Platform Engineering and Security

Security and compliance integration in software development lifecycle using platform engineering (English Edition)

Kuldeep Singh Tomar, Govindarajan Vishnuchithan

• Publisher: BPB Publications
• Year: 2025
• eBook ISBN: 9789365892406
• Edition: 0
• Topic: Computer Science
• Subtopic: Information Technology
• Index: Computer Science

Description
Modern software delivery faces growing complexities, from managing diverse cloud environments to ensuring security and compliance. Platform engineering has emerged as the solution, creating a secure, efficient path for developers. This book will help you understand this approach and build the tools necessary to streamline your software lifecycle.

This book walks you through the essential components of a platform. You will begin by learning the foundational concepts of platform engineering, understanding the culture and product mindset, and designing a robust architecture. It will show you how to codify infrastructure and security using policy as code, with a special focus on leveraging Kubernetes as the core of a secure delivery platform. You will also learn to embed security through the shift left approach and the creation of self-service capabilities. The book concludes with insights into observability, data lakes, and the future of the field with AI/ML and Pai-Ops.

By the end of this book, you will develop an understanding of platform engineering, along with the practical knowledge required to build, manage, and optimize a secure software delivery platform. You will be equipped with the practical knowledge to reduce developer cognitive load, accelerate product development, and ensure consistent security and governance, transforming your organization's approach to software delivery.

What you will learn
? Learn to transition from DevOps to a developer-centric product mindset.
? Implement a shift left DevSecOps approach to secure pipelines.
? Understand how to codify infrastructure and security using policy as code.
? Build and operate secure infrastructure platforms.
? Transition from DevOps to automated everything as code.
? Design internal developer platform architecture and manage policy as code automation.
? Reduce cloud-native complexity with a containerization platform and best practices.
? Reduce the complexity of infrastructure provisioning.
? Learn about policy requirements and governance in SDLC.

Who this book is for
This book is for DevOps and security architects, and platform and security engineers. It is an excellent resource for professionals with knowledge of SDLC, DevOps, and information security who want to deepen their skills in building a secure platform.

Table of Contents
1. Concepts of Platform Engineering
2. Platform Culture and Product Mindset
3. Building Blocks and Architecture
4. Build Infrastructure with Security and Compliance
5. Platform and DevSecOps
6. Platform Engineering and Containerization
7. Embed Security and Compliance in Platform
8. Self-service for Developers
9. Productization and Collaboration
10. Data Lake and Observability
11. Future Trends of Platform Engineering

Table of contents

• Cover
• Title Page
• Copyright Page
• Dedication Page
• About the Authors
• About the Reviewers
• Acknowledgements
• Preface
• Table of Contents
• 1. Concepts of Platform Engineering
• 2. Platform Culture and Product Mindset
• 3. Building Blocks and Architecture
• 4. Build Infrastructure with Security and Compliance
• 5. Platform and DevSecOps
• 6. Platform Engineering and Containerization
• 7. Embed Security and Compliance in Platform
• 8. Self-service for Developers
• 9. Productization and Collaboration
• 10. Data Lake and Observability
• 11. Future Trends of Platform Engineering
• Index