AzureFunBytes Reminder - Secretless Applications with @ChristosMatskas - 9/9/2021
Tags: infosec, security, azure, serverless
Published: 2021-09-08 14:11:16

AzureFunBytes is a weekly opportunity to learn more about the fundamentals and foundations that make up Azure. It's a chance for me to understand more about what people across the Azure organization do and how they do it. Every week we get together at 11 AM Pacific on [Microsoft LearnTV](https://cda.ms/226) and learn more about Azure.

When: September 9,  2021 11 AM Pacific / 2 PM Eastern
Where: [Microsoft LearnTV](https://cda.ms/226)

![AzureFunBytes animation](https://res.cloudinary.com/practicaldev/image/fetch/s--Z7BxBMz1--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_66%2Cw_880/https://dev-to-uploads.s3.amazonaws.com/uploads/articles/j2xzw2g664tj31jij13t.gif)

Security remains one of the driving forces in ensuring a great experience in the cloud.  By taking a "shift-left" approach to your Software Development Lifecycle, you can improve your security posture.  How you can implement your security tactics is represented can differ from application to application.  This week on AzureFunBytes we'll focus on "Secretless" application development and how to think about what kind of connections we make between our data sources and services to our application.  

Secretless application development strives to solve some important problems, like preventing your credentials from being leaked.  If you are seeing connection strings, usernames or passwords in log files, you're adding to your risk profile.  So rather than transmit clear text credentials to log into a database for your application, you can use [Azure Managed Identity](https://cda.ms/2z6) which is a service account managed by the [Azure Active Directory](https://cda.ms/2z7).

This week on the show I've once again reached out to Microsoft Senior Program Manager Christos Matskas for some help learning more about implementing a Secretless strategy in developing applications.  After reading this incredible blog titled "[Secretless Azure Functions dev with the new Azure Identity Libraries](https://cda.ms/2z2)" I knew he was the right person for the job. 

{% youtube f88R99eREb8 %}

*Christos Matskas is a software developer, dad, blogger, husband, speaker, and all-around geek. He currently works as a Program Manager for Microsoft Identity helping developers and teams leverage the power of the identity and cloud. Before joining Microsoft, he was a successful entrepreneur collaborating with companies such as MarkIT, Lockheed Martin and Barclays. He's been building software for over 16 years and he's a passionate Open Source advocate. He contributes regularly to numerous OSS projects and works closely with the developer community to make the space bigger and better.*

Here's our planned agenda:·     

*  What do we mean by Secretless?
* Why it's important to eliminate secrets from our application and deployment code
* How can we achieve 'secretless state' with Azure? 
* Demos

Join us for today's episode of AzureFunBytes when we welcome Christos Matskas to walk through secretless apps on Azure! You don't want to miss it.  We'll see you Thursday September 9 at 11 AM PT / 2 PM ET on [LearnTV](https://cda.ms/226).

------

Learn about Azure fundamentals with me!

Live stream is normally found on Twitch, YouTube, and [LearnTV](https://cda.ms/226) at 11 AM PT / 2 PM ET Thursday. You can also find the recordings here as well:

[AzureFunBytes on Twitch](https://twitch.tv/azurefunbytes)
[AzureFunBytes on YouTube](https://aka.ms/jaygordononyoutube)
[Azure DevOps YouTube Channel](https://www.youtube.com/channel/UC-ikyViYMM69joIAv7dlMsA)
[Follow AzureFunBytes on Twitter](https://twitter.com/azurefunbytes)

Useful Docs:

[Get $200 in free Azure Credit](https://cda.ms/219)
[Microsoft Learn: Introduction to Azure fundamentals](https://cda.ms/243)
[DevBlogs: Secretless Azure Functions dev with the new Azure Identity Libraries](https://cda.ms/2z2)
[What are managed identities for Azure resources?](https://cda.ms/2z4)
[What is Azure Active Directory?](https://cda.ms/2z7)
[Azure AD-managed identities for Azure resources documentation](https://cda.ms/2z6)
[Secretless Apps with the Microsoft Identity Platform](https://www.youtube.com/watch?v=TFBj8OHkewE)
[Introduction to Azure Functions](https://cda.ms/2z3)
[The 425 Show Blog](https://aka.ms/425Show/blog)
[The 425 Show Twitch](https://aka.ms/425Show)
[The 425 Show Website](https://aka.ms/425Show/web)
[Christos on TikTok](https://www.tiktok.com/@christosmatskas?)

{% youtube wq7pHTriWXE %}