Automation Of Security Policies In DevSecOps Environments: Implementation Of Zero Trust Principles Using Ansible And Terraform In Linux Systems

Modern cloud environments must incorporate advanced security mechanisms aligned with the Zero Trust model due to the continuously increasing number of cyber threats. This study presents the development of a comprehensive private cloud environment based on OpenStack, utilizing the modern Infrastructure as Code (IaC) approach. The entire project was designed in accordance with the Zero Trust principles, with an additional implementation of Falco, a real-time security monitoring tool. The conducted tests confirmed the effectiveness of Falco in detecting infrastructure-level security threats, making it a crucial component of any cloud security strategy. Furthermore, this research outlines future development directions, including enhancing detection rules and integrating Falco with SIEM and SOAR systems, enabling automated threat detection and response in cloud-native environments.