Snyk Builds Security into AWS CodePipeline
June 09, 2021

Snyk has built an integration inside the AWS CodePipeline console.

This new integration allows AWS CodePipeline users to build automated security controls into their deployment pipeline without having to leave the Amazon Web Services (AWS) console, bringing the Snyk experience directly to AWS users, and empowering them to more efficiently find and fix vulnerabilities in open source code when building cloud native applications on AWS.

As security becomes an increasingly crucial priority for development teams, Snyk has worked closely with AWS to automate security tooling onto AWS's continuous delivery services, accelerating triaging and empowering agility in development when making application and infrastructure updates.

Snyk's integration inside the AWS CodePipeline console is the latest in a number of key integrations with AWS services, helping customers build security into applications at each level of the technology stack using an intuitive, developer-friendly security platform. Snyk allows DevOps and engineering teams to accelerate security testing by first detecting vulnerabilities in the developer IDE. Using Snyk's feature-rich CLI, developers can also secure various elements of their workflow such as AWS CodeBuild and AWS CodeCommit. AWS users can then leverage Snyk's integrations with Amazon Elastic Container Registry (Amazon ECR) and Amazon Elastic Kubernetes Service (Amazon EKS) to scan container images and Kubernetes clusters for vulnerabilities and misconfigurations, even mapping new vulnerabilities to any container images already deployed in a Kubernetes cluster. For serverless workloads, Snyk scans AWS Lambda functions for vulnerabilities and can gate deployments through the CI/CD stage to ensure that only secure workloads are permitted to run in production.

This latest integration inside the AWS CodePipeline console expands upon Snyk's ongoing collaboration with AWS to ensure that both development and security teams are able to leverage automated tooling to mitigate their open source risk as part of the development process, positively affecting the way they work and interact with one another.

- Development teams: can easily find, prioritize and fix vulnerabilities in their open source dependencies, delivering secure code faster than their competition without having to adopt gated security audits that disrupt application deployment.

- Security teams: can enable improvements to the development process that ensure that all applications are continuously scanned for vulnerabilities without requiring the security team to manually meet the break-neck speed of modern application development.

"Snyk and AWS share a common goal: to facilitate a digital transformation for our customers through cloud native services that empower automation and developer engagement," said Carey Stanton, VP of Business Development, Snyk. "Automation in deployment pipelines is key to adopting a comprehensive approach to security throughout the application development lifecycle. Snyk's tight interoperability with AWS CodePipeline now makes it even simpler for developers to focus on building applications securely, taking advantage of developer-friendly outputs without having to manage a new set of tools."

"AWS wants to empower our customers to focus their time and resources on innovating their business, which is why we collaborate with security leaders like Snyk to help automate manual security tasks in development," said Ken Exner, Director, Developer Tools, AWS. "We're delighted to be working with Snyk to allow our customers to be more agile when delivering secure applications to market."

As an AWS Partner within the AWS Partner Network (APN), Snyk has been technically validated to work seamlessly with several AWS services, and has achieved AWS DevOps Competency as well as the AWS Lambda Ready and Amazon Linux 2 Ready designations.

Snyk has also recently announced the availability of Snyk Cloud Native Appliance (Snyk CNA), a self-hosted, dedicated instance of Snyk that can be deployed directly onto a customer's private AWS environment, or even onto an AWS GovCloud environment, operating workloads up to Impact Level (IL) 5.

Share this

Industry News

June 22, 2021

Red Hat announced new end-to-end Kubernetes-native decision management capabilities as part of the latest release of Red Hat Process Automation.

June 22, 2021

GitLab announces the next iteration of its single application with its 14 release.

June 22, 2021

Transposit introduced new platform capabilities which are developer-friendly, but built for all.

June 22, 2021

Plutora transitioned to an expanded data-centric platform, added additional metrics to monitor and manage value stream flow, and deepened its integrations with Agile planning tools.

June 22, 2021

Opsera announces its native Salesforce CI/CD release automation functionality.

June 21, 2021

Render announced the general availability of autoscaling.

June 21, 2021

Grafana Labs acquired k6, the Stockholm-based startup behind the open source load testing tool for engineering teams.

June 17, 2021

Bitrise announced the release of its new enterprise-grade Mobile DevOps platform.

June 17, 2021

Perforce Software announces a partnership with Microsoft to deliver the free Enhanced Studio Pack, providing development tools in a click-to-start model on the Azure cloud.

June 17, 2021

Tigera announced the availability of Calico Cloud in the Microsoft Azure Marketplace.

June 16, 2021

Red Hat announced the general availability of Red Hat’s migration toolkit for virtualization to help organizations accelerate open hybrid cloud strategies by making it easier to migrate existing workloads to modern infrastructure in a streamlined, wholesale manner.

June 16, 2021

BrowserStack announced it has secured $200 million in Series B funding at a $4 billion valuation.

June 16, 2021

Harness announced significant platform updates that address gaps in today's developer and DevOps market.

June 15, 2021

Broadcom announced new capabilities for Value Stream Management (VSM) in its ValueOps software portfolio, seamlessly combining the proven investment planning features of Clarity™ with the advanced Agile management capabilities of Rally® software.

June 15, 2021

Copado announced its Summer 21 Release, opening up its platform for true multi-cloud DevOps for enterprise SaaS and low-code development.