different Tex St than we're using in this boot camp so you will have all the knowledge to replace any of these tools very easily because you understand the fundamental concepts that means if you're thinking about I want to implement this for Jenkins pipeline or I want to do this in GitHub actions or bit bucket or whatever cicd tools you want to use so you can literally take the pipeline and translate it to any other cicd tool so that was extremely important for me because I believe that is the most powerful level of knowledge when you're not tied or chained to the tools but rather see them as means to an end to actually accomplish the actual goals that you have with your projects for example now what you get when you enroll in this bootcamp is not only the educ educational videos with all the demos that you can work along but a bunch of other stuff which should make your learning process easier more comfortable more convenient so obviously all the G repositories that we are using in this project are perfectly structured so you can easily follow them so all of them will be provided in the relevant places and in addition to that we have also created accompanying handouts with key takeaways and we found that a lot of students actually find Value in that because once they have gone through through a huge chapter they want to kind of summarize in their heads and kind of revisit all the key points a way more important addition to this boot camp that you also get out of the box when you enroll we also understand the importance of support for students in their Learning Journey and that's why we provide dedicated def cops engineers and a support team in an exclusive group where you can get active support throughout your entire learning process process so for the entire Learning Journey you're going to have a dedicated team of Engineers who have real world experience and expertise in these fields answering your questions supporting you whenever you need motivating you and helping you along the journey and we also made sure to cover multiple time zones with multiple support Engineers so that every student gets help when they need it so when you get stuck in a demo or need more explanation of some concept Etc you can ask a question in a dedicated channel in this private group and someone from our support or me myself will get back to you as soon as possible and as I said support part is extremely important for us because we try and successfully achieve to exceed our students expectations with our content and we want to achieve the same with support as well and once more we are not done yet you actually get two more things things as part of this boot camp first of all I believe that one of the best proofs of your newly acquired knowledge is a certification even though I'm not a big fan for just learning for a certification I believe that if you learn something practical you should have a certified document that shows that because after working hard and learning for weeks or month you want to be able to Showcase and promote your new skills in a simple way and this is included in the boot camp at no additional cost because we want to give our students the best way to prove their knowledge after intensive learning but even more than that we also made sure to provide certificates to our students in a way that is easy to share or embed in various formats but also easy to validate and prove so everyone who sees your certificate will know that it's legitimate because this technology allows for a validation of a certificate instead of an old-fashioned simple PDF file so at the end of the training program you can apply for a verifiable digital certificate or digital batch and remember what I mentioned at the beginning the value of proper security implementation for companies so every company who even remotely cares about securing their applications or systems will have interest to have Engineers skilled in devops processes regardless of their roles in order to increase the security awareness across engineering teams so no matter if you are a software developer Cloud engineer automated Testing Engineer whatever you can ask your employer whether they want to invest in your upskilling and professional training which many companies already do by providing such yearly training budgets for their employees and that's why to help you in this process we have also prepared the convince your boss letter with detailed description of skills you learn and Quire in this boot camp and the learning outcomes that will actually benefit the company as well that you can present to them and finally we are completely transparent with information around the boot camp and that's why I made this long video to make sure that I cover every single detail so you know exactly what you're getting how you're getting all the details so no one is misled or enrolls without meeting important prerequisite criteria for example so we put all this information on the side in this video we addit the Q&A section there is also an additional questions form that you can ask us any question that we might have missed to cover but if you still have any doubt about anything that we didn't mention or just want to check out the boot camp to decide if it's actually for you maybe the technical level whatever you can do so completely free of risk because once you enroll you can check out a few videos during the week from different chapters you can check out a couple of demo projects that we have and make your final decision whether you actually want to do this boot camp if not you can give it back in the same week no questions asked and at least you will know you have checked it out and made a completely informed decision so that was probably the longest boot camp overview video in the world but I hope I was able to answer all the questions that you might have was able to give some more value in this video itself and I hope to see you inside the boot camp