Protect Your Data: Azure Networking Essentials for Developers
summary
A live demo builds an Azure VNet with two subnets, moves a Key Vault behind a private endpoint and links a private DNS zone so the original URL resolves to a 10.1.x.x address, then integrates an App Service via virtual network integration and disables the public Key Vault endpoint — the app fails initially but then succeeds once DNS and routing are correct. An NSG is applied to restrict outbound and an explicit allow from 10.1.2.0/24 to Key Vault 10.1.1.5:443 enforces least privilege and the setup works.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:13Virtual networks basics
- 10:38Private endpoints setup
- 23:02Demo moving resources
- 32:07Network security groups
- 49:51Recap and key takeaways
- 51:16Q&A
related talks
38mSecure Azure Resources using Azure Private Link
48mTaking the "Public" out of Public Clouds: Getting Started with Private Endpoints
21mSecure apps on Azure Spring Cloud with Managed Virtual Network
59mProtecting Encryption Keys with Azure Key Vault
47mSecuring Serverless Applications in Azure
45mA to Z Azure SQL Security Concepts
20mAzure Authentication With Vault
43mSecure Development