Insurance Domain(Security Perspective) : Community Edition or Developer Edition?

Ashok · August 5, 2020, 7:10am

Hi,

We are implementing insurance domain application in AEM. For code quality check we want to implement Sonar Qube.
In this scenario, is Community edition good enough for our requirement and also it is secured for this ?
I am little confused whether we should we go with Community edition or Developer/Enterprise edition.

Please advise on this. Thanks.

ganncamp · August 5, 2020, 6:10pm

Hi,

Welcome to the community!

In terms of securing the instance so that people can’t access your code inappropriately, it’s exactly the same for Community Edition (CE) and Developer Edition (DE):

You probably want it tucked behind a firewall
You probably want to Force user authentication
Then you need to set your project permissions appropriately

Regarding what security issues can be found by each edition, CE gives you a good baseline of vulnerability detection. DE takes it further by adding taint analysis. If you’re dealing with internet-facing projects you want to at least consider DE. You can get a trial license for free.

HTH,
Ann