You're reading from Microsoft Azure Security Technologies Certification and Beyond Gain practical skills to secure your Azure environment and pass the AZ-500 exam

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781800562653

Length 526 pages

Edition 1st Edition

Tools

Azure

Concepts

Cybersecurity

Author (1):

David Okeyode

View More author details

Table of Contents (19) Chapters

Preface

1. Section 1: Implement Identity and Access Security for Azure

2. Chapter 1: Introduction to Azure Security FREE CHAPTER

3. Chapter 2: Understanding Azure AD

4. Chapter 3: Azure AD Hybrid Identity

5. Chapter 4: Azure AD Identity Security

6. Chapter 5: Azure AD Identity Governance

7. Section 2: Implement Azure Platform Protection

8. Chapter 6: Implementing Perimeter Security

9. Chapter 7: Implementing Network Security

10. Chapter 8: Implementing Host Security

11. Chapter 9: Implementing Container Security

12. Section 3: Secure Storage, Applications, and Data

13. Chapter 10: Implementing Storage Security

14. Chapter 11: Implementing Database Security

15. Chapter 12: Implementing Secrets, Keys, and Certificate Management with Key Vault

16. Chapter 13: Azure Cloud Governance and Security Operations

17. Assessments

18. Other Books You May Enjoy

Understanding secrets, keys, and certificates

Secrets are data under 25 KB that our applications can store or retrieve in plain text. They are stored as a name-value pair of strings. Passwords, API keys, and connection strings can be stored securely as secrets in Key Vault.

Keys are cryptographic keys generated using an algorithm. Key Vault supports multiple sizes and algorithms of the RSA and Elliptic Curve (EC) key types. We can import RSA keys that we generated elsewhere into our vault, or we can generate RSA and EC keys in the vault itself. Depending on the pricing tier of Key Vault that we deployed (we will cover pricing tiers later in this chapter), the keys could either be software-protected or hardware-protected using Hardware Security Modules (HSMs).

Certificates refer to SSL/TLS X.509 certificates. These could either be self-signed certificates generated in the vault or certificates generated by external Certificate Authorities (CAs) that are integrated with Key Vault...