Название: Azure Security For Critical Workloads: Implementing Modern Security Controls for Authentication, Authorization and Auditing
Автор: Sagar Lad
Издательство: Apress
Год: 2023
Страниц: 221
Язык: английский
Формат: pdf, epub
Размер: 25.0 MB

This is a crisp, practical, and hands-on guide to moving mission-critical workloads to Azure. This book focuses on the process and technology aspects of Azure security coupled with pattern-oriented, real-world examples. You will implement modernized security controls, catering to the needs of authentication, authorization, and auditing, thereby protecting the confidentiality and integrity of your infrastructure, applications, and data.
The book starts with an introduction to the various dimensions of cloud security, including pattern-based security and Azure's defense security architecture.

You will then move on to identity and access management with Azure Active Directory. Here, you will learn the AAD security model, application proxy, and explore AAD B2B and B2C for external partners. Network security patterns and infrastructure security patterns are discussed next, followed by application and data security patterns. Finally, you will learn how to set up security policies and work with Azure Monitor and Azure Sentinel, and to create leadership support and training for a rigorous security culture.

Over the course of the book, you will learn about the following:
1. Dimensions of cloud security and the need for having clear demarcations of security boundaries to implement Azure's defense-in-depth security architecture.
2. The intricacies of Identity and Access Management (IAM) with Azure Active Directory and deeper insights into authentication protocols, Azure AD Application Proxy, and single sign-on with practical examples.
3. Design patterns regarding the network, infrastructure, and software aspects, including the richness of security design patterns. Includes modern design concepts like software-defined networks, network segmentation, Azure Tenant Security, Container Security, application and data access, data classification, and data encryption patterns.
4. Security processes like threat modeling, security testing, and key management for complete mediation and securing the infrastructure and application deployments.
5. Automated security monitoring with advanced observability, with practical insights into how this can be implemented with Azure Monitor and Azure Sentinel.

After completing this book, you will understand and be able to implement reusable patterns for mission critical workloads, standardizing and expediting the move of those workloads to Azure.

What Will You Learn
Understand security boundaries required to implement Azure's defense-in-depth security architecture
Understand Azure Active Directory security model
Master design patterns relating to network, infrastructure, and software
Automate security monitoring with advanced observability and gain practical insights on how this can be implemented with Azure Monitor and Azure Sentinel

Who Is This Book For
This book is intended for developers and IT consultants/architects who want practical insights into moving mission-critical workloads to Azure from technology and process aspects.