article thumbnail

Securing Azure Service Bus

Xebia

Security should be considered from the initial stages of designing a product rather than as an afterthought. Security requirements may vary depending on the use case; for instance, a banking solution would have different security needs compared to a solution for a local bakery. By default, Azure Service Bus supports TLS 1.2

Azure 162
article thumbnail

Azure Container Apps – Simplifying Container Deployment Without the Kubernetes Complexity

Xebia

In August 2021, I was accepted to test and provide feedback on what was referred to as ‘Azure Worker Apps’, another Azure service Microsoft was developing to run containers. Fast forward, that service is now known as Azure Container Apps. This is where Azure Web Apps for Containers comes into play.

Azure 130
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Publish Azure DevOps Extensions using Azure Workload Identity

Xebia

As you may know, I maintain several Azure DevOps Extensions. To publish them I use the Azure DevOps extension tasks. And to authenticate you must provide a Personal Access Token. If you need help configuring a basic CI/CD pipeline for an Azure DevOps Extension, check out the guidance on Microsoft Learn ). Learn more.

Azure 130
article thumbnail

Cybersecurity Snapshot: CISA Shines Light on Cloud Security and on Hybrid IAM Systems’ Integration

Tenable

Check out CISA’s latest best practices for protecting cloud environments, and for securely integrating on-prem and cloud IAM systems. So many benefits – and so many security challenges. Cybersecurity and Infrastructure Security Agency (CISA) published this week. And don’t miss the latest CIS Benchmarks. And much more!

article thumbnail

Cybersecurity Snapshot: CISA Says Midnight Blizzard Swiped U.S. Gov’t Emails During Microsoft Hack, Tells Fed Agencies To Take Immediate Action

Tenable

Plus, a new survey shows cybersecurity pros are guardedly optimistic about AI. And the NSA is sharing best practices for data security. Cybersecurity and Infrastructure Security Agency (CISA) in its Emergency Directive 24-02 , sent to federal civilian agencies last week and made public this week. And much more!

article thumbnail

All the Small Things: Azure CLI Leakage and Problematic Usage Patterns

Prisma Clud

At the beginning of July 2023, I took a stroll around the azure/login GitHub Action repository. The issue was titled “ SECURITY: Azure/login in some cases leaks Azure Application Variables to the GitHub build log ”. The findings' severities ranged from informative to critical. The Azure CLI: Bug or Feature?

Azure 143
article thumbnail

AWS ClientVPN SAML-based authentication via Tools4ever HelloID

Xebia

Extensive documentation exists for implementing SAML-based authentication for AWS Client VPN through IDPs like Okta and Azure AD, but if you or your customers happen to use a different IDP – documentation is hard to come by. Authorization rules are the first port of entry for any authenticated VPN user. 192.168.1.24/32),