Secure Development
summary
Covers secure handling of secrets in application development: problems with storing passwords and keys in source control and step-by-step improvements for safer local development and production deployments. Demonstrates Azure technologies—Azure Key Vault, Azure Active Directory (AAD), and managed App Service identities—to protect secrets, and shows how moving to AAD-based authentication can eliminate the need for keys, certificates, and passwords.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:55Secret management
- 9:18Secrets in Azure DevOps
- 17:09Azure Key Vault with IaC
- 23:08Managed Identity auth
- 33:45Recap and approach
- 37:43Secrets in SCM
- 38:26Q&A
related talks
10mCan you keep it a secret?
47mManaging your Secrets in a Cloud Environment
55mEverything a .NET dev needs to know about configuration and secret management
01h 02mEverything a .NET developer needs to know about configuration & secret management
46mSecrets Management for the Modern Tech. Pro
50mSecuring configuration settings for applications in Azure
19mEnhancing Security in Azure Cosmos DB: Best Practices
22mSecure your secrets with automation