Azure DevSecOps 2/3 – Security DevOps Kit for Azure
Secure DevOps Kit (AzSK) is free set of tools, which can be used to check security configurations for Azure resources. Cool thing about this toolset is, that it can be easily integrated into the Azure DevOps.
AzSK can be installed as free extension from Azure DevOps Marketplace. Extension contains two tasks:
- ARM Template Checker – as task that can check security settings in ARM templates
- Security Verification Tests (SVTs)