Apexon AWS
Cloud Engineering Services:

DevSecOps

At Apexon our DevSecOps model is driven by continuous insight traced and generated from prototype-to-production process covering Agile development practice, security, 100% automation and operational practices

The Apexon DevSecOps model is based on a set of principles, practices and technology enablers/accelerators that are readily available

This drives cost savings from day one and evolve with automated services to guarantee saving in resources, tooling and process cost.

Our DevSecOps service offerings

Continuous Delivery, Integration, Security and Testing

Progressive Delivery, Continuous Monitoring

SRE (Test Automation, Chaos Engineering, Log Analytics)

The key tenets of our methodology

THE KEY TENETS OF OUR METHODOLOGY

Orchestrating AWS-cloud tools & services

Enforcing security

Automation to ensure site reliability and availability
of business functions at-all-times

DevSecOps – Scaled Agile Methodology

Apexon utilizes the following AWS Services to help clients adopt and automate DevSecOps on AWS Cloud:

AWS Code Pipeline

AWS Lambda

AWS SNS / AWS SES /mailhog / slack integration

SonarQube (SAST)

OWASP ZAP (DAST)

AWS CloudWatch Events

AWS CloudTrail

AWS IAM

AWS Config

Static Analysis of Container using CLAIR

Sysdig’s Falco for container threat detections

Talisman (Tool that installs a hook to your repository to ensure that potential secrets or sensitive information do not leave the developer’s workstation)

OWASP Dependency Check (Software Composition Analysis Tool)

Apexon offers the following DevOps Accelerators for adopting DevSecOps on AWS Cloud:

Enterprise Continuous
Delivery of Microservics

AWS EC2
Kubernetes via Kubeadm
Terraform
Prometheus
Alertmanager
Grafana
AWS ECR
Traefik

Continuous
Testing

AWS EKS
Cloudformation
AWS S3
AWS Lambda
Jenkins CI
Clair Scanner
Zalenium
OWASP Dependency check
OWASP ZAP
Apache JMeter

Chaos
Engineering

Inducing AWS EC2 failures
via chaos-lambda
Inducing AWS EKS Pod/
Container failures via
Gremlin

Serverless
Deployments

AWS Lambda
API GW
Jenkins CI

Enforce AWS Security
Best Practices

Prowler
Jenkins
AWS Account

Progressive delivery

Apexon & AWS

TALK TO US

Opt-in to receive lots of Apexon goodies!

By submitting this form, you agree that you have read and understand Apexon’s Terms and Conditions. You can opt-out of communications at any time. We respect your privacy.