We'll now talk about another very interesting tool that allows you to check the security of Azure infrastructure resources. It is a tool provided by Microsoft, called Secure DevOps Kit for Azure (AzSK) and its complete documentation is here: https://azsk.azurewebsites.net/README.html.
Unlike InSpec, AzSK does not verify the compliance of your Azure infrastructure with architectural requirements but rather will verify that the recommendations and good security practices are applied to your Azure subscription and resources.
AzSK also integrates seamlessly into a CI/CD pipeline and thus allows developers and operational staff to continuously ensure that their Azure resources are secure and do not open security vulnerabilities to unwanted people.
We'll see how to install AzSK; then we'll look at how it is used to verify the security...