Azure Cloud Security for Absolute Beginners

Implement cloud security with Azure security tools, configurations and policies that address the needs of businesses and governments alike. This book introduces you to the most important security solutions available in Azure and provides you with step-by-step guidance to effectively set up security and deploy an application on top of Azure platform services, as well as on top of Azure infrastructure.

Author PUSHPA HERATH begins by teaching you the fundamentals of Azure security. An easy to follow exploration of management groups, subscriptions, management locks and Azure policies further elaborate the concepts underlying Azure cloud security. Next, you will learn about Azure Active Directory (AAD) and the utilization of AAD in application and infrastructure security. Essential aspects of maintaining secure application keys and certificates are further explained in the context of Azure Key Vault. New application security implementations such as Azure configurations and Azure Defender for Azure storage are discussed, as are key platform security factors. Network security groups, gateways, load balancers, virtual networks and firewall configurations are all demonstrated in detail. Finally, you’ll learn how to create a much more secure environment through Azure App Service Environment in the context of securing infrastructure. If you want to learn the basics of securing Azure, Azure Cloud Security for Absolute Beginners is for you.

After reading the book, you will be able to begin implementing secure cloud solutions with Microsoft Azure.

WHAT WILL YOU LEARN

* Get up and running quickly securing Azure
* Master the basic language of Azure security
* Understand the security features available in Azure cloud
* Configure and maintain Azure cloud security features
* Secure Azure PaaS Services
* Learn identity and access management options in Azure Cloud

WHO IS THIS BOOK FOR

Cloud engineers, DevOps engineers, software developers and architects who are asked to manage or are involved in the Azure infrastructure management but have not had all that much experience with security. PUSHPA HERATH is a Microsoft Most Valuable Professional (MVP) in development technologies and an author, blogger and speaker at technical community events. She is the Senior DevOps Engineer at 99x (Pvt) Ltd. She has many years of experience in DevOps with Azure DevOps, Octopus, JIRA and many other DevOps tools. She icurrently leads the DevOps community in Sri Lanka, and she has shown in depth knowledge in Azure cloud platform tools in her community activities. She is an expert on functional test automation using Selenium and BDD.

Pushpa blogs on technology, and has experience with Microsoft tools (C#, Azure DevOps, SQL Server, and Azure) and other tools (Octopus, Jira, BitBucket, MAQS, Sikuli). She has published five books with Apress and spoken at community events and published videos on the Sri Lanka DevOps community YouTube channel.

CHAPTER 1: UNDERSTANDING THE IMPORTANCE OF DATA/APPLICATION SECURITY

CHAPTER GOAL: Give general overview on importance of data security

NO OF PAGES: 5

SUB -TOPICS

1. Introduction to security

2. Introduction to Azure security fundamentals

CHAPTER 2: OVERVIEW OF BASIC AZURE SECURITY COMPONENTS

CHAPTER GOAL: Introduction to various security components in Azure and how to utilize them.

NO OF PAGES: 15

SUB - TOPICS

1. Introduction to Azure Management groups and subscriptions

2. Azure Management locks

3. Introduction to Azure policies

CHAPTER 3: INTRODUCTION TO AZURE ACTIVE DIRECTORY

CHAPTER GOAL: Lessons to provide hand-on guidance on user access control of the organization using Azure Active Directory.

NO OF PAGES : 30

SUB - TOPICS:

1. Adding users and groups to the AD

2. Manage External Identities

3. Enable two factor authentications

4. Roles and Administrative units in Azure AD

5. Managing Enterprise applications

6. Introduction to AD devices

7. Azure AD app registration

8. Adding custom domains

CHAPTER 4: WORKING WITH AZURE KEY VAULT

CHAPTER GOAL: Step by step guidance to setting up and using azure key vault to achieve several security requirements in the organization.

NO OF PAGES: 15

SUB - TOPICS:

1. Setting up Key vault

2. Key vault access control

3. Using KV to save Keys

4. Using KV to secure Secrets

5. Using KV to keep certificates

6. Key vault access policies

7. KV networking and security

CHAPTER 5: ENSURE AZURE APPLICATION SECURITY

CHAPTER GOAL: Step by step guidance to setting up various security components which helps to secure application hosted in Azure

NO OF PAGES: 40

SUB - TOPICS:

1. Keep configurations in central location using Azure Configuration

2. Authentication and authorization in Azure App Service

3. How to secure application with web application firewall in Azure

4. Application Security groups

CHAPTER 6: ENSURE DATA SECURITY WITH AZURE STORAGES

CHAPTER GOAL: Overview on how data storage security works in Azure

NO OF PAGES: 30

SUB - TOPICS:

1. Setting up azure storage

2. Azure storage encryption

3. Azure defender for azure storage

CHAPTER 7: ENSURE SECURITY USING AZURE VIRTUAL NETWORKS

CHAPTER GOAL: Step by step guide on how to setup virtual networks to enhance the security of the data and infrastructure.

NO OF PAGES: 40

SUB - TOPICS:

1. Network security groups

2. Azure VPN gateways

3. Azure Load balancer

4. Azure Subnets

CHAPTER 8: WORKING WITH AZURE APPLICATION GATEWAY

CHAPTER GOAL: Hands on lessons on implementing Azure Application gateway to enhance the security of the data

SUB - TOPICS:

1. Setting up Azure Application gateway

2. Secure Web App using App gateway

3. Secure Virtual Machine using App gateway

CHAPTER 9: SECURING DATA WITH AZURE FIREWALL

CHAPTER GOAL: Step by step guidance to setting up azure firewall and configure it to secure data

NO OF PAGES: 40

SUB - TOPICS:

1. Setting up Azure Firewall

2. Setting up policies

3. Setting up rules

CHAPTER 10: CREATING APP SERVICE ENVIRONMENT TO ENHANCE SECURITY

CHAPTER GOAL: Step by step guidance to setting up App service environment and using it to secure applications

NO OF PAGES: 50

SUB - TOPICS:

1. Setting up Azure Application service environment

2. Deploy applications to app service environment

CHAPTER 11: SECURE INFRASTRUCTURES IN AZURE

CHAPTER GOAL: Explains different security features available with few of the azure resources

NO OF PAGES: 30

SUB - TOPICS:

1. Secure Azure Virtual machine using Bastian

2. Secure Azure Virtual machine using encrypted firewall rules

3. Azure SQL server security components