Azure tool to show consistent image configuration.

[nicholab]

If we roll out a hardened image of windows how can I show that someone cant come and open up a bunch of ports without us knowing, or reconfig to give people access.

 

Am I able to do this with Azure security tools/Sentinel?

 

I think this is about lateral movement as we are behind NSG's and a firewall.

[dmj]

Automate the image build process so that it runs daily with all the latest fixes, if someone updates the image it will get overwritten with the latest.

Make sure you run smoke tests on the build image.

 

I don't think azure security tools will do this, you'd probably want azure pipelines, github actions, jenkins et al.

[steve]

Have a look at Azure Automation State Configuration: https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview

 

Using PowerShell you can define and monitor VMs configuration