azsk / DevOpsKit-docs

MIT License
496 stars 208 forks source link

Alternative? #406

Open Bazul99 opened 3 years ago

Bazul99 commented 3 years ago

I see that AzSK is being deprecated but am I missing something or is there really no plans or pointer to a next generation, replacement or alternative suggestion for it? Maybe it's Security Center and is considered "built in"?

Any suggestions for CICD options to catch things before the environments are stood up?

nconder commented 3 years ago

I see that AzSK is being deprecated but am I missing something or is there really no plans or pointer to a next generation, replacement or alternative suggestion for it? Maybe it's Security Center and is considered "built in"?

Any suggestions for CICD options to catch things before the environments are stood up?

This is the next edition Azure Tenant Security Solution (AzTS) [In Preview]

AzTS is activity being developed to replace AzSK. Right now the policies are pulled from ASC and Azure Policy until custom policy methods have been integrated in the months to come.

I will add the architecture is very nice and the deployment and scanning speed is easy and fast. I cant wait for custom policy and ADO /CICD integrations to be released. Oh and the PowerBi reporting is a nice touch too!

brwilkinson commented 2 years ago

are there any recommended cleanup/decommission instructions for azSK ?

brwilkinson commented 2 years ago

okay found it: https://github.com/azsk/DevOpsKit-docs/blob/master/14-Transition-and-Cleanup/Readme.md#remove-azsk-deployed-resources