This blog discusses how modern configuration management and provisioning tools, such as Chef and Terraform, use the concepts of infrastructure as code and policy as code to deploy secure instances in the cloud.

DevSecOps accelerates the pace of digital transformation. In practice, DevSecOps is meant to be a collaboration between development, security, and operations; it aims to automate the integration of security into every phase of the software development lifecycle. This blog reviews what DevSecOps is, how it can successfully be implemented, and how to reduce cost and save time by minimizing the need to repeat a process to address security issues after the fact.

The best developers are lazy, but that’s because they automate repetitive tasks.

Chef InSpec waivers enable the user to provide justification for skipping controls to which they knowingly are not within compliance.

Chef codifies your IT resource fleet in a way that automates configuration of diverse complicated systems, while also defining security and compliance standards as human-readable code. It allows quick packaging and distribution of applications across diverse settings.

The blog discusses how compliance and security differ and how Chef can help you achieve compliance while maintaining a secure infrastructure.

Guidelines on how to start with the Chef InSpec on the technical side.

To ensure compliance with sanctions imposed by the US and many more, we have decided we will cease to conduct business with new or existing customers in the areas covered by the sanctions.

The version number on releases of Chef Automate is changing from a daily build number to SemVer (major-minor) numbering to indicate recommended upgrade points for customers.