Azure Cloud Security for Absolute Beginners : Enabling Cloud Infrastructure Security with Multi-Level Security Options

Implement cloud security with Azure security tools, configurations and policies that address the needs of businesses and governments alike. This book introduces you to the most important security solutions available in Azure and provides you with step-by-step guidance to effectively set up security and deploy an application on top of Azure platform services, as well as on top of Azure infrastructure. Author Pushpa Herath begins by teaching you the fundamentals of Azure security. An easy to follow exploration of management groups, subscriptions, management locks and Azure policies further elaborate the concepts underlying Azure cloud security. Next, you will learn about Azure Active Directory (AAD) and the utilization of AAD in application and infrastructure security. Essential aspects of maintaining secure application keys and certificates are further explained in the context of Azure Key Vault. New application security implementations such as Azure configurations and Azure Defender for Azure storage are discussed, as are key platform security factors. Network security groups, gateways, load balancers, virtual networks and firewall configurations are all demonstrated in detail. Finally, you’ll learn how to create a much more secure environment through Azure App Service Environment in the context of securing infrastructure. If you want to learn the basics of securing Azure, Azure Cloud Security for Absolute Beginners is for you. After reading the book, you will be able to begin implementing secure cloud solutions with Microsoft Azure. What Will You Learn Get up and running quickly securing Azure Master the basic language of Azure security Understand the security features available in Azure cloud Configure and maintain Azure cloud security features Secure Azure PaaS Services Learn identity and access management options in Azure Cloud Who Is This Book For Cloud engineers, DevOps engineers, software developers and architects who are asked to manage or are involved in the Azure infrastructure management but have not had all that much experience with security. Table of Contents About the Author About the Technical Reviewer Acknowledgments Introduction Chapter 1: Understanding the Importance of Data/Application Security Lesson 1.1: Introduction to Security Lesson 1.2: Introduction to Azure Security Fundamentals Summary Chapter 2: Overview of Basic Azure Security Components Lesson 2.1: Introduction to Azure Management Groups and Subscriptions Lesson 2.2: Azure Management Locks Lesson 2.3: Introduction to Azure Policies Summary Chapter 3: Introduction to Azure Active Directory Lesson 3.1: Adding Users and Groups to the AD Lesson 3.2: Managing External Identities Business to Business (B2B) Business to consumer (B2C) Lesson 3.3: Enabling Multifactor Authentications Lesson 3.4: Roles and Administrative Units in Azure AD Lesson 3.5: Managing Applications Managing Enterprise Applications Azure AD App Registration Lesson 3.6: Introduction to AD Devices Azure AD Registered versus Azure AD-Joined Devices Lesson 3.7: Adding Custom Domains Summary Chapter 4: Working with Azure Key Vault Lesson 4.1: Setting Up Key Vault Lesson 4.2: Key Vault Access Control Lesson 4.3: Using Key Vault to Save Keys Lesson 4.4: Using Key Vault to Secure Secrets Lesson 4.5: Using Key Vault to Keep Certificates Lesson 4.6: Key Vault Access Policies Lesson 4.7: Key Vault Networking and Security Summary Chapter 5: Ensuring Azure Application Security Lesson 5.1: Keeping Configurations in a Central Location Using Azure App Configuration Lesson 5.2: Authentication and Authorization in Azure App Service App Service with Azure AD Login Other Identity Providers Authentication Flows Lesson 5.3: Securing Application with Web Application Firewall in Azure Lesson 5.4: Application Security Group Summary Chapter 6: Ensuring Data Security with Azure Storage Lesson 6.1: Setting Up Azure Storage Lesson 6.2: Azure Storage Encryption Lesson 6.3: Azure Defender for Azure Storage Summary Chapter 7: Ensuring Security Using Azure Virtual Networks Lesson 7.1: Azure Virtual Networks and Subnets Lesson 7.2: Network Security Group Lesson 7.3: Azure VPN Gateways Lesson 7.4: Azure Load Balancer Summary Chapter 8: Azure Virtual Machine Security Lesson 8.1: Azure Security Center for VM Protection Security Policy and Compliance Lesson 8.2: Availability for Azure VMs Availability Set Availability Zones Virtual Machine Scale Sets Lesson 8.3: Azure Bastion Summary Chapter 9: Securing Resources with Azure Firewall Lesson 9.1: Setting Up Azure Firewall Lesson 9.2: Azure Firewall Policies Rule Collection Rule Collection Group Threat Intelligence Lesson 9.3: Azure Firewall Manager Summary Chapter 10: App Service Environments Lesson 10.1: Setting Up Azure App Service Environment Lesson 10.2: Creating Apps in App Service Environment Lesson 10.3: Deploying Apps in App Service Environment Summary Index "Implement cloud security with Azure security tools, configurations and policies that address the needs of businesses and governments alike. This book introduces you to the most important security solutions available in Azure and provides you with step-by-step guidance to effectively set up security and deploy an application on top of Azure platform services, as well as on top of Azure infrastructure. Author Pushpa Herath begins by teaching you the fundamentals of Azure security. An easy to follow exploration of management groups, subscriptions, management locks and Azure policies further elaborate the concepts underlying Azure cloud security. Next, you will learn about Azure Active Directory (AAD) and the utilization of AAD in application and infrastructure security. Essential aspects of maintaining secure application keys and certificates are further explained in the context of Azure Key Vault. New application security implementations such as Azure configurations and Azure Defender for Azure storage are discussed, as are key platform security factors. Network security groups, gateways, load balancers, virtual networks and firewall configurations are all demonstrated in detail. Finally, you'll learn how to create a much more secure environment through Azure App Service Environment in the context of securing infrastructure. If you want to learn the basics of securing Azure, Azure Cloud Security for Absolute Beginners is for you. After reading the book, you will be able to begin implementing secure cloud solutions with Microsoft Azure. You will: Get up and running quickly securing Azure; Master the basic language of Azure security, Understand the security features available in Azure cloud; Configure and maintain Azure cloud security features; Secure Azure PaaS Services; Learn identity and access management options in Azure Cloud" --Page 4 of cover