A DevOps-Based Security Automation Framework Using IaC and CI/CD for Cloud Infrastructure

Kim, Jiyoung (2025) A DevOps-Based Security Automation Framework Using IaC and CI/CD for Cloud Infrastructure. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration Manual) Download (1MB) | Preview

Abstract

The significance of cloud infrastructure security is on the rise since the use of cloud services constantly increases across both industry and academia. Traditional security practices are usually not able to match the complexity and speed of the modern software devlopment. This architecture achieves integration by bridging Infrastructure-as-Code (IaC) and CI/CD pipelines. It also adopts a "Shift-Left" security methodology that enhances fast and efficient detection and response of a variety of vulnerabilities. Furthermore, this suggested framework aims to reduce manual intervention and to identify cloud security threats by incorporating tools like static and dynamic analysis scanners. The model is validated through a practical implementation, which is based on open-source tools, such as Terraform, tfsec, SonarCloud, GitHub Actions, OWASP ZAP, and OWASP Juice Shop. Specially, the last framework offers a perfect, cost-efficient approach to small enterprises with restricted security budgets, effectively applying DevSecOps principles across the entire development process in a cloud-native ecosystem.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Arun, Shreyas Setlur UNSPECIFIED
Uncontrolled Keywords:	DevSecOps; Shitf-Left Security; IaC; Automated Scanning; Cloud Security
Subjects:	T Technology > T Technology (General) > Information Technology > Cloud computing Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security
Divisions:	School of Computing > Master of Science in Cloud Computing
Depositing User:	Ciara O'Brien
Date Deposited:	31 Aug 2026 15:30
Last Modified:	31 Aug 2026 15:30
URI:	https://norma.ncirl.ie/id/eprint/9714

Actions (login required)

View Item