S4CP

This Project is part of the S4CP Training accessible at https://rohitsalecha.com/s4cp/

Chapter 6D

• Testing OPA Runtime

Chapter 6C

• Integrating OPA in GHA

Chapter 6B

• Introduction to OPA

Chapter 6A

• Install SCPs (Service Control Policies)

Chapter 5I

• Installing Network Security Policy

Chapter 5G

• Installing Calico

Chapter 5F

• Installing Kyverno
• Testing Violations

Chapter 5E

• Secrets Management in EKS with AWS SM

Chapter 5D

• Encrypting K8s Secrets with AWS KMS

Chapter 5C

• Implementing EKS RBAC

Chapter 5B

• Creating K8s IAM Roles

Chapter 5A

• Setting Up Prod K8s

Chapter 4D

• Trivy Integration

Chapter 4C

• Semgrep Rules for Scanning Dockerfiles

Chapter 4B

• Docker Image Build and Push GHA (docker-prod.yaml,docker-dev.yaml)

Chapter 4A

• Create IAM Role for Github OIDC
• Create ECR Registry

Chapter 3D

• Integrating GitLeaks in GHA (secrets.yaml)
• Running True Positive Scenario
• Creating Custom GitLeaks Configuration
• Erasing Git History

Chapter 3C

• Integrating Dependency-checker in GHA (sca.yaml)
• Running Github Actions
• Fixing Dependency Issue

Chapter 3B

• GHA for running Semgrep (sast.yaml)
• Deploy the Semgrep Rules via GHA
• Test Violations
• Fix the vulnerability

Chapter 3A

• Rule for Command Injection
• Rule for SQL Injection

Chapter 2E

• AWS Multi-Account CI/CD Flow

Chapter 2D

• Creating AWS IAM Users

Chapter 2C

• Creating AWS IAM Roles and Groups

Chapter 2B

• Activating AWS Organisations
• Creating AWS Accounts and OUs

Chapter 2A

• Terraform State Storage Creation

Chapter 1

• Spin up The App with complete AWS Infrastructure
• Threat Model the entire scenario