DevSecOps for Azure. End-to-end supply chain security for GitHub, Azure DevOps, and the Azure cloud by David Okeyode and Joylynn Kirui, 2024

Starting with an overview of DevOps and its relationship with Agile methodologies and cloud computing, you'll gain a solid foundation in DevSecOps principles. The book then delves into the security challenges specific to DevOps workflows and how to address them effectively. You'll learn how to implement security measures in the planning phase, including threat modeling and secure coding practices.

You'll also explore pre-commit security controls, source control security, and the integration of various security tools in the build and test phases. The book covers crucial aspects of securing the release and deploy phases, focusing on artifact integrity, infrastructure as code security, and runtime protection.

By the end of this book, you’ll have the knowledge and skills to implement a secure code-to-cloud process for the Azure cloud.

#book #SecDevOps #windows