NATIONAL COLLEGE OF IRELAND Page 1 of 4 National College of Ireland MSc in Cloud Computing, Year 1, MSCCLOUD1_JAN21I Postgraduate Diploma in Science in Cloud Computing, Year 1, PGDCLOUD_SEP Semester...

1 answer below »
Hi, I am looking for help for the following assignment.email [email protected]


NATIONAL COLLEGE OF IRELAND Page 1 of 4 National College of Ireland MSc in Cloud Computing, Year 1, MSCCLOUD1_JAN21I Postgraduate Diploma in Science in Cloud Computing, Year 1, PGDCLOUD_SEP Semester Two Terminal Assignment-based Assessment (TABA) – 2020/21 Release Date on Moodle: 27th of April 2021 @9:00am Online Moodle Submission Deadline: Thursday 13th of May 2021 @23:55 ______________________________________________________________________ Cloud DevOpsSec IMPORTANT: It is your responsibility to avoid plagiarism. Please read the comprehensive guidelines on academic honesty and academic integrity, and how to avoid plagiarism made available by the NCI Library (https://libguides.ncirl.ie/referencingandavoidingplagiarism). NOTE: YOU ARE NOT ALLOWED TO PUBLISH THIS ASSIGNMENT BRIEF OR A PART THEREOF ON ANY WEBSITES. YOU ARE NOT ALLOWED TO PUBLISH/SHARE YOUR SOLUTION WITH OTHERS. All work submitted should be your own. Conferring with others is not permitted. Note that all submissions will be electronically screened (via Turnitin) for evidence of academic misconduct (i.e. plagiarism and collusion). https://libguides.ncirl.ie/referencingandavoidingplagiarism Page 2 of 4 Introduction The assessment of the Cloud DevOpsSec module is based on two assessment components: a) Project which represents 60% of the module assessment, and b) Terminal Assessment which represents 40% of the module assessment. The learning outcomes of the Cloud DevOpsSec module are as follows: LO1. Critically analyse different techniques to perform code analysis, plan and implement static code analysis. LO2. Develop and implement a plan for provisioning and configuration of software applications through CI/CD. LO3. Critically evaluate and implement methodologies for secure application development and secure execution in production. This document presents the details of the Terminal Assignment-based Assessment (TABA) of Cloud DevOpsSec module. The TABA assesses LO1, LO2 and LO3. Assignment Description A company has commissioned you to prepare a case study to develop a plan for provisioning and configuration of web applications through a full lifecycle CI/CD pipeline. You are required to prepare a report to document the case study for software applications created primarily in a specific programming language. The programming language is assigned based on the penultimate i.e. second to last digit of your Student ID as described in the Table 1 Programming Language. The company asks you to identify all the relevant cloud-based services offered by Amazon Web Services (AWS) and third-party tools that enable the creation of the full CI/CD pipeline that incorporates mechanisms to support secure application development and secure execution in production. Note that you do not have to implement the CI/CD pipeline, but document all of the above through a report. Table 1 Programming Language Penultimate (i.e. second to last) digit of Student ID Programming Language 0, 5 C++ 1, 6 C# 2, 7 Java 3, 8 Go 4, 9 Ruby IMPORTANT: Each student must prepare the case study using the assigned programming language based on the guidelines from Table 1 Programming Language. For example, if your student ID number is 20987654, the penultimate i.e. second to last digit of your Student ID is 5, and therefore the programming language assigned for your case study is C++. IMPORTANT: This is a submission requirement. If the incorrect programming language is chosen, the report will not be valid, and no marks will be provided. You must conduct some independent research and include any relevant bibliography in the report. Page 3 of 4 Deliverable A 3-4 pages report (formatted using the IEEE Conference double-column template1) which documents your case study taking into account the programming language the company uses to develop their web applications (i.e. assigned to you based on Table 1). The report should include:  Abstract – a 150-300-word executive summary of the case study and its main findings  Introduction – set the scene of the case study including its objectives  A comprehensive plan for provisioning and configuration of web applications through a full CI/CD pipeline, identifying suitable cloud-based services offered by Amazon Web Services (AWS) and third-party tools used at each stage in the pipeline to support secure application development and secure execution in production. o For the security aspects you must identify and discuss the services/tools available at least for the following stages:  Security during building  Security during testing  Security during monitoring  Include a diagram of the entire workflow highlighting the different stages in the pipeline; the diagram should indicate where the different cloud-based services and third-party tools are used to support the CI/CD pipeline. The diagram should be fully explained in the text and have a meaningful caption.  For each of the cloud-based services and third-party tools proposed in the different stages of your CI/CD pipeline, provide a critical analysis of those cloud-based services and tools, namely motivate your selection/choice of a particular cloud based service/tool as compared to other tools available for that stage.  Conclusions including findings/interpretations – what did you learn and find out?  References – a complete list of academic works and/or online materials used in the report/case study. References should be included as in-text citations using the IEEE referencing style. IMPORTANT:  Remember that your report must not only be merely descriptive, but it must provide your critical insights, that is, your own analysis and points of view.  Your work must be original, so you must ensure that you do not choose a case study that already exists. This would be considered plagiarism. Also, note that the diagram should be created by you based on your case study. 1 https://www.ieee.org/conferences/publishing/templates.html https://www.ieee.org/conferences/publishing/templates.html Page 4 of 4 Assessment Criteria The TABA will be assessed based on the assessment criteria shown in Table 2. Table 2 Marking Criteria The CI/CD pipeline; Diagram & Explanation 20% Integration and discussion of cloud-based services and/or third-party tools in the CI/CD pipeline to support secure application development and secure execution in production 30% Cloud-based services and third-party tools critical analysis 30% Conclusions and findings 10% Comprehensiveness; Abstract; Introduction; Structure & Bibliography (encompassing relevant theory; quality of sources; correct referencing is used) 10%
Answered 4 days AfterMay 07, 2021

Answer To: NATIONAL COLLEGE OF IRELAND Page 1 of 4 National College of Ireland MSc in Cloud Computing, Year 1,...

Deepti answered on May 10 2021
130 Votes
Abstract
This paper aims at preparing a case study for a company based in Ireland which intends to shift its primary web application from monolithic to micro-services-based architecture and intends to explore software development practices for effective continuous Integration and continuous deployment (CI/CD). The plan for provisioning and configuration shall b
e done for software apps developed in C++ programming language. All the cloud-based services offered by Amazon Web Services are discussed which can be used in creating CI/CD pipelines in order to incorporate secure development of application and secure production. Security during build, test and monitoring is discussed using the services involved. Th workflow of the entire CI/CD pipeline is illustrated through diagram. The tools and services are analyzed for their advantages and limitations along with learnings from this plan and usage of the services and tools.
I. INTRODUCTION
An important part of DevOps is adopting the lifecycle of continuous integration and continuous deployment (CI/CD) beginning from building and testing up to the deployment of the apps, including development as well as production environment. Use of CI/CD pipeline configuration enables app development and code delivery to be frequent and reliable, alongside reducing the security issues.
The target company aims at shifting its web application from monolithic to micro-services. The company aims at adapting software development practices with effective CI/CD. This paper proposes a provisioning and configuring plan for web applications for the company through CI/CD pipeline. This transition aims at providing the company with increased speed in terms of total build/release time. It will be further beneficial to the company in future for transitioning from single cloud to multi-cloud environment with minimal changes to apps.
In the following sections, a comprehensive plan of provisioning and configuring web apps for a company based in Ireland is described. A complete CI/CD pipeline lifecycle is discussed with its stages of build, test, release and deploy, The AWS service of AWS CodePipeline and tools are AWS Commit, CodeBuild, CodeDeploy that shall be used to accomplish the automation. The security aspect of these services and tools are discussed during building, testing and monitoring. A block diagram depicting the various stages of the build is included. Lastly, a critical analysis is done among the cloud-based services and tools proposed in the plan.
II. COMPREHENSIVE PLAN
A comprehensive plan for configuring of software at the target company shall include a series of steps of CI/CD pipeline. The pipeline shall focus on improving software delivery through DevOps approach (Khan, 2020). It shall improve the process of app development by monitoring and automation during integration, testing, delivery and deployment phases. The major components of the CI/CD pipeline are the tasks or stages of the pipeline, namely build, test, merge, automated release and automated deployment to production.
A. Build Stage
The application shall be compiled at this stage. The AWS CodeBuild service shall be used to plan a build in this case. This service supports from various source code repository providing tools like CodeCommit, Amazon S3, GitHub and BigBucket out of which CodeCommit is recommended. Build specification file in the source code in C++ will be required to run a build as build_project.cpp. It offers a modern interface with high-level and low-level APIs for AWS features of minimum dependencies and platform portability. Security can be assured using AWS...
SOLUTION.PDF

Answer To This Question Is Available To Download

Related Questions & Answers

More Questions »

Submit New Assignment

Copy and Paste Your Assignment Here