Digital economy makes applications the center of your world and the trust anchor of your customer. At the same time, your customer expects the highest comfort which makes it necessary to keep your applications up to date with new features as quick as possible. This results in several release cycles per day which need to be in sync with your security policy. To get this managed, it is necessary to get your application security infrastructure over infrastructure as code integrated in your CI/CD system. In this presentation, we will show a declarative approach to keep the integration as simple as possible together with the capability to integrate RBAC to get the domain specific knowledge of different teams like SecOps, DevOps and NetOps seamlessly integrated.