Securing Azure with Code: Maester, IaC, and Open Source Security Tools

In this meetup, we'll explore how Infrastructure as Code combined with automated security testing can transform your Azure security posture from reactive to proactive. Discover Maester, a powerful open-source framework that enables continuous security validation of your Azure and Microsoft 365 environments using Pester tests. Learn how to integrate security checks directly into your CI/CD pipelines, ensuring compliance with CIS Benchmarks, Microsoft Secure Score recommendations, and your own custom security policies—all before deployment.

We'll demonstrate a practical security-first workflow that combines:

• Bicep for consistent, auditable infrastructure deployment
• Maester for automated security posture testing and compliance validation
• PSRule for Azure for pre-deployment policy enforcement
• Other open-source GitHub repos for security visibility and reporting

You'll leave with actionable patterns to implement "security as code" in your organization, reduce manual audit overhead, and catch misconfigurations before they reach production.

Doors Open 5.00pm
Presentation Starts at 6.00pm
Networking 7.00pm
Doors Close 7.30pm