Enter the Matrix: Securing Azure’s Assets
summary
Covers concrete Azure controls and how to apply them: run CredScan, OWASP dependency check and SonarQube in CI/CD; validate ARM templates with the Azure Security DevOps Kit; remove secrets to Key Vault and enforce Key Vault rotation (recommend weekly); assign identities with Managed Service Identity or service principal and lock access with Azure AD policies, blueprints and service endpoints. Deploy Application Gateway WAF, use DDoS + CDN for volumetric attacks, enable Security Center threat detection, just‑in‑time VM access and database advanced threat detection and data discovery.
AI-written summary · about
chapters (12)
- 0:00Welcome and introduction
- 1:52Security in Azure overview
- 8:51Secure application development
- 20:25Key Vault and secrets management
- 22:37Identity and access control
- 24:01Monitoring and Security Center
- 31:10Network security and DDoS
- 36:32Virtual networks and subnets
- 42:59Data security and threat detection
- 49:57Just-in-time admin and MFA
- 53:13Security Center threat graph
- 55:01Q&A and closing
related talks
01h 00mEverything You Always Wanted to Know About Azure Security But Were Afraid to Ask
19mEnhancing Security in Azure Cosmos DB: Best Practices
55mWhat you need to know about security for cloud DevOps
23mBuild a Defense in Depth Security Posture in Azure
52mImplement DevSecOps in Azure
39mTop 13 best security practices for Azure
49mTop 5 ways to secure Azure resources
43mDefending the Cloud: Securing Your Microsoft Data Workloads