Security on Daniel Andrade

Terraform – Using Azure KeyVault Secrets During Deployments

Thu, 08 Jun 2023 15:22:15 +0100

Terraform – Using Azure KeyVault Secrets During Deployments

Terraform has become one of the most prominent tools in the DevOps world. It is an open-source Infrastructure as Code (IaC) software tool that enables users to define and provide data centre infrastructure using a declarative configuration language. This blog post focuses on how to use Azure KeyVault secrets during Terraform deployments.

What is Azure KeyVault?

Azure KeyVault is a cloud-based service for managing cryptographic keys and other secrets securely. It eliminates the need to store sensitive data in configuration files or code, thereby improving the security posture of your applications.

Getting started with Microsoft Defender for Cloud

Thu, 16 Mar 2023 15:40:50 +0100

Getting started with Microsoft Defender for Cloud

March 16, 2023

Microsoft Defender for Cloud is a robust cloud-based security solution that helps organizations protect their cloud resources from various threats. With its advanced security features and easy-to-use interface, Microsoft Defender for Cloud is essential for any organization looking to secure their cloud environment. In this blog post, we will provide a comprehensive guide on how to get started with Microsoft Defender for Cloud and configure it for optimal security.

Back up Azure Conditional Access Policies with PowerShell and Azure DevOps

Thu, 03 Nov 2022 15:51:46 +0100

Back up Azure Conditional Access Policies with PowerShell and Azure DevOps

November 3, 2022

I’ve been playing a lot with Azure Policies lately. One of my lastest requirements was to be able to export my company’s CA policies.

Below you can find my implementation to automatically back up my policies. I’m also leveraging Azure DevOps pipelines as I wanted something that’s free, would run on a schedule and save files to a Blob Container. That’s a very simple implementation and works very well for my needs.