As I was collecting insights for our upcoming DevSecOps Trend Report to be published in July, I came across the submission by Javed Shah, Director of Product Management for Cloud and DevOps at ForgeRock. In response to my question about the keys to successful DevSecOps implementation, Javed provided the following principles I thought you might find valuable:
Follow the principle of least privilege for all services that process (read, write, or update) data.