Название: Azure Security (Final Release)
Автор: Bojan Magušić
Издательство: Manning Publications
Год: 2024
Страниц: 336
Язык: английский
Формат: epub
Размер: 15.1 MB

Secure your Azure applications the right way with the expert DevSecOps techniques you'll learn in this essential handbook.

In Azure Security you’ll learn vital security skills, including how to:
Configure Conditional Access policies to implement secure access
Implement Azure Web Application Firewall (WAF) on Application Gateway and Azure Front Door
Deploy Azure Firewall Premium to monitor network activities for malicious activity
Enable Microsoft Defender for Cloud to continuously assess your workloads for misconfiguration
Use Microsoft Sentinel to create analytics rules to detect threats and suspicious activity
Set up Azure Policy to ensure that resource states and deployment is compliant with your business rules

As a Program Manager at Microsoft, Bojan Magusic has helped numerous Fortune 500 companies improve their security posture in Azure. Now, in Azure Security he brings his experience from the cyber security frontline to ensure your Azure cloud-based systems are safe and secure. Correctly set up out-of-the-box Azure services to protect your web apps against both common and sophisticated threats, learn to continuously assess your systems for vulnerabilities, and discover cutting-edge operations for security hygiene, monitoring, and DevSecOps.

about the technology:
Attacks against cloud-based applications are increasingly common and sophisticated. It’s vital for any developer or resource owner to understand how to properly configure their Azure cloud environments and establish reliable security best practices. The Azure platform comes with dozens of built-in security tools to help keep your systems safe. This book will teach you exactly how to set them up for maximum effectiveness.

about the book:
Azure Security is a practical guide to the native security services of Microsoft Azure. You’ll learn how to use Azure tools to improve your systems security and get an insider’s perspective on establishing a DevSecOps program using the capabilities of Microsoft Defender for Cloud. Insightful analogies and hands-on examples help demystify tricky security concepts, while clever exercises help reinforce what you’ve learned.

This book is written for cyber-defenders of businesses—cybersecurity professionals of wildly different backgrounds and levels of experience who are passionate about protecting their environments and demonstrate tenacity in the face of what looks like chaos every single day. No two days are the same because the landscape in this space changes so quickly. The topics covered in this book empower you to understand how to use native Azure security services to meaningfully and effectively secure applications and resources in the real world.

Security engineers with up to two years of experience working with the Azure platform are the people who are going to benefit the most from reading this book, as they will recognize themselves in many of the scenarios. Beginner-level experience using the Azure platform (or any other public cloud platform) will help greatly. You certainly don’t need to be familiar with (or an expert in) all of the different public cloud services to get the most out of this book. However, if you have a basic understanding of how the Azure platform works, what an Azure subscription is, and what a tenant is, you’ll be off to the races.

Maybe your primary focus is not securing applications and systems but rather developing or deploying applications. If so, this book is for you too. You’ll be able to gain a much deeper understanding of what’s required to secure applications you have developed. This knowledge helps maintain business continuity and prevents any disruptions due to poor security practices so your users can use the application as you intended.

If you are coming from an on-premises world and are moving workloads to the public cloud, this book is for you too. If you start with chapter 1, you will learn about core concepts around cloud security, the challenges that businesses are facing, and how they are applicable to securing resources in Azure. You can then proceed through the other chapters, which show you how to use various Azure security services to harden Azure resources and apply security best practices to them.

Even if you’re an experienced Azure security engineer, this book is still for you. The later chapters might contain some insights and new capabilities you haven’t seen before. Chapters 7 and 8 about security monitoring and operations are worth a look. Or you can explore chapter 10 to learn how to shift even further left and manage security as code.