Creating Self-Hosted Azure DevOps Agents with Azure Container App Jobs and Managed Identity

Using container app jobs for self-hosted Azure DevOps agents allows for more control over what is running on your DevOps agents. Both VMSS and the newer managed DevOps pools give you the option to run agents on your own virtual network which is excellent for securing network traffic but if you also need to have control what is running on them then configuring the agents with docker in a container app job is a good option. You also have the added security of Defender for containers integration to ensure you can keep your images secure. ...

February 17, 2025 · 6 min · Craig Forshaw

Microsoft Defender for Cloud Regulatory Compliance

Regulatory compliance Azure has a feature in Microsoft Defender for Cloud called regulatory compliance that allows you to start getting your cloud compliance under control. Central to this feature is the Microsoft Cloud Security Benchmark. What is the Microsoft Cloud Security Benchmark? The MCSB for short, is a set of practices that form a track of the Cloud adoption framework for Azure from Microsoft. This has been traditionally a set of best practices and guidelines for cloud deployments but more recently it has been integrated into the Defender for Cloud portal to provide that bridge from the adoption framework to reporting on resources against best practices. ...

July 22, 2024 · 3 min · Craig Forshaw