Using the Secure DevOps Kit for Azure (AzSK) and Azure Pipelines you can easily run security verification tests on the Azure Resources your application is deployed on to make sure the resources are compliant with the security controls.

Secure DevOps Kit for Azure (AzSK) includes an Azure Resource Template (ARM) checker that you can easily integrate with Azure Pipelines to analyze your ARM templates for security improvements.

Secure DevOps Kit for Azure is an interesting toolkit that originated within Microsoft and now Open Source for the general public to use in their project to maintain security controls across different stages of development.