Microsoft Azure Security电子书

Microsoft Azure Security

Table of Contents

Microsoft Azure Security

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. The Fundamentals of Security Standards

Information security fundamentals

CIA triangle

Security management

Risk analysis

Physical measures and logical measures

Introducing ISO/IEC 27000

Physical security and controls

Security boundaries

Mobile equipment

Logical security and controls

Human resources

Access control

Mobile devices

Cryptography

Communication

Software management

Laws and regulations

Security in software development

Local development tools

Access to source code

Credentials management

Security standards in Azure

Implementing security, privacy, and compliance

Security

Privacy

Compliance

Summary

2. Identity and Access Management for Users

IAM in the current portal

Creating a custom Azure Active Directory

Configuring the Azure Directory user access

Adding a co-administrator to the subscription

Securing the Microsoft account

Two-step verification

Authenticator app

IAM in the Preview portal

Role-Based Access Control

Roles

Hierarchy of security objects

Adding a user in the Preview portal

Advanced authentication

Multi-Factor Authentication

Setting up Multi-Factor Authentication

Management Certificates

Setting up a Management Certificate

Summary

3. Platform as a Service

Hosting the code

Cloud Services

Remote endpoints

Remote Desktop

Startup tasks

Microsoft Antimalware

Network communication

Websites

Project Kudu

Credentials

Connection modes

Settings and connection strings

Backups

Extensions

Hosting the data

Storage

Account keys

Shared Access Signatures

Scalability and performance targets

SQL Database

Setting up firewall rules

Setting up users and roles

Connection settings

Working with a cache

Azure Managed Cache

SSL

Named caches

Azure Redis Cache

Databases

Working with the Service Bus

Shared Access Policies

Summary

4. Infrastructure as a Service

Virtual Machines

External security

Creation: Windows versus Linux

Endpoints and ACLs

Networking and isolation

Extensions

Internal security

Operating system firewall

Auditing and best practices

Virtual Networks

Network Security Groups

Hybrid networks

Azure Backup

Configuring a backup vault

Registering a server

Scheduling backups

Summary

5. Identity and Access Management for Developers

Azure Active Directory

Single-tenant applications

Inspecting messages

Available claims and security groups

Multi-tenant applications

Consent Framework

Azure AD Graph API

Directory extensions

Azure AD Access Control Service

Configuring Facebook as an Identity Provider

Configuring Azure AD as an Identity Provider

Applying claims transformations

Integration with ASP.NET

Azure Key Vault

Creating a Key Vault

Creating the vault

Adding a key or secret

Using the .NET client library

Summary

Index