Azure marketplace images security assurance

[Don_Paterson]

How can customers check the image before and after deployment and what has been put in place to guarentee that a market place image has not been injected with malicious code?

A downloadable iso file normally has a hash. What about the marketplace templates/images?

[G_W_Albrecht]

Microsoft has a lot of web pages with Azure Security information covering every aspect, so i would start here: https://azure.microsoft.com/en-us/explore/security/

[Don_Paterson]

Will that provide an answer to my questions specifically?

[G_W_Albrecht]

Why should that not do this ? Microsoft is responsible for the safety of Azure marketplace images, or have you proof that this is regulated differently ?

[Don_Paterson]

That Azure security page is more about marketing and might make one wonder why any other security solution might be required if Azure has so much resource behind cyber security...

My question is about security checks before and immediately after a deployment of a Check Point VM from the marketplace. It is a valid question that a customer can (and did) ask.

It is a technical question and specifically about the technical options that a Check Point customer may or may not have to validate an image/marketplace template deployment, in the same way as we check downloaded files integrity with a SHA1 or SHA256 checksum.

[PhoneBoy]

I understand the "trust but verify" mindset behind this question 🙂
Unfortunately, this is a question that can only truly be answered by the cloud vendor (Microsoft in this case).

[PhoneBoy]

At least in Amazon, AMIs are created from a known good disk image prepared by the vendor. 
Once they're published, they cannot be updated without publishing a new AMI.
Unless the image included the malicious content "from the factory" the only way it could be infected would be post-deployment.