{"id":458876,"date":"2021-03-16T10:47:36","date_gmt":"2021-03-16T14:47:36","guid":{"rendered":"http:\/\/www.marketnewsdesk.com\/?p=458876"},"modified":"2021-03-16T10:47:36","modified_gmt":"2021-03-16T14:47:36","slug":"sonatype-adds-infrastructure-as-code-security-and-compliance","status":"publish","type":"post","link":"https:\/\/www.marketnewsdesk.com\/index.php\/sonatype-adds-infrastructure-as-code-security-and-compliance\/","title":{"rendered":"Sonatype Adds Infrastructure as Code Security and Compliance"},"content":{"rendered":"

\nNew Infrastructure as Code Pack for Nexus Lifecycle brings developer-friendly cloud and open source security together in one place
\n<\/h2>\n
\n

FULTON, Md., March 16, 2021 (GLOBE NEWSWIRE) — Sonatype<\/a>, the leader in developer-friendly tools for software supply chain management and security, today unveiled its Infrastructure as Code (IaC) Pack<\/a> for Nexus Lifecycle, making it easy for developers to configure infrastructure as code without worrying about common security mistakes.<\/p>\n

The IaC pack enables developers to easily find and fix security vulnerabilities when actively developing cloud applications, while at the same time preventing security vulnerabilities and compliance issues from surfacing in production due to misconfigured cloud infrastructure. The pack delivers out-of-the-box guidance to assist developers configuring cloud infrastructure and fosters compliance with privacy and security standards (e.g., CIS Foundations Benchmarks, GDPR, HIPAA, ISO 27001, NIST 800-53, PCI, SOC 2). Integrated with Nexus Lifecycle, the pack will make it possible for developers to find and easily fix misconfigurations in Terraform plans before they are applied to production infrastructure.<\/p>\n

\u201cSonatype has a long and successful history of providing developers feedback on the health and hygiene of open source libraries, making it easy for them to identify and remediate security risk, without slowing down innovation,\u201d said Wayne Jackson, CEO of Sonatype. \u201cDevelopers are taking on exponentially more responsibility for building secure applications, including the configuration and deployment of secure cloud infrastructure using tools like Terraform. We\u2019re equipping developers with the right information at the right time so they can always make healthy decisions when configuring IaC.\u201d<\/p>\n

Currently, most developers don\u2019t truly \u201cown\u201d the security of their applications or production infrastructure. Instead, they find themselves constantly reacting to feedback from security and operations teams when mistakes are inevitably discovered. The IaC pack gives developers the information they need to easily configure secure and compliant infrastructure as code.<\/p>\n

Sonatype unveiled its IaC Pack for Nexus Lifecycle as part of its next-generation Nexus platform offering customers full-spectrum control<\/a> of the cloud-native software development lifecycle including: third-party open source code, first-party source code, infrastructure as code (IaC), and containerized code.\u00a0<\/p>\n

\n Additional Resources:\u00a0<\/strong>\n <\/p>\n