Textbook in PDF format

Secure your Azure applications the right way with the expert DevSecOps techniques you'll learn in this essential handbook.
In Azure Security you’ll learn vital security skills, including how to:
Configure Conditional Access policies to implement secure access
Implement Azure Web Application Firewall (WAF) on Application Gateway and Azure Front Door
Deploy Azure Firewall Premium to monitor network activities for malicious activity
Enable Microsoft Defender for Cloud to continuously assess your workloads for misconfiguration
Use Microsoft Sentinel to create analytics rules to detect threats and suspicious activity
Set up Azure Policy to ensure that resource states and deployment is compliant with your business rules
As a Program Manager at Microsoft, Bojan Magusic has helped numerous Fortune 500 companies improve their security posture in Azure. Now, in Azure Security he brings his experience from the cyber security frontline to ensure your Azure cloud-based systems are safe and secure. Correctly set up out-of-the-box Azure services to protect your web apps against both common and sophisticated threats, learn to continuously assess your systems for vulnerabilities, and discover cutting-edge operations for security hygiene, monitoring, and DevSecOps.
about the technology:
Attacks against cloud-based applications are increasingly common and sophisticated. It’s vital for any developer or resource owner to understand how to properly configure their Azure cloud environments and establish reliable security best practices. The Azure platform comes with dozens of built-in security tools to help keep your systems safe. This book will teach you exactly how to set them up for maximum effectiveness.
about the book:
Azure Security is a practical guide to the native security services of Microsoft Azure. You’ll learn how to use Azure tools to improve your systems security and get an insider’s perspective on establishing a DevSecOps program using the capabilities of Microsoft Defender for Cloud. Insightful analogies and hands-on examples help demystify tricky security concepts, while clever exercises help reinforce what you’ve learned.
This book is written for cyber-defenders of businesses—cybersecurity professionals of wildly different backgrounds and levels of experience who are passionate about protecting their environments and demonstrate tenacity in the face of what looks like chaos every single day. No two days are the same because the landscape in this space changes so quickly. The topics covered in this book empower you to understand how to use native Azure security services to meaningfully and effectively secure applications and resources in the real world.
Security engineers with up to two years of experience working with the Azure platform are the people who are going to benefit the most from reading this book, as they will recognize themselves in many of the scenarios. Beginner-level experience using the Azure platform (or any other public cloud platform) will help greatly. You certainly don’t need to be familiar with (or an expert in) all of the different public cloud services to get the most out of this book. However, if you have a basic understanding of how the Azure platform works, what an Azure subscription is, and what a tenant is, you’ll be off to the races.
Maybe your primary focus is not securing applications and systems but rather developing or deploying applications. If so, this book is for you too. You’ll be able to gain a much deeper understanding of what’s required to secure applications you have developed. This knowledge helps maintain business continuity and prevents any disruptions due to poor security practices so your users can use the application as you intended.
If you are coming from an on-premises world and are moving workloads to the public cloud, this book is for you too. If you start with chapter 1, you will learn about core concepts around cloud security, the challenges that businesses are facing, and how they are applicable to securing resources in Azure. You can then proceed through the other chapters, which show you how to use various Azure security services to harden Azure resources and apply security best practices to them.
Even if you’re an experienced Azure security engineer, this book is still for you. The later chapters might contain some insights and new capabilities you haven’t seen before. Chapters 7 and 8 about security monitoring and operations are worth a look. Or you can explore chapter 10 to learn how to shift even further left and manage security as code.
What's inside
Set up secure access policies
Implement a Web Application Firewall
Deploy MS Sentinel for monitoring and threat detection
Establish compliance with business rules
About the reader
For software and security engineers building and securing Azure applications.
About the author
Bojan Magusic is a Product Manager with Microsoft on the Security Customer Experience Engineering Team.
Table of Contents
Part 1
About Azure security
Securing identities in Azure: The four pillars of identity and Azure Active Directory
Part 2
Implementing network security in Azure: Firewall, WAF, and DDoS protection
Securing compute resources in Azure: Azure Bastion, Kubernetes, and Azure App Service
Securing data in Azure Storage accounts: Azure Key Vault
Implementing good security hygiene: Microsoft Defender for Cloud and Defender CSPM
Security monitoring for Azure resources: Microsoft Defender for Cloud plans
Part 3
Security operations and response: Microsoft Sentinel
Audit and log data: Azure Monitor
Importance of governance: Azure Policy and Azure Blueprints
DevSecOps: Microsoft Defender for DevOps