Cloud & DevOps Practices Flashcards

What does 'shift-left security' mean in a DevSecOps context?

Answer: Integrating security testing and reviews earlier in the development lifecycle

Shift-left security embeds security tools (SAST, dependency scanning, secret detection) into CI/CD pipelines so vulnerabilities are found at commit time, not after deployment.

What is AWS CodePipeline?

Answer: A fully managed AWS CI/CD service that automates build, test, and deploy workflows

AWS CodePipeline is a managed continuous delivery service that automates release pipelines integrating with CodeBuild, CodeDeploy, and third-party tools.

What is 'chaos engineering'?

Answer: Deliberately injecting failures into systems to test resilience and uncover weaknesses

Chaos engineering proactively injects failures (network latency, instance termination, CPU spikes) in controlled experiments to identify weaknesses before they cause real outages.

What is the '12-Factor App' methodology?

Answer: A methodology for building scalable, maintainable cloud-native applications across 12 principles

The 12-Factor App methodology defines 12 principles for building SaaS applications that are scalable, portable, and maintainable, covering topics from codebase to logging.

What is a 'feature flag' (feature toggle) in DevOps?

Answer: A configuration switch that enables or disables features at runtime without deploying new code

Feature flags decouple code deployment from feature release, allowing teams to merge code to main, deploy it, and control when users see new features via configuration.

What is 'DevSecOps'?

Answer: The integration of security practices and tools throughout the DevOps pipeline

DevSecOps integrates security as a shared responsibility throughout the entire software development and delivery lifecycle rather than treating it as a final gate.