Implement DevSecOps in Azure
summary
Shows how to implement DevSecOps in Azure by partitioning subscriptions by environment and enforcing constraints at management groups so new subscriptions inherit policies. Recommends using Azure Policy to restrict locations, require private endpoints, and block risky resource types; use Blueprints to bootstrap compliant subscriptions; run ARM/Terraform template checks and security extensions in CI pipelines; and feed results into Azure Security Center for continuous monitoring, JIT and application control. Demonstrations include pipeline extensions and policy assignments that detect misconfigurations before production.
AI-written summary · about
chapters (9)
- 0:00DevSecOps in Azure
- 3:19Why DevSecOps for security
- 10:00Security in CI/CD
- 17:10Security in Azure automation
- 26:55Policies and compliance
- 35:03Azure Security Center
- 42:39DevSecOps tools and tips
- 49:46Security issues and fixes
- 52:36Q&A
related talks
52mImplement DevSecOps in Azure
44mAzure DevSecOps
55mWhat you need to know about security for cloud DevOps
50mBest Practices for Securing CI/CD Pipelines
25mSecuring Your DevOps Transformation
52mHands-on Azure DevOps (...)
49mHow Not to Smash Your Azure Security!
42mAzure DevOps security - Lessons learned