Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

DevSecOps for Azure

You're reading from DevSecOps for Azure End-to-end supply chain security for GitHub, Azure DevOps, and the Azure cloud

Product type Paperback

Published in Aug 2024

Publisher Packt

ISBN-13 9781837631117

Length 342 pages

Edition 1st Edition

Tools

Azure

Concepts

Agile

Authors (2):

David Okeyode

Joylynn Kirui

View More author details

Table of Contents (14) Chapters

Preface

1. Part 1: Understanding DevOps and DevSecOps

2. Chapter 1: Agile, DevOps, and Azure Overview FREE CHAPTER

3. Chapter 2: Security Challenges of the DevOps Workflow

4. Part 2: Securing the Plan and Code Phases of DevOps

5. Chapter 3: Implementing Security in the Plan Phase of DevOps

6. Chapter 4: Implementing Pre-commit Security Controls

7. Chapter 5: Implementing Source Control Security

8. Part 3: Securing the Build, Test, Release, and Operate Phases of DevOps

9. Chapter 6: Implementing Security in the Build Phase of DevOps

10. Chapter 7: Implementing Security in the Test and Release Phases of DevOps

11. Chapter 8: Continuous Security Monitoring on Azure

12. Index

Why subscribe?

13. Other Books You May Enjoy

Hands-on exercise – Continuous security monitoring on Azure

In this exercise, we will complete the following tasks:

Task 1 – Implementing and operationalizing CSPM
Task 2 – Implementing and operationalizing continuous container workload protection

Task 1 – Implementing and operationalizing CSPM

In this task, we will cover MDC, where one of the main pillars is CSPM. MDC is a cloud-native application protection platform (CNAPP) that protects your cloud applications end to end using the following capabilities:

DevSecOps: Unifies security management across multi-cloud and multi-pipeline environments at the code level.
CSPM: Identifies and shares remediation of risks in cloud infrastructure.
Cloud Workload Posture Platform (CWPP): Protection capabilities for servers, containers, storage, and other workloads.

Defender for Cloud provides the following CSPM offerings:

Foundational CSPM: This is enabled by default...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

David Okeyode

David Okeyode

David Okeyode is the EMEA chief technology officer for Azure at Palo Alto Networks. Before that, he was an independent consultant helping companies secure their Azure environments through private expert-level training and assessments. He has authored three books on Azure security – Penetration Testing Azure for Ethical Hackers, Microsoft Azure Security Technologies Certification and Beyond, and Designing and Implementing Microsoft Azure Networking Solutions. He has also authored multiple cloud computing courses for the popular training platform LinkedIn Learning. He holds over 15 cloud certifications across Azure and AWS platforms, including the Azure Security Engineer, Azure DevOps, and AWS Security Specialist certifications. David is married to a lovely girl who makes the best banana cake in the world. They love traveling the world together!

See other products by David Okeyode

Joylynn Kirui

Joylynn Kirui

Joylynn Kirui is a senior cloud security advocate at Microsoft. She focuses on DevSecOps on GitHub and Azure, which includes application security. She is an infosec evangelist who believes in empowering developers and users in general on security best practices. She has vast experience in web and mobile app security testing, DevSecOps, and GSM security, having previously worked in the telco industry. She has a passion for mentorship and training students and empowering them. She has spoken at several conferences, where she shares her knowledge in cybersecurity and software development. She was among the Top 50 Women in Cyber Security Africa 2020 finalists, Woman Hacker of the Year Africa 2020 finalists, and Young CISO Vanguard 2022, among others. When not hacking, she enjoys farming, traveling, and adrenaline-filled activities.

See other products by Joylynn Kirui

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m