Implement resource management security in Azure

After completing this module, you'll be able to:

• Strengthen your security posture and protect against threats by using Azure Security Center.
• Collect and act on security data from many different sources by using Azure Sentinel.
• Store and access sensitive information such as passwords and encryption keys securely in Azure Key Vault.
• Manage dedicated physical servers to host your Azure VMs for Windows and Linux by using Azure Dedicated Host.

After completing this module, you'll be able to:

• Make organizational decisions about your cloud environment by using the Cloud Adoption Framework for Azure.
• Define who can access cloud resources by using Azure role-based access control.
• Apply a resource lock to prevent accidental deletion of your Azure resources.
• Apply tags to your Azure resources to help describe their purpose.
• Control and audit how your resources are created by using Azure Policy.
• Enable governance at scale across multiple Azure subscriptions by using Azure Blueprints.

In this module, you will:

• Use resource groups to organize Azure resources
• Use tags to organize resources
• Apply policies to enforce standards in your Azure environments
• Use resource locks to protect critical Azure resources from accidental deletion

In this module, you will:

• Verify access to resources for yourself and others
• Grant access to resources
• View activity logs of Azure RBAC changes

In this module, you will:

• Identify the appropriate role to assign to an employee.
• Identify scenarios where the Global Administrator for Azure Active Directory might need to temporarily elevate their access in Azure.
• Grant the employee management access to a subscription.

In this module, you will:

• Identify role definition structure and properties
• Create and manage an Azure custom role for resource access management

• Introduction
• Protect against security threats by using Azure Security Center
• Detect and respond to security threats by using Azure Sentinel
• Store and manage secrets by using Azure Key Vault
• Exercise - Manage a password in Azure Key Vault
• Host your Azure virtual machines on dedicated physical servers by using Azure Dedicated Host
• Knowledge check
• Summary

• Introduction
• Control access to cloud resources by using Azure role-based access control
• Prevent accidental changes by using resource locks
• Exercise - Protect a storage account from accidental deletion by using a resource lock
• Organize your Azure resources by using tags
• Control and audit your resources by using Azure Policy
• Exercise - Restrict deployments to a specific location by using Azure Policy
• Govern multiple subscriptions by using Azure Blueprints
• Accelerate your cloud adoption journey by using the Cloud Adoption Framework for Azure
• Create a subscription governance strategy
• Knowledge check
• Summary

• Introduction
• Principles of resource groups
• Use tagging to organize resources
• Use policies to enforce standards
• Secure resources with role-based access control
• Use resource locks to protect resources
• Check your Knowledge
• Summary

• Introduction
• What is Azure RBAC?
• Knowledge check - What is Azure RBAC?
• Exercise - List access using Azure RBAC and the Azure portal
• Exercise - Grant access using Azure RBAC and the Azure portal
• Exercise - View activity logs for Azure RBAC changes
• Knowledge check - Using Azure RBAC
• Summary

• Introduction
• Understand the difference between Azure roles and Azure AD roles
• Understand when you might need to elevate your access
• Exercise - Get access to an Azure subscription
• Summary

• Introduction
• What are custom roles in Azure?
• Exercise - Create an Azure custom role
• Manage Azure custom roles
• Exercise - View and manage an Azure custom role
• Summary