Security and compliance should be considered throughout planning, building, testing, deployment, and operation.

• Protect secrets
• Control access
• Keep environments separated
• Maintain logs and auditability
• Verify applicable requirements
• Test before Production
• Monitor after launch