Название: Azure Security (MEAP v10)
Автор: Bojan Magusic
Издательство: Manning Publications
Год: 2023
Страниц: 458
Язык: английский
Формат: pdf, epub
Размер: 22.4 MB

Secure your Azure applications the right way with the expert DevSecOps techniques you'll learn in this essential handbook.

In Azure Security you’ll learn vital security skills, including how to:

Configure Conditional Access policies to implement secure access
Implement Azure Web Application Firewall (WAF) on Application Gateway and Azure Front Door
Deploy Azure Firewall Premium to monitor network activities for malicious activity
Enable Microsoft Defender for Cloud to continuously assess your workloads for misconfiguration
Use Microsoft Sentinel to create analytics rules to detect threats and suspicious activity
Set up Azure Policy to ensure that resource states and deployment is compliant with your business rules

As a Program Manager at Microsoft, Bojan Magusic has helped numerous Fortune 500 companies improve their security posture in Azure. Now, in Azure Security he brings his experience from the cyber security frontline to ensure your Azure cloud-based systems are safe and secure. Correctly set up out-of-the-box Azure services to protect your web apps against both common and sophisticated threats, learn to continuously assess your systems for vulnerabilities, and discover cutting-edge operations for security hygiene, monitoring, and DevSecOps.

about the technology
Attacks against cloud-based applications are increasingly common and sophisticated. It’s vital for any developer or resource owner to understand how to properly configure their Azure cloud environments and establish reliable security best practices. The Azure platform comes with dozens of built-in security tools to help keep your systems safe. This book will teach you exactly how to set them up for maximum effectiveness.

Security is one of the greatest unsolved problems of our time. This complex problem set spans digital, physical, businesses, and individuals. Digital services have become an integral part of our lives in finance, health, transportation, our jobs, and even how we connect with each other. With all this, however, we’re outstripping our ability to provide security. If you think of the word security, by its very definition means free of threats or danger. But the more I think about it, isn’t the reality such that businesses are under constant threat? This concern is further highlighted by news headlines you can see daily about ransomware attacks, fraud, theft, public exposure of private data, espionage, and even attacks against physical infrastructure.

The question then becomes, how do you secure your Azure environments against common cloud security issues and threats against your cloud resources? In order to make progress on this issue, you can leverage a set of native security services that are available in Azure, most commonly referred to as Azure security. The Azure security services this book teaches you are the following:

- Azure Active Directory
- Azure DDoS Protection Standard
- Azure Firewall Standard
- Azure Firewall Premium
- Azure Web Application Firewall
- Microsoft Sentinel
- Microsoft Defender for Cloud
- Microsoft Defender for DevOps
- Azure Monitor
- Azure Key Vault
- Azure Policy

You learn more about these services in the following chapters. They can be used to secure Azure environments big and small, consisting out of a variety of different resources types. The overarching goal of Azure security is to help you secure your digital estate running on Azure, while at the same time minimizing the likelihood of security breaches – like the ones you read about in the news. I encourage you to consider what else you need to secure on top of these services, as there are plenty of other misconfigurations that can happen, like lack of encryption. Azure security fundamentally revolves around people, processes, and technologies.

about the book
Azure Security is a practical guide to the native security services of Microsoft Azure. You’ll learn how to use Azure tools to improve your systems security and get an insider’s perspective on establishing a DevSecOps program using the capabilities of Microsoft Defender for Cloud. Insightful analogies and hands-on examples help demystify tricky security concepts, while clever exercises help reinforce what you’ve learned.