Everything You Always Wanted to Know About Azure Security But Were Afraid to Ask
summary
Shows exactly which Azure controls to turn on and how: demos of creating custom RBAC roles with Azure CLI and JSON, using ARM templates and PowerShell to deploy secure resources, and storing secrets in Key Vault. Compares VHDs versus managed disks, points out Cosmos DB is open-by-default while Azure SQL enables a server firewall, and walks through enabling encryption, HTTPS, WAF/mod_security tuning and the actionable checklist in Azure Security Center so viewers can replicate fixes.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 1:29Cloud security matters today
- 3:41Cloud vs data center myths
- 6:15Azure security features out of the box
- 8:23Four security principles for Azure
- 9:27Access control shifts to identity
- 12:16Role-based access and least privilege
- 16:09Custom roles for granular access
- 21:15Authentication vulnerabilities in Azure AD
- 24:17Securing virtual machines
- 28:14Protecting storage accounts
- 30:46Database security in Azure SQL
- 36:08Web app security options
- 41:03Managing secrets with Key Vault
- 43:13Data encryption at rest
- 46:06Data protection in transit
- 48:34Application security beyond infrastructure
- 53:13Preventing data exposure
- 55:04Security scanning tools
- 57:34ModSecurity and HTTP headers
- 58:38Azure Security Center checklist
- 59:44Summary of security principles
- 1:00:07Q&A
related talks
45mA to Z Azure SQL Security Concepts
56mEnter the Matrix: Securing Azure’s Assets
19mEnhancing Security in Azure Cosmos DB: Best Practices
23mBuild a Defense in Depth Security Posture in Azure
43mSecure Development
49mHow Not to Smash Your Azure Security!
43mDefending the Cloud: Securing Your Microsoft Data Workloads
55mWhat you need to know about security for cloud DevOps