Högskolan i Skövde

This study explores the challenges of integrating DORA metrics, DevSecOps principles, and Terraform an Infrastructure as Code (IaC) tool, to improve cloud security and operational performance of the organization in the Azure cloud provider. The study evaulates the relationship between CPU monitoring, Mean Time to Recovery (MTTR), and system reliability, with the goal of ensuring business continuity.

Additionally, the study provides insights into the challenges and best practices for integrating DevSecOps principles into the software development lifecycle deployment pipeline, enhancing cloud security, and improving team agility by reducing the threat attack surface.

The study further investigates the benefits of integrating DevSecOps principles, such as shift-left security, continuous vulnerability scanning, automation, and real-time monitoring-as-code, to improve team organization performance and scale in DORA metrics (Elite/High).

The research methodology involves a review of existing related work on Terraform, DORA metric, and DevSecOps, an analysis of existing cloud security frameworks, and the development of a proposed framework. The proposed framework architecture integrates threat intelligence, DevSecOps, and Infrastructure as Code (IaC).

The study aims to bridge the gap between rapid software development lifecycle and robust security measures by fostering a culture of security awareness and resilience in each stage of the software development lifecycle.