Tutorial: Enforcing Security and Compliance Policies in CloudFormation with Bridgecrew
Learn how to secure your AWS CloudFormation templates with Bridgecrew's continuous scanning, monitoring, and easy remediation.
CodifiedSecurity Office Hours Recap: Episode 02
Catch up with the the latest open source and cloud security updates in Episode 02 of Bridgecrew's #CodifedSecurity Office Hours.
How to get ephemeral access keys to an AWS account using MFA
Programmatic access makes it easier to automate tasks, but at the price of increased risk. Learn how to overcome these risks with AWS best practices on access keys management.
Security challenges and risks with infrastructure as code
Infrastructure as code is the foundation for the next generation of cloud security. In this post, we review the challenges of IaC security and how to address them.
Panel Highlights: Collaborating with DevOps to automate cloud security at scale
Get the highlights from our recent panel discussion on building trust between security and engineering teams.
CodifiedSecurity Office Hours Recap: Episode 01
A recap of Episode 01 of our CodifiedSecurity Office Hours. Join us for live community chats covering the latest news in cloud security, open source, and infrastructure as code.
Bridgecrew brings IaC security to GitHub with a code scanning integration
We’re proud to bring IaC security scanning to GitHub with our new GitHub code scanning integration.
Automating your AWS cloud security with Bridgecrew
In this overview of Bridgecrew for AWS, you’ll learn how to start finding and fixing security issues in your AWS environment in just a few minutes.
Three ways to overcome cloud DevSecOps bottlenecks
This post is the second of two parts on why DevSecOps can end up backfiring within cloud-native organizations and what you can do about it.
Bridgecrew Custom Policies: A simple standard for policy-as-code
With Bridgecrew's Custom Policies, you can easily govern your cloud infrastructure without learning a new language.
Buildkite, meet Bridgecrew!
A super simple walkthrough integrating Buildkite and the Bridgecrew platform, adding Infrastructure as code scanning to your CI pipelines.
Why DevSecOps is the new bottleneck for cloud-native teams
The first of two posts on why DevSecOps can end up backfiring within cloud native organizations and what you can do about it.