NORMA eResearch @NCI Library

Cloud-Native Application Development using DevOps Tools

Sabu, Sanal (2025) Cloud-Native Application Development using DevOps Tools. Masters thesis, Dublin, National College of Ireland.

[thumbnail of Master of Science]
Preview
PDF (Master of Science)
Download (1MB) | Preview
[thumbnail of Configuration Manual]
Preview
PDF (Configuration Manual)
Download (813kB) | Preview

Abstract

As organizations continue to migrate to cloud-native architectures, there is an increasing need for ways to effectively maintain security, compliance, and operational stability while also enabling a rapid rate of development. This paper describes a comprehensive methodology for achieving such a balance through the use of DevOps practices in conjunction with automated Policy-as-Code (PaC) processes. Through this research, the author has demonstrated an approach for designing, implementing, and evaluating a fully functioning environment for a cloud-native application. This includes all aspects of developing a cloud-native application; from infrastructure creation, to CI/CD (continuous integration/continuous delivery), to providing an automated mechanism for scanning code for security vulnerabilities, to providing real-time insight into the production environment. This was accomplished by developing and deploying a microservices based application on AWS using modern container and orchestration technologies, and by using Terraform for creating the infrastructure in a declarative manner, and automating the CI/CD through the use of GitHub Actions. An important finding of this research is that integrating security and policy enforcement into the development life-cycle can occur at all phases. By utilizing several different tools (such as Trivy for scanning vulnerabilities, OPA to validate both Infrastructure as Code and the various configurations of Kubernetes), this new ”shift left” strategy has been implemented. The effectiveness of this combined solution has been established using a rigorous series of controlled experiments that demonstrated the successful automated identification and remediation of vulnerabilities and misconfigurations in a variety of situations. These results show that a solidly built DevOps and PaC Framework will improve the security, resilience, and agility of cloud-native applications substantially.

Item Type: Thesis (Masters)
Supervisors:
Name
Email
Heeney, Sean
UNSPECIFIED
Subjects: Q Science > QA Mathematics > Computer software
T Technology > T Technology (General) > Information Technology > Computer software
T Technology > T Technology (General) > Information Technology > Cloud computing
Divisions: School of Computing > Master of Science in Cloud Computing
Depositing User: Ciara O'Brien
Date Deposited: 01 Sep 2026 10:37
Last Modified: 01 Sep 2026 10:37
URI: https://norma.ncirl.ie/id/eprint/9732

Actions (login required)

View Item View Item