From Code to Compliance: Enforcing Azure Security with Terraform and...
summary
Shows a concrete pipeline: Terraform modules (definitions, remediations, exemptions) driven from CSVs, GitHub Actions runs plan and apply, and the live demo successfully creates a custom initiative, a subscription assignment and a resourcegroup exemption. Calls out that remediation tasks require an identity and RBAC role, that deployIfNotExists and modify effects behave differently, and that real deployments can reach ~800 policies. Comes with reusable modules, CI/CD artifacts, and working demo code so policy-as-code replaces portal clickops and fights exemption sprawl.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 7:29Learning objectives
- 10:00What is Azure Policy
- 17:17Policy governance limits
- 22:34Greenfield vs brownfield
- 25:45Policy as code benefits
- 30:58Terraform modules for Policy
- 35:11Live demo: Policy with Terraform
- 45:08Key takeaways
- 46:10Q&A
related talks
01h 00mSecurely deploying Infrastructure as Code
45mStreamlining Compliance: Leveraging Open-Source Terraform AWS modules
37mTerraform & CI/CD
36mTerraform & CI/CD
26mTerraforming Our Tenant: Self-Serving Apps as Code
25mEnterprise Deployment to Azure and AWS in Azure DevOps
45mCatching Commits to Secure Infrastructure as Code
33mCompliance as Code - Lessons Learned From Regulated Organizations