Azure DevFest - Security as a Code: Enabling Flexibility on platform with Control
Infrastructure as a Code (IaC) is the defacto recommendation approach for any organization adopting cloud. IaC enables consistency in deployment environments, increases maintenance productivity and helps you to avoid hard-to-track undocumented, ad-hoc configuration changes at the pipeline level. As an important part of implementing DevOps practices, IaC is used to set up guardrails and to monitor and manage policy using continuous integration/continuous delivery (CICD).
With the ever-changing compliance landscape and increasing level of cybersecurity threats, IaC Azure Policy governance allows agility in executing changes across the landscape and documenting such changes as part of compliance documentation. The subscribed end-consumer can operate freely without worrying because 'Policy Control' placed as part of IaC will be enforced.
In this video, our Cloud Solution Architects, Akash and Mahesh will cover topics including:
how to enforce guardrail in your Azure landscape
how to write a Custom Azure Polic
key considerations in writing Azure Policy Code and Optimizing Code
how to apply policy using various methods, AzOps, UI, Terraform Landing Zone
modifying Existing Policy