Build a Defense in Depth Security Posture in Azure
summary
Explains how to harden identity, monitoring/patching, and data protection in Azure by enabling Azure Security Center standard tier, turning on the monitoring agent and Azure Monitor, and assigning Azure Policy initiatives for compliance. Notes storage accounts get encryption at rest by default, HTTPS-only is an easy toggle, and enabling MFA adds ~10 secure-score points. Calls out eight virtual machines missing disk encryption, recommends Disk Encryption and Application Gateway WAF or Azure Sentinel as a SIEM to close gaps.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:20Internal and External Threats
- 2:47Building a Security Program
- 3:28Layers of Security
- 6:04Shared Responsibility
- 6:22Organizational Responsibility
- 8:08Azure Policy
- 10:56Security Center Tools
- 11:08Demo
- 18:43Monitoring and Policy
- 22:41Summary
related talks
49mTop 5 ways to secure Azure resources
01h 00mEverything You Always Wanted to Know About Azure Security But Were Afraid to Ask
56mEnter the Matrix: Securing Azure’s Assets
39mTop 13 best security practices for Azure
19mEnhancing Security in Azure Cosmos DB: Best Practices
53mTop 18 Azure security fails and how to avoid them
54mCloud & Hybrid Workload Protection using Azure Defender
43mDefending the Cloud: Securing Your Microsoft Data Workloads