TMA-GITLAB-5.2.1
Ensure deployments are automated
Description
Automate deployments of production environment and application. Automating the deployments of both production environment and applications reduces the risk for human mistakes — such as a wrong configuration or exposure of sensitive data — because it requires less human interaction or intervention. It also eases redeployment of the environment. It is best to automate with Infrastructure as Code (IaC) because it offers more control over changes made to the environment creation configuration and stores to a version control platform.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
For each deployment process, ensure it is automated.
How it is fixed
Fix method: Guidance or infrastructure patch
Automate each deployment process of the production environment and application.
Properties
- Operating systems
- Any
- Tags
- devsecopsgitlab
- Reference
- CIS GitLab Benchmark v1.0.1 - 5.2.1 Ensure deployments are automated