Azure Developer Associate (AZ-204) Cert Prep: Implement Azure Security
1h 13mIntermediate2020-01-24
Authors
Karl Ots
Cloud and Cybersecurity Expert, Azure MVP, Microsoft Regional Director
Course details
With the rise of cloud computing, and especially platform as a service (PaaS) solutions, developer productivity has reached new heights. A single developer can now be responsible for the design and even configuration of databases, web servers, and application deployment. But with this new power comes a new set of security concerns. In this course, learn how to secure your applications by leveraging key Azure tools and best practices. This course can also prepare you for the Implement Azure security portion of the Developing Solutions for Microsoft Azure (AZ-203) exam. Instructor Karl Ots covers how to control access to the Azure development environment, securely authenticate end users, and securely connect application logic to Azure data services.
Learning objectives
Controlling user access to Azure
Securing application sign-in with multi-factor authentication
Managing Azure application secrets
Managing secrets with Azure Key Vault
Managed identity for Azure resources
Securing access to Azure Storage
Learning objectives
Controlling user access to Azure
Securing application sign-in with multi-factor authentication
Managing Azure application secrets
Managing secrets with Azure Key Vault
Managed identity for Azure resources
Securing access to Azure Storage
Skills covered
Cloud SecurityCloud DevelopmentNetwork SecurityAzureSoftware Development ToolsNetwork AdministrationCloud PlatformsCybersecurityNetwork and System AdministrationCloud ComputingMicrosoftSoftware DevelopmentDeep Dive (X:Y)
Concepts
0. Introduction
- 01 - Why security matters for developers
- 02 - What you should know
1. Control access to Azure
- 03 - Azure Role Based Access Control (RBAC)
- 04 - Grant role based access to a user
- 05 - Azure RBAC roles for development
- 06 - The contributor role
- 07 - The User Access Administrator and Owner roles
- 08 - Custom Azure RBAC roles
- 09 - Create custom Azure RBAC roles
- 10 - Management pane vs data pane RBAC roles
- 11 - Challenge - Design Azure access control
- 12 - Solution - Design Azure access control design
2. Control user access to your apps
- 13 - Register an application to Azure AD
- 14 - Web application sign in with Azure AD
- 15 - Securing web application authentication with Azure AD Conditional Access
- 16 - The Microsoft Authentication Library
- 17 - Challenge - Internal web app with Azure AD
- 18 - Solution - Internal web application with Azure AD
3. Control app access to your data
- 19 - Manage Azure application secrets
- 20 - Shared Access Signatures in Azure
- 21 - Azure Key Vault service
- 22 - Adding secrets to an Azure Key Vault
- 23 - Azure Key Vault Access Policies
- 24 - Audit logs
- 25 - Managed Identity for Azure Resources
- 26 - Challenge - Design data access controls
- 27 - Solution - Design data access controls
Conclusion
- 28 - Developing solutions for Azure and beyond