Securing Azure Infrastructure with Bicep

Course details

This course provides guidance on integrating security best practices into Azure infrastructure deployments using Bicep. Instructor Adora Nwodo covers configuring role-based access control (RBAC), setting up network security groups (NSGs), enforcing policies using Azure Policy, and implementing secure configurations at scale. This course, aimed at intermediate to advanced users, emphasizes building infrastructure that is not only scalable but also secure by design, empowering developers and DevOps professionals to safeguard cloud environments effectively.

Learning objectives
Build secure and scalable Azure infrastructure using Bicep.
Configure key security features like RBAC, NSGs, and Azure Policies in Bicep templates.
Enforce security and compliance rules consistently across deployments.
Troubleshoot and resolve security issues to protect cloud environments.

Concepts

Introduction

Welcome

Introduction to Azure Bicep and Security Essentials

Introduction to Azure Bicep
Setting up your development environment
Core security concepts in Azure
Defining security as code
Planning your secure infrastructure deployment

Configuring Role-Based Access Control (RBAC)

Defining roles and permissions in Azure Bicep
Assigning built-in roles using Bicep
Creating custom roles with Azure Bicep
Best practices for managing role assignments

Setting Up Network Security Groups (NSGs)

Understanding NSGs and their importance
Creating NSGs using Azure Bicep
Inbound and outbound security rules
Associating NSGs with subnets
Case study - Securing a web application

Enforcing Policies with Azure Policy

Introduction to Azure Policy
Creating custom policies for your environment
Policy assignments and scopes
What we can create policies for

Implementing Secure Configurations at Scale

Principles of secure, scalable infrastructure
Best practices for infrastructure security
Encrypting data at rest and in transit
Automating compliance with CI CD pipelines

Conclusion

Learning more about security in Azure