what is the difference in terms of usage between ARM testing toolkit and ARM template checker(part of AzSK). I want to integrate step for ARM security scanner in pipeline. Which one will be the right one ?

Question

what is the difference in terms of usage between ARM testing toolkit and ARM template checker(part of AzSK). I want to integrate ARM secuirty in pipeline. which should be integrated.

Answer 1

@JR , thank you for reaching out to us. DevOps Kit (AzSK) is being sunset by end of FY21. More details can be found here. It says:

After close to 5 years of active development, the PowerShell/Automation-based "Secure DevOps Kit for Azure (AzSK)" is being phased out through FY21. We are transitioning to a more scalable and robust solution called Azure Tenant Security scanner (AzTS) which is based on Azure Functions and a central scan model where scans are performed via a managed identity with Reader access to subscriptions configured at management group level.

At the Core Services Engineering and Operations (CSEO) division, we plan to phase out AzSK-based Continuous Assurance completely during Q3-FY21 and, furthermore, eliminate our other dependencies on AzSK (ARM Checker, DevOps Kit CICD Extensions, etc.) during Q4-FY21. We will support important bug fixes in AzSK till end of FY21. However, new security controls and features will be added only to AzTS going forward.

However, note that AzTS is in preview right now. Hence, a better option for now will be to use ARM template test toolkit. You can integrate them using following two extensions in ADO pipelines:

• Run ARM TTK Tests
• ARM Template Tester

It runs test cases for ARM templates, test cases for parameter files, test cases for createUiDefinition.json and test cases for all files which should be good to go for your ARM templates.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" and upvote if the information helped you. This will help us and others in the community as well.

Answer 2

thanks for the response. it helps !