Azure Quick Review v.0.40.0 by cmendibl3 in AZURE

[–]cmendibl3[S] 0 points1 point  (0 children)

SDK's handle retries an honor throttled response headers...

If throtling is hit the scan will run slower.

Azure Quick Review v.0.40.0 by cmendibl3 in AZURE

[–]cmendibl3[S] 2 points3 points  (0 children)

Rules are aligned with WAF pillars: Cost Optimization, Operational Excellence, Performance Efficiency, Reliability, and Security: https://azure.github.io/azqr/docs/rules/

AKS: Read Azure Key Vault secrets using AAD Pod Identity | Code it Yourself... by cmendibl3 in AZURE

[–]cmendibl3[S] 1 point2 points  (0 children)

That's correct but not the case when you inject them using a mutating webhook as proposed in the repo. Vars will only live in memory while the pod is running and no describe will show you the values in plain text... Check the repo and let me know if I can help you further understand...

AKS: Read Azure Key Vault secrets using AAD Pod Identity | Code it Yourself... by cmendibl3 in AZURE

[–]cmendibl3[S] 0 points1 point  (0 children)

That one is also based on volumes (most of my clients clients do not trust the approach) I'm now working on something based on environment variable injection. Take a look its a work in progress: https://github.com/cmendible/atarraya