Marke: Marcus Persson
Variante: Taschenbuch
Eigenschaften:
A coding agent can produce a convincing prototype in hours. That speed can make it easy to underestimate the security and operational work still needed before the system reaches production.Secure Development in the Age of AI Agents is about that gap. Coding agents can write code and tests, change infrastructure, run commands and call MCP tools. They may also inherit access or influence what reaches production. The team still has to decide where authorization is enforced, which identity each tool uses, what the agent must not change and how the result will be verified.The book follows a team building a multi-tenant SaaS feature from an early request through production. Following one feature across the lifecycle shows how decisions about tenant isolation, storage access and tool permissions affect implementation, delivery and operation. Azure supplies the concrete services. The security reasoning applies across platforms.The approach starts with familiar secure development work and adapts it to coding agents and MCP. The guidance stays close to everyday development work. It shows how to:Write security requirements that developers and coding agents can followMap what an agent can read, write, execute, call or influence, then set practical limitsAssess MCP servers, tool authorization, identities and untrusted contentThreat model with incomplete architecture and keep assumptions visibleUse CI/CD to enforce decisions that should not rely on review aloneFeed runtime findings back into requirements, tests and designDefine agent and MCP inventories, ownership and review triggers as tools and access changeThis book is for developers, tech leads and security champions. It is also for security architects, AppSec engineers, platform engineers, DevSecOps engineers and cloud engineers who support software delivery.The focus is coding agents and MCP inside the software delivery processYou do not need deep security expertise. Basic familiarity with repositories, pull requests and CI/CD is enough.
