Cloud Security
Azure Security
Securing subscriptions, identities and workloads on Microsoft Azure.
- 6 notes
- 52 minutes of reading
- Microsoft Entra ID: identities, Conditional Access, MFA and identity protectionAn introduction to Microsoft Entra ID (formerly Azure AD): tenants and identity types, MFA methods, Conditional Access policies, risk-based identity protection and privileged access. 9 min · Intermediate
- Azure RBAC and governance: management groups, subscriptions and Azure PolicyHow Azure organises resources into management groups, subscriptions and resource groups, how role-based access control works, and how Azure Policy enforces standards. 9 min · Intermediate
- Azure network security: VNets, NSGs, Azure Firewall, private endpoints and BastionHow to secure Azure virtual networks with network security groups, Azure Firewall, user-defined routes, private endpoints, Azure Bastion and DDoS protection in a hub-and-spoke design. 9 min · Intermediate
- Microsoft Defender for Cloud: secure score, recommendations and workload protectionWhat Microsoft Defender for Cloud does: cloud security posture management, secure score and recommendations, Defender workload protection plans, alerts and multicloud coverage. 8 min · Intermediate
- Azure Key Vault: secrets, keys, certificates, access control and rotationHow Azure Key Vault stores secrets, keys and certificates, how to control access with Azure RBAC and managed identities, and how to protect and rotate what it holds. 8 min · Intermediate
- Azure Monitor, Log Analytics and Microsoft Sentinel conceptsHow Azure Monitor collects metrics and logs, what a Log Analytics workspace is, how KQL queries work, and how Microsoft Sentinel turns those logs into detections, incidents and automated responses. 9 min · Intermediate