Our DevSecOps Approach: An Experience Focused on Your Needs

You’ll find DevSecOps within organizations that seek to automate and accelerate the processes, quality, security and reliability of services. This approach promotes a close collaboration among the development, security and operations teams. The objective is to accelerate the in-house release of our stories, while improving their security and reliability.

At oXya, we developed a unique DevSecOps strategy that goes far beyond the usual collaboration principles. We decided to base our strategy on users (our technical consultants and system administrators) to help them better meet the needs of their clients supported by the oXya Managed Services. In this article, we’ll help you understand DevSecOps’ characteristics and advantages.

Providing Simple Tools to Users with Low-Code/No-Code (LCNC)

To eliminate the complexity of coding and make the work of our teams easier, our DevSecOps approach tends to offer low-code/no-code tools. Accordingly, we’ve taken a decisive turn with our DevSecOps platform and developed solutions that are better aligned with our users’ daily habits.

By masking the underlying complexity of the platform, we give users the agility and flexibility to streamline various processes through visual and intuitive interfaces. We make tasks easier for two categories of users: our operations teams and our clients’ technical teams.

Our tools allow you to perform all the tasks necessary to deploy an SAP landscape end-to-end on any type of cloud service while integrating critical applications as part of our oXya Managed Services.

IaC Express: A New oXya Product Designed to Accelerate Your Transformation on Cloud

In 2024, it’s no longer possible to avoid Infrastructure-as-Code (IaC). IaC is key to ensuring your deployment is consistent with your infrastructure, thanks to code. This technology offers:

1. Improved coherence and reliability;
2. Increased agility and deployment speed;
3. Improved governance and collaboration while ensuring good traceability;
4. Optimized configurations to reduce infrastructure costs;
5. Facilitated implementation and maintenance of coherent security policies by standardizing configurations.

Consequently, each of our deployments has been performed on our new Canadian IaC Express platform, a low-code interface for our consultants. This approach involves taking over the available models of SAP code deployment for each type of public cloud and adapt them to the specific needs of our clients’ projects.

As for deployment in the public cloud with Infrastructure-as-Code, we established a specific model based on the following steps:

1. During technical workshops, we identify the client’s technical needs and we create a comprehensive list of resources with the required characteristics for the cloud;
2. We create a Technical Architecture Document (TAD) on a predefined template in Excel;
3. Using this TAD, IaC Express automatically adapts its characteristics to the requirements and generates a ready-to-use code.

Why should we create the technical architecture in an Excel file initially? Simply put, it’s a key tool that facilitates the work of our service delivery teams. The code and various variables are translated in a language that’s comprehensible to all, including people who are not specialized in Terraform, for example.

By making the process more accessible, we can ensure faster and more efficient project delivery. We also prepare the post-project phase by implementing a simple method for our teams to maintain in operational condition the deployment code that was initially established.

For more details on our various deployment projects, see: Indigo Books and Music (Google Cloud), Énergir (Microsoft Azure), Suez (Microsoft Azure), GRTgaz (AWS).

Beyond Deployment: From VM to Business Processes

After automating infrastructure deployment, we are now extending our scope to automate the entire virtual machine (VM) lifecycle. This enables us to automate all our business process and especially all the repetitive, low value-added tasks. This initiative allows us to accelerate our service delivery by offering you agility and significant time savings through some of our competencies, such as:

• Cloning an environment in a few clicks to test a maintenance process or another specific need;
• Automating the deployment of additional resources during peak periods (for example, Black Friday and Boxing Day, for retailers);
• Reducing the time spent on repetitive administrative tasks;
• Updating operating systems, Kernel SAP…;
• Reducing the potential for human errors during large-scale maintenance by minimizing the number of manual interventions;
• And many others.

Automation is truly central to meeting the operational needs of our clients. Our extensive knowledge of processes allows us to easily establish a standard process to automate repetitive tasks that can be performed in a uniform and continuous way.

A Flexible and Comprehensive Approach

At the core of our approach is our ability to adapt to your environment and provide you with personalized solutions that meet your operational challenges by putting users in the foreground. Our approach leads to error reduction, faster deployment, increased productivity and much more, the whole in accordance with SAP standards.

Contact us today here if you want to know more about how we can help your company.