Tag: Source Control

Optimize software development with Amazon CodeWhisperer

May 31, 2023 By Mark Otto Off

Businesses differentiate themselves by delivering new capabilities to their customers faster. They must leverage automation to accelerate their software development by optimizing code quality, improving performance, and ensuring their software meets security/compliance requirements. Trained on billions of lines of Amazon and open-source code, Amazon CodeWhisperer…

DevSecOps with Amazon CodeGuru Reviewer CLI and Bitbucket Pipelines

April 28, 2023 By Mark Otto Off

DevSecOps refers to a set of best practices that integrate security controls into the continuous integration and delivery (CI/CD) workflow. One of the first controls is Static Application Security Testing (SAST). SAST tools run on every code change and search for potential security vulnerabilities before…

Manually Approving Security Changes in CDK Pipeline

January 20, 2023 By Mark Otto Off

In this post I will show you how to add a manual approval to AWS Cloud Development Kit (CDK) Pipelines to confirm security changes before deployment. With this solution, when a developer commits a change, CDK pipeline identifies an IAM permissions change, pauses execution, and…