Azure Network Security Hygiene with Traffic Analytics
Hello, dear readers! My name is Hélder Pinto and I am sharing here some tips about how to leverage NSG Flow Logs and Traffic Analytics to improve your Azure network security hygiene and, at the end, simplify your NSG rules ... continue reading
You Might Want to Audit Your LAPS Permissions….
Deploy LAPS, Check! You’re all set, right? Maybe… Hi team, Eric Jansen here again; I’m back after being reminded by a friend and reader that I've been away for too long. I’m trying to be better about it since I have a ton of content that I'd like to share and talk about, but these days ... continue reading
How-To: Deploy Microservice Application with Pod Identity Using Helm Chart
In the last blog we discussed how to deploy AKS fully integrated with AAD. Also we discussed deploying add-on for Azure Pod Identity and Azure CSI driver. In the article we will discuss how to create an application that using ... continue reading
Leverage enterprise-scale reference implementations for your cloud adoption
This post was co-authored by Sarah Lean, Senior Content Engineer, Azure In the last couple of blog posts, we followed Tailwind Traders1 on their cloud journey and how the IT team is looking to adopt Azure as part of their ... continue reading
HOW-TO: Deploy AKS with POD Managed Identity and CSI using Terraform and Azure Pipeline
Today as we develop and run application in AKS, we do not want credentials like database connection strings, keys, or secrets and certificates exposed to the outside world where an attacker could take advantage of those secrets for malicious purposes ... continue reading
Zero Trust: 7 adoption strategies from security leaders
Microsoft considers Zero Trust an essential component of any organization’s security plan. We have partnered with Cloud Security Alliance, a not-for-profit organization that promotes cloud computing best practices, to bring together executive security leaders to discuss and share insights about ... continue reading
How to build a successful application security program
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Tanya Janca, Founder of We Hack Purple Academy and ... continue reading
Azure Advisor – Your free, personalized guide to Azure best practices
Jose Portugal joins Scott Hanselman to show how to use Azure Advisor to optimize your Azure workload usage, lower costs, increase efficiency, and improve security.[0:00:00]– Introduction[0:02:27]– Demo: Azure Advisor[0:06:30]– Demo: Alerts[0:07:06]– Demo: Recommendation digests[0:08:43]– Demo: Advisor Score[0:12:42]– Discussion and wrap-upIntroduction ... continue reading
Analyzing attacks taking advantage of the Exchange Server vulnerabilities
Microsoft continues to monitor and investigate attacks exploiting the recent on-premises Exchange Server vulnerabilities. These attacks are now performed by multiple threat actors ranging from financially motivated cybercriminals to state-sponsored groups. To help customers who are not able to immediately ... continue reading
Scale cloud adoption with modular designs for enterprise-scale landing zones
This post was co-authored by Sarah Lean, Senior Content Engineer, Azure Tailwind Traders1 is a retail company that is looking to adopt Azure as part of its IT strategy. The IT team is familiar with deploying infrastructure on-premises and is ... continue reading
