This chapter is dedicated to integrating security into DevOps practices. We presented three tools to verify and secure your data and cloud infrastructure. We discussed how to check the compliance of an Azure infrastructure using InSpec from Chef.
To do this and check infrastructure compliance, we installed InSpec and then detailed the writing of InSpec tests. We used its command lines to verify the compliance of Azure infrastructure. Then, we explored the use of the Secure DevOps Kit for Azure tool provided by Microsoft to analyze the security applied on a subscription and to Azure resources. Then we looked at its automation and integration into a CI/CD pipeline with Azure Pipelines.
In the last section, we saw how to protect sensitive data with Vault from HashiCorp. In this section, we looked at data encryption and decryption in Vault and wrote Terraform code that will...