ZA·026 Talk 2023

Oops!!!…did I reveal something?

Event
BSides Cape Town
Region
South Africa
Language
EN

Abstract

Protect your Azure infrastructure from insecure secrets in deployment templates with deployment grazor - an Azure PowerShell script that detects potential misconfigurations and leaked secrets. Infrastructure as Code (IaC) has been a valuable tool in the arsenal of DevOps teams globally. IaC tools such as Bicep and Terraform promote speed and consistency of deployments. These tools and associated deployment templates are typically leveraged in environments requiring large scale infrastructure. In Microsoft Azure, deployment templates are static files written in JSON, and used to define the configuration of a deployed resource.