Azure Cloud Security for Absolute Beginners: Enabling Cloud Infrastructure Security with Multi-Level Security Options

✍ Scribed by Pushpa Herath

• Publisher: Apress
• Year: 2021
• Tongue: English
• Leaves: 242
• Edition: 1
• Category: Library

✦ Synopsis

Implement cloud security with Azure security tools, configurations and policies that address the needs of businesses and governments alike. This book introduces you to the most important security solutions available in Azure and provides you with step-by-step guidance to effectively set up security and deploy an application on top of Azure platform services, as well as on top of Azure infrastructure.

Author Pushpa Herath begins by teaching you the fundamentals of Azure security. An easy to follow exploration of management groups, subscriptions, management locks and Azure policies further elaborate the concepts underlying Azure cloud security. Next, you will learn about Azure Active Directory (AAD) and the utilization of AAD in application and infrastructure security. Essential aspects of maintaining secure application keys and certificates are further explained in the context of Azure Key Vault. New application security implementations such as Azure configurations and Azure Defender for Azure storage are discussed, as are key platform security factors. Network security groups, gateways, load balancers, virtual networks and firewall configurations are all demonstrated in detail. Finally, you’ll learn how to create a much more secure environment through Azure App Service Environment in the context of securing infrastructure. If you want to learn the basics of securing Azure, Azure Cloud Security for Absolute Beginners is for you.

After reading the book, you will be able to begin implementing secure cloud solutions with Microsoft Azure.

What Will You Learn

• Get up and running quickly securing Azure
• Master the basic language of Azure security
• Understand the security features available in Azure cloud
• Configure and maintain Azure cloud security features
• Secure Azure PaaS Services
• Learn identity and access management options in Azure Cloud

Who Is This Book For

Cloud engineers, DevOps engineers, software developers and architects who are asked to manage or are involved in the Azure infrastructure management but have not had all that much experience with security.

✦ Table of Contents

Table of Contents
About the Author
About the Technical Reviewer
Acknowledgments
Introduction
Chapter 1: Understanding the  Importance of  Data/Application Security
Lesson 1.1: Introduction to Security
Lesson 1.2: Introduction to Azure Security Fundamentals
Summary
Chapter 2: Overview of Basic Azure Security Components
Lesson 2.1: Introduction to Azure Management Groups and Subscriptions
Lesson 2.2: Azure Management Locks
Lesson 2.3: Introduction to Azure Policies
Summary
Chapter 3: Introduction to Azure Active Directory
Lesson 3.1: Adding Users and Groups to the AD
Lesson 3.2: Managing External Identities
Business to Business (B2B)
Business to consumer (B2C)
Lesson 3.3: Enabling Multifactor Authentications
Lesson 3.4: Roles and Administrative Units in Azure AD
Lesson 3.5: Managing Applications
Managing Enterprise Applications
Azure AD App Registration
Lesson 3.6: Introduction to AD Devices
Azure AD Registered versus Azure AD-Joined Devices
Lesson 3.7: Adding Custom Domains
Summary
Chapter 4: Working with Azure Key Vault
Lesson 4.1: Setting Up Key Vault
Lesson 4.2: Key Vault Access Control
Lesson 4.3: Using Key Vault to Save Keys
Lesson 4.4: Using Key Vault to  Secure Secrets
Lesson 4.5: Using Key Vault to Keep Certificates
Lesson 4.6: Key Vault Access Policies
Lesson 4.7: Key Vault Networking and Security
Summary
Chapter 5: Ensuring Azure Application Security
Lesson 5.1: Keeping Configurations in a Central Location Using Azure App Configuration
Lesson 5.2: Authentication and  Authorization in Azure App Service
App Service with Azure AD Login
Other Identity Providers
Authentication Flows
Lesson 5.3: Securing Application with Web Application Firewall in Azure
Lesson 5.4: Application Security Group
Summary
Chapter 6: Ensuring Data Security with Azure Storage
Lesson 6.1: Setting Up Azure Storage
Lesson 6.2: Azure Storage Encryption
Lesson 6.3: Azure Defender for  Azure Storage
Summary
Chapter 7: Ensuring Security Using Azure Virtual Networks
Lesson 7.1: Azure Virtual Networks and Subnets
Lesson 7.2: Network Security Group
Lesson 7.3: Azure VPN Gateways
Lesson 7.4: Azure Load Balancer
Summary
Chapter 8: Azure Virtual Machine Security
Lesson 8.1: Azure Security Center for VM Protection
Security Policy and Compliance
Lesson 8.2: Availability for Azure VMs
Availability Set
Availability Zones
Virtual Machine Scale Sets
Lesson 8.3: Azure Bastion
Summary
Chapter 9: Securing Resources with Azure Firewall
Lesson 9.1: Setting Up Azure Firewall
Lesson 9.2: Azure Firewall Policies
Rule Collection
Rule Collection Group
Threat Intelligence
Lesson 9.3: Azure Firewall Manager
Summary
Chapter 10: App Service Environments
Lesson 10.1: Setting Up Azure App Service Environment
Lesson 10.2: Creating Apps in App Service Environment
Lesson 10.3: Deploying Apps in App Service Environment
Summary
Index