Summary
In this chapter, we covered several checks that should be performed before releasing an application to production. This includes ensuring that release artifacts are built from protected branches, implementing a code review process, selecting a secure artifact source, implementing a process to validate artifact integrity, managing secrets securely in the release phase, implementing IaC security scans, and validating and enforcing runtime security with release gates. We also covered runtime verification tools in place including DAST.
In the next chapter, we will look at continuous security monitoring on Azure. Now that we have deployed the resources, we need to make sure they remain secure. Let’s dive in.
