You're reading from Microsoft Azure Security Technologies Certification and Beyond Gain practical skills to secure your Azure environment and pass the AZ-500 exam

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781800562653

Length 526 pages

Edition 1st Edition

Tools

Azure

Concepts

Cybersecurity

Author (1):

David Okeyode

View More author details

Table of Contents (19) Chapters

Preface

1. Section 1: Implement Identity and Access Security for Azure

2. Chapter 1: Introduction to Azure Security FREE CHAPTER

3. Chapter 2: Understanding Azure AD

4. Chapter 3: Azure AD Hybrid Identity

5. Chapter 4: Azure AD Identity Security

6. Chapter 5: Azure AD Identity Governance

7. Section 2: Implement Azure Platform Protection

8. Chapter 6: Implementing Perimeter Security

9. Chapter 7: Implementing Network Security

10. Chapter 8: Implementing Host Security

11. Chapter 9: Implementing Container Security

12. Section 3: Secure Storage, Applications, and Data

13. Chapter 10: Implementing Storage Security

14. Chapter 11: Implementing Database Security

15. Chapter 12: Implementing Secrets, Keys, and Certificate Management with Key Vault

16. Chapter 13: Azure Cloud Governance and Security Operations

17. Assessments

18. Other Books You May Enjoy

Implementing encryption in transit

Another security concern that organizations have is the encryption of data as it moves from one location to another. The Azure platform implements a data link layer encryption method to encrypt all Azure data traffic within an Azure region or between Azure regions. This encryption uses the IEEE 802.1AE MAC Security (MACsec) standards and requires no action on our part.

However, we will also want to enforce transport-level encryption when data is moved outside network boundaries not controlled by Microsoft. Azure Storage has a Secure transfer required option that we can configure to accept requests only from secure connections that support encryption.

When this option is configured, the Blob service will only accept HTTPS requests and will reject HTTP requests. With the option configured, the Files service will also reject insecure connections made over SMB 2.1 and SMB 3.0 without encryption. Figure 10.8 shows this setting enabled for an existing...