I see it happening too often. A credential expires, goes unnoticed, and causes downtime. Granted, you should have DevOps processes in place to handle credential rotation, but if you don’t, the risk is significant. That’s why I created Sharp Cert Manager a few years ago as a simple tool to help monitor and notify about certificate expiration. It might not fix the problem for you, but it will nag you often enough that you will probably take action. ...
Container security is a critical aspect of modern application deployment. Vulnerable container images can expose your applications to serious security risks, making regular vulnerability assessment essential for maintaining a secure infrastructure. Microsoft Defender for Cloud provides powerful built-in capabilities to scan and assess vulnerabilities in container images stored in Azure Container Registry (ACR). This guide will walk you through the process of identifying vulnerabilities, understanding their impact, and automating the review process using Kusto queries. ...
Let’s face it, managing TLS certs is a pain (no pun intended). If you have only a few, it is manageable. A simple recurring calendar reminder to make sure you reissue or download and install the new cert will work. However, what happens when you have dozens? Also, what if the responsibility is shared accross different teams? As the saying goes “too many cooks spoil the broth”. While there are great cloud native solutions, like Azure Key Vault, many enterprise environments are not capable of using them. That is why I started a new open-source side-project and I think it can be useful to more people. ...