Book Image

DevSecOps for Azure

By : David Okeyode, Joylynn Kirui
Book Image

DevSecOps for Azure

By: David Okeyode, Joylynn Kirui

Overview of this book

Businesses must prioritize security, especially when working in the constantly evolving Azure cloud. However, many organizations struggle to maintain security and compliance. Attackers are increasingly targeting software development processes, making software supply chain security crucial. This includes source control systems, build systems, CI/CD platforms, and various artifacts. With the help of this book, you’ll be able to enhance security and compliance in Azure software development processes. Starting with an overview of DevOps and its relationship with Agile methodologies and cloud computing, you'll gain a solid foundation in DevSecOps principles. The book then delves into the security challenges specific to DevOps workflows and how to address them effectively. You'll learn how to implement security measures in the planning phase, including threat modeling and secure coding practices. You'll also explore pre-commit security controls, source control security, and the integration of various security tools in the build and test phases. The book covers crucial aspects of securing the release and deploy phases, focusing on artifact integrity, infrastructure as code security, and runtime protection. By the end of this book, you’ll have the knowledge and skills to implement a secure code-to-cloud process for the Azure cloud.
Table of Contents (14 chapters)
1
Part 1: Understanding DevOps and DevSecOps
4
Part 2: Securing the Plan and Code Phases of DevOps
8
Part 3: Securing the Build, Test, Release, and Operate Phases of DevOps

Part 1: Understanding DevOps and DevSecOps

In this part, we will discuss the stages of a DevOps workflow, the security challenges of implementing DevOps, and how organizations can start addressing those challenges.

This part contains the following chapters:

  • Chapter 1, Agile, DevOps, and Azure Overview
  • Chapter 2, Security Challenges of the DevOps Workflow