{"id":34379,"date":"2020-04-13T18:19:40","date_gmt":"2020-04-13T18:19:40","guid":{"rendered":"https:\/\/blog.trendmicro.com\/?p=543823"},"modified":"2020-04-13T18:19:40","modified_gmt":"2020-04-13T18:19:40","slug":"shift-well-architecture-left-by-extension-security-will-follow","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/","title":{"rendered":"Shift Well-Architecture Left. By Extension, Security Will Follow"},"content":{"rendered":"<p data-selectable-paragraph><strong>A story on how Infrastructure as Code can be your ally on Well-Architecting and securing your Cloud environment<\/strong><\/p>\n<div class=\"eo\">\n<div class=\"n ep eq er es\" readability=\"11.213012477718\">\n<div class=\"o n\" readability=\"19.013368983957\">\n<div readability=\"6.5263157894737\">By Raphael Bottino, Solutions Architect \u2014 first posted as a <a href=\"https:\/\/medium.com\/@raphabot\/shift-well-architecture-left-by-extension-security-will-follow-9012168b56e8\">medium article<\/a><\/div>\n<p>Using Infrastructure as Code(IaC for short) is the norm in the Cloud. CloudFormation, CDK, Terraform, Serverless Framework, ARN\u2026 the options are endless! And they are so many just because IaC makes total sense! It allows Architects and DevOps engineers to version the application infrastructure as much as the developers are already versioning the code. So any bad change, no matter if on the application code or infrastructure, can be easily inspected or, even better, rolled back.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p id=\"7560\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>For the rest of this article, let\u2019s use CloudFormation as reference. And, if you are new to IaC, check how to create a new S3 bucket on AWS as code:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-543829\" src=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-1024x309.jpg\" alt width=\"895\" height=\"270\" srcset=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-1024x309.jpg 1024w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-300x91.jpg 300w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-768x232.jpg 768w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-640x193.jpg 640w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-900x272.jpg 900w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-440x133.jpg 440w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1-380x115.jpg 380w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/Revised-1-1.jpg 1285w\" sizes=\"auto, (max-width: 895px) 100vw, 895px\"><\/p>\n<p id=\"b480\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>Pretty simple, right? And you can easily create as many buckets as you need using the above template (if you plan to do so, remove the BucketName line, since names are globally unique on S3!). For sure, way simpler and less prone to human error than clicking a bunch of buttons on AWS console or running commands on CLI.<\/p>\n<p id=\"b480\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>Pretty simple, right? And you can easily create as many buckets as you need using the above template (if you plan to do so, remove the BucketName line, since names are globally unique on S3!). For sure, way simpler and less prone to human error than clicking a bunch of buttons on AWS console or running commands on CLI.<\/p>\n<p id=\"9502\" class=\"gi gj ap ce gk b dy hv ea hw gn hx gp hy gr hz gt cx\" data-selectable-paragraph>Although this is a functional and useful CloudFormation template, following correctly all its rules, it doesn\u2019t follow the rules of something bigger and more important: The AWS Well-Architected Framework. This amazing tool is a set of whitepapers describing how to architect on top of AWS, from 5 different views, called Pillars: Security, Cost Optimization, Operational Excellence, Reliability and Performance Efficiency. As you can see from the pillar names, an architecture that follows it will be more secure, cheaper, easier to operate, more reliable and with better performance.<\/p>\n<p data-selectable-paragraph><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-543830\" src=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-1024x264.jpg\" alt width=\"1024\" height=\"264\" srcset=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-1024x264.jpg 1024w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-300x77.jpg 300w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-768x198.jpg 768w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-640x165.jpg 640w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-900x232.jpg 900w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-440x114.jpg 440w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2-380x98.jpg 380w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/revised-2.jpg 1348w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\"><\/p>\n<p class=\"gi gj ap ce gk b dy hv ea hw gn hx gp hy gr hz gt cx\" data-selectable-paragraph>Among others, this template will generate a S3 bucket that doesn\u2019t have encryption enabled, doesn\u2019t enforce said encryption and doesn\u2019t log any kind of access to it\u2013all recommended by the Well-Architected Framework. Even worse, these misconfigurations are really hard to catch in production and not visibly alerted by AWS. Even the great security tools provided by them such as Trusted Advisor or Security Hub won\u2019t give an easy-to-spot list of buckets with those misconfigurations. Not for nothing Gartner states that 95% of cloud security failures will be the customer\u2019s fault\u00b9.<\/p>\n<p id=\"e803\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>The DevOps movement brought to the masses a methodology of failing fast, which is not exactly compatible with the above scenario where a failure many times is just found out whenever unencrypted data is leaked or the access log is required. The question is, then, how to improve it? Spoiler alert: the answer lies on the IaC itself \ud83d\ude42<\/p>\n<p id=\"4779\" class=\"gi gj ap ce gk b dy hv ea hw gn hx gp hy gr hz gt cx\" data-selectable-paragraph>Even before making sure a CloudFormation template is following AWS\u2019 own best practices, the first obvious requirement is to make sure that the template is valid. A fantastic open-source tool called cfn-lint is made available by AWS on GitHub\u00b2 and can be easily adopted on any CI\/CD pipeline, failing the build if the template is not valid, saving precious time. To shorten the feedback loop even further and fail even faster, the same tool can be adopted on the developer IDE\u00b3 as an extension so the template can be validated as it is coded. Pretty cool, right? But it still doesn\u2019t help us with the misconfiguration problem that we created with that really simple template in the beginning of this post.<\/p>\n<p id=\"610e\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>Conformity\u2074 provides, among other capabilities, an API endpoint to scan CloudFormation templates against the Well-Architected Framework, and that\u2019s exactly how I know that template is not adhering to its best practices. This API can be implemented on your pipeline, just like the cfn-lint. However, I wanted to move this check further left, just like the cfn-lint extension I mentioned before.<\/p>\n<p id=\"c7ab\" class=\"gi gj ap ce gk b dy hv ea hw gn hx gp hy gr hz gt cx\" data-selectable-paragraph>With that challenge in mind, but also with the need for scanning my templates for misconfigurations fast myself, I came up with a Visual Studio Code extension that, leveraging Conformity\u2019s API, allows the developer to scan the template as it is coded. The Extension can be found&nbsp;<a class=\"bx fw io ip iq ir\" href=\"https:\/\/marketplace.visualstudio.com\/items?itemName=raphaelbottino.cc-template-scanner\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">here<\/a>\u2075 or searching for \u201cConformity\u201d on your IDE.<\/p>\n<p id=\"0d5c\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>After installing it, scanning a template is as easy as running a command on VS Code. Below it is running for our template example:<\/p>\n<div class=\"ib ic hb id ai\">\n<div class=\"co cp is\">\n<div class=\"ha r hb ii\">\n<div class=\"it r\">\n<p><img loading=\"lazy\" decoding=\"async\" class=\"ma qw s t u hd ai in\" role=\"presentation\" src=\"https:\/\/miro.medium.com\/max\/1106\/1*ZlhTtWHwnAiRIU_kxE1Y8w.gif\" width=\"1106\" height=\"842\"><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p id=\"5b8c\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>This tool allows anyone to shift misconfiguration and compliance checking as left as possible, right on developers\u2019 hands. To use the extension, you\u2019ll need a Conformity API key. If you don\u2019t have one and want to try it out, Conformity provides a 14-day free trial, no credit card required. If you like it but feels that this time period is not enough for you, let me know and I\u2019ll try to make it available to you.<\/p>\n<p id=\"5cd6\" class=\"hj hk ap by hl b fp iv fr iw ho ix hq iy hs iz hu eo\" data-selectable-paragraph>Oh, by the way, if you are wondering how a S3 bucket CloudFormation template looks like when following the best practices, take a look:<\/p>\n<div class=\"ib r cr\">\n<div class=\"pk r\">&nbsp; &nbsp; <img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-543834\" src=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-44.jpg\" alt width=\"634\" height=\"810\" srcset=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-44.jpg 634w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-44-235x300.jpg 235w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-44-440x562.jpg 440w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-44-380x485.jpg 380w\" sizes=\"auto, (max-width: 634px) 100vw, 634px\"><\/div>\n<div><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-543835\" src=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-complete.jpg\" alt width=\"648\" height=\"834\" srcset=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-complete.jpg 648w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-complete-233x300.jpg 233w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-complete-640x824.jpg 640w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-complete-440x566.jpg 440w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2020\/04\/image-complete-380x489.jpg 380w\" sizes=\"auto, (max-width: 648px) 100vw, 648px\"><\/div>\n<\/div>\n<p>A Well-Architected bucket template<\/p>\n<p id=\"2f40\" class=\"hj hk ap by hl b fp hm fr hn ho hp hq hr hs ht hu eo\" data-selectable-paragraph>Not as simple, right? That\u2019s exactly why this kind of tool is really powerful, allowing developers to learn as they code and organizations to fail the deployment of any resource that goes against the AWS recommendations.<\/p>\n<p id=\"03b4\" class=\"gi gj ap ce gk b dy hv ea hw gn hx gp hy gr hz gt cx\" data-selectable-paragraph>[1]&nbsp;<a class=\"bx fw io ip iq ir\" href=\"https:\/\/www.gartner.com\/smarterwithgartner\/why-cloud-security-is-everyones-business\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">https:\/\/www.gartner.com\/smarterwithgartner\/why-cloud-security-is-everyones-business<\/a><\/p>\n<p id=\"e830\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>[2]&nbsp;<a class=\"bx fw io ip iq ir\" href=\"https:\/\/github.com\/aws-cloudformation\/cfn-python-lint\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">https:\/\/github.com\/aws-cloudformation\/cfn-python-lint<\/a><\/p>\n<p id=\"cda6\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>[3]&nbsp;<a class=\"bx fw io ip iq ir\" href=\"https:\/\/marketplace.visualstudio.com\/items?itemName=kddejong.vscode-cfn-lint\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">https:\/\/marketplace.visualstudio.com\/items?itemName=kddejong.vscode-cfn-lint<\/a><\/p>\n<p id=\"15d8\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>[4]&nbsp;<a class=\"bx fw io ip iq ir\" href=\"https:\/\/www.cloudconformity.com\/\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">https:\/\/www.cloudconformity.com\/<\/a><\/p>\n<p id=\"5d43\" class=\"gi gj ap ce gk b dy gl ea gm gn go gp gq gr gs gt cx\" data-selectable-paragraph>[5]&nbsp;<a class=\"bx fw io ip iq ir\" href=\"https:\/\/marketplace.visualstudio.com\/items?itemName=raphaelbottino.cc-template-scanner\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">https:\/\/marketplace.visualstudio.com\/items?itemName=raphaelbottino.cc-template-scanner<\/a><\/p>\n<p>Read More <a href=\"https:\/\/blog.trendmicro.com\/shift-well-architecture-left-by-extension-security-will-follow\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A story on how Infrastructure as Code can be your ally on Well-Architecting and securing your Cloud environment By Raphael Bottino, Solutions Architect &#8212; first posted as a medium article Using Infrastructure as Code(IaC for short) is the norm in the Cloud. CloudFormation, CDK, Terraform, Serverless Framework, ARN\u2026 the options are endless! And they are&#8230;<br \/>\nThe post Shift Well-Architecture Left. By Extension, Security Will Follow appeared first on . Read More HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":34380,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[61],"tags":[1252,536,1254,1338,254],"class_list":["post-34379","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trendmicro","tag-cloud","tag-cloud-security","tag-devops","tag-executive-insight","tag-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Shift Well-Architecture Left. By Extension, Security Will Follow 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Shift Well-Architecture Left. By Extension, Security Will Follow 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-13T18:19:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/shift-well-architecture-left-by-extension-security-will-follow.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"309\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Shift Well-Architecture Left. By Extension, Security Will Follow\",\"datePublished\":\"2020-04-13T18:19:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/\"},\"wordCount\":953,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/shift-well-architecture-left-by-extension-security-will-follow.jpg\",\"keywords\":[\"cloud\",\"Cloud Security\",\"devops\",\"Executive Insight\"],\"articleSection\":[\"TrendMicro\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/\",\"name\":\"Shift Well-Architecture Left. By Extension, Security Will Follow 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/shift-well-architecture-left-by-extension-security-will-follow.jpg\",\"datePublished\":\"2020-04-13T18:19:40+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/shift-well-architecture-left-by-extension-security-will-follow.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/shift-well-architecture-left-by-extension-security-will-follow.jpg\",\"width\":1024,\"height\":309},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shift-well-architecture-left-by-extension-security-will-follow\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"cloud\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/cloud\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Shift Well-Architecture Left. By Extension, Security Will Follow\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Shift Well-Architecture Left. By Extension, Security Will Follow 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/","og_locale":"en_US","og_type":"article","og_title":"Shift Well-Architecture Left. By Extension, Security Will Follow 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-04-13T18:19:40+00:00","og_image":[{"width":1024,"height":309,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/shift-well-architecture-left-by-extension-security-will-follow.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Shift Well-Architecture Left. By Extension, Security Will Follow","datePublished":"2020-04-13T18:19:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/"},"wordCount":953,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/shift-well-architecture-left-by-extension-security-will-follow.jpg","keywords":["cloud","Cloud Security","devops","Executive Insight"],"articleSection":["TrendMicro"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/","url":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/","name":"Shift Well-Architecture Left. By Extension, Security Will Follow 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/shift-well-architecture-left-by-extension-security-will-follow.jpg","datePublished":"2020-04-13T18:19:40+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/shift-well-architecture-left-by-extension-security-will-follow.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/04\/shift-well-architecture-left-by-extension-security-will-follow.jpg","width":1024,"height":309},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/shift-well-architecture-left-by-extension-security-will-follow\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"cloud","item":"https:\/\/www.threatshub.org\/blog\/tag\/cloud\/"},{"@type":"ListItem","position":3,"name":"Shift Well-Architecture Left. By Extension, Security Will Follow"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34379","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=34379"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34379\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/34380"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=34379"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=34379"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=34379"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}