Azure Skill Sprint: DevSecOps and Defender For Cloud

Learn the essentials of DevSecOps and get hands on with free resources to help you grow. See how CNAPP allows you to secure development from code to cloud.

let’s talk DevSecOps—the magic trio of Development, Security, and Operations. In today’s cloud-driven world, integrating security into every phase of your workflow isn’t just “nice to have” its essential. But where do you start? Don’t worry! Jake Walsh (Microsoft MVP) and I have curated free resources from Microsoft Learn and beyond to help you learn DevSecOps.

---

🚀 Why DevSecOps?

Imagine shipping code faster and safer. DevSecOps automates security checks into your CI/CD pipelines, catches vulnerabilities early, and keeps compliance on autopilot. No more midnight panic attacks over misconfigured cloud resources!

1. What is DevSecOps

• Simple explanation of DevSecOps

2. Secure Coding: Fix Flaws Before Deployment

Stop vulnerabilities at the source.

• Microsoft Learn (Free Modules and paths):

  • Threat modelling

  • Secure development best practices on Azure

  • Secure your code with GitHub Advanced Security

• Free Tools & Guides:

  • Sank (must learn) interactive DevSecOps and Devops labs

  • InfoSecSkills free DevSecOps video course

  • free GitHub advanced labs

---

3. Automate Security in CI/CD Pipelines

No manual reviews. Let tools do the work.

• Blogs

  • CI/CD Cheat sheet

  • CI/CD Best Practice

  • Implement DevSecOps to secure your pipelines

• Microsoft Learn:

  • Securing Azure Pipelines

  • Introduction to Secure DevOps

  • Microsoft DevSecOps playbook

• Free Labs and tools:

  • TryHackMe DevSecOps Labs

  • GitLab CI/CD Security Templates: Pre-built pipelines for DevSecOps

  • GitHub Advanced security free features

  • Snyk community edition

  ---

  4. Secure cloud infrastructure

  Catch misconfigurations before deployment.

• Blogs:

  • Securing the Cloud with Defender for Cloud and Azure Policy (by me)

  Securing the Cloud with Defender for Cloud and Azure Policy

  • DevSecOps as infrastructure as code (IAC) by Microsoft

• Free Tools with Zero Strings:

  • GitHub Advanced Security Certification path

• Video: Code to Cloud Security using Microsoft Defender for DevOps

• Video: Integrate Defender for Cloud with CI/CD pipelines

---

Check out Jakes LinkedIn and Blog for future skill sprint posts!

Previous posts:

Week one by Jakub: Securing the Cloud with Defender for Cloud and Azure Policy

Week two by Jake: Azure Skill Sprint – Learning All About Azure Local and networking in an Azure Hybrid World

Week three by Jakub:Azure Skill Sprint: learning all about AI Security

---

Have blog ideas, want to engage on a topic, or explore collaboration? Let’s take it offline reach out on LinkedIn. I’d love to connect and continue the conversation!