Best-practices for securing your Azure Container Services

on YouTube ↗47m

" summary

Covers concrete steps: deploy an Azure Container Registry with AAD auth and stored credentials in Azure Key Vault, push a sample .NET image using the provided deployment script and YAML, and run it on ACI and AKS with Container Insights enabled. Shows Azure Policy definitions that deny privileged containers and automated remediation, plus scans and runtime alerts from Microsoft Defender for Cloud. Demo scripts live on GitHub and a pricing warning for Defender appears.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 1:29Containers and security
3. 7:56Securing Azure Container Registry
4. 12:04Secure Azure Container Instances
5. 15:19Azure Policy for AKS security
6. 21:01Demo: AKS with Azure AD
7. 28:22Monitoring with Azure Monitor
8. 37:16Defender for Cloud containers
9. 45:50Key takeaways

" related talks

• 48mPentesting Azure Container ServicesSergey Chubarov · Global Azure Austria 2021
• 52mPentesting Azure Container ServicesSergey Chubarov · Global Azure Virtual 2021
• 50mBest Practices for Securing CI/CD PipelinesVictoria Almazova · NDC London 2020
• 23mContainer code with confidential containers on AzureP. Khandavilli, A. Gowda · OC3 2023
• 59mPentesting Azure Container ServicesSergey Chubarov · NDC Security 2024
• 43mSecuring container deployments on Azure Kubernetes Service with open-source toolsToddy Mladenov, Nannette Sperling, Joshua Duffney, Aaron Wislang · Microsoft Build 2023
• 50mBest practices for securing CI/CD pipelineVictoria Almazova · NDC Oslo 2019
• 46mSecuring the Containers’ Supply Chain for Azure Kubernetes ServiceToddy Mladenov, Leo Wang, Alex Feng, Payal Mahesh, Johnson Shi · Microsoft Build 2024