Getting Started with Secure Devops Kit for Azure

AzSK-Install.ps1

Install-Module AzSK -Scope CurrentUser -AllowClobber -Force

AzSK-Setup.ps1

Param
(
    [Parameter(Mandatory=$true)]
    [string]$SubscriptionName,
    [string]$Location = "East US"
)
$RgName = "AzSK-GettingStarted-RG"

#The script requires Powershell 5 or higher.
Import-Module AzSK

# Log in to Azure
Login-AzureRMAccount
Set-AzureRmContext -Subscription $SubscriptionName

#Create a resource group if it does not exist
Get-AzureRmResourceGroup -Name $RgName -ErrorAction SilentlyContinue -ErrorVariable rgError
if ($rgError)
{
   New-AzureRmResourceGroup -Name $RgName -Location $Location
}

#Create a Log analytics Workspace if not exists
$LogAnalyticsWorkspace = Get-AzureRmOperationalInsightsWorkspace -ResourceGroupName $RgName | Select -First 1

if ($LogAnalyticsWorkspace.Count -eq 0)
{
    $WorkspaceName = "AZSK-log-analytics-" + (Get-Random -Maximum 99999)
    $LogAnalyticsWorkspace = New-AzureRmOperationalInsightsWorkspace `
                                -ResourceGroupName $RgName `
                                -Name $WorkspaceName `
                                -Location $Location `
                                -Sku "standalone"                          
}

#Get Subscription Id
$SubscriptionId = Get-AzureRMSubscription `
                    | Where-Object Name -eq $SubscriptionName `
                    | Select-Object Id

# Setup AzSK View in Log Anlaytics
Install-AzSKOMSSolution -OMSSubscriptionId $SubscriptionId.Id `
                        -OMSResourceGroup $RgName `
                        -OMSWorkspaceId  $LogAnalyticsWorkspace.CustomerId `
                        -DoNotOpenOutputFolder


$LogAnalyticsKeys = Get-AzureRmOperationalInsightsWorkspaceSharedKeys -ResourceGroupName $RgName -Name $LogAnalyticsWorkspace.Name
Set-AzSKOMSSettings -OMSWorkspaceID $LogAnalyticsWorkspace.CustomerId -OMSSharedKey $LogAnalyticsKeys.PrimarySharedKey

AzSK-SubscriptionScan.ps1

Param
(
    [Parameter(Mandatory=$true)]
    [string]$SubscriptionName
)
Import-Module AzSK
Login-AzureRMAccount
# Run this in a new Powershell Window after running previous script

$SubscriptionId = Get-AzureRMSubscription `
                    | Where-Object Name -eq $SubscriptionName `
                    | Select-Object Id

Set-AzSKUserPreference -OutputFolderPath (Get-Location).Path

Get-AzSKSubscriptionSecurityStatus -SubscriptionId $SubscriptionId.Id -GeneratePDF Portrait -GenerateFixScript 
Get-AzSKAzureServicesSecurityStatus -SubscriptionId $SubscriptionId.Id -GeneratePDF Portrait -GenerateFixScript
Set-AzSKUserPreference -ResetOutputFolderPath