Azure Developer Associate (AZ-204) Cert Prep: Implement Azure Security

1h 13mIntermediate2020-01-24

Authors

Karl Ots

Cloud and Cybersecurity Expert, Azure MVP, Microsoft Regional Director

Course details

With the rise of cloud computing, and especially platform as a service (PaaS) solutions, developer productivity has reached new heights. A single developer can now be responsible for the design and even configuration of databases, web servers, and application deployment. But with this new power comes a new set of security concerns. In this course, learn how to secure your applications by leveraging key Azure tools and best practices. This course can also prepare you for the Implement Azure security portion of the Developing Solutions for Microsoft Azure (AZ-203) exam. Instructor Karl Ots covers how to control access to the Azure development environment, securely authenticate end users, and securely connect application logic to Azure data services.

Learning objectives
Controlling user access to Azure
Securing application sign-in with multi-factor authentication
Managing Azure application secrets
Managing secrets with Azure Key Vault
Managed identity for Azure resources
Securing access to Azure Storage

Skills covered

Cloud SecurityCloud DevelopmentNetwork SecurityAzureSoftware Development ToolsNetwork AdministrationCloud PlatformsCybersecurityNetwork and System AdministrationCloud ComputingMicrosoftSoftware DevelopmentDeep Dive (X:Y)

Concepts

0. Introduction

01 - Why security matters for developers
02 - What you should know

1. Control access to Azure

03 - Azure Role Based Access Control (RBAC)
04 - Grant role based access to a user
05 - Azure RBAC roles for development
06 - The contributor role
07 - The User Access Administrator and Owner roles
08 - Custom Azure RBAC roles
09 - Create custom Azure RBAC roles
10 - Management pane vs data pane RBAC roles
11 - Challenge - Design Azure access control
12 - Solution - Design Azure access control design

2. Control user access to your apps

13 - Register an application to Azure AD
14 - Web application sign in with Azure AD
15 - Securing web application authentication with Azure AD Conditional Access
16 - The Microsoft Authentication Library
17 - Challenge - Internal web app with Azure AD
18 - Solution - Internal web application with Azure AD

3. Control app access to your data

19 - Manage Azure application secrets
20 - Shared Access Signatures in Azure
21 - Azure Key Vault service
22 - Adding secrets to an Azure Key Vault
23 - Azure Key Vault Access Policies
24 - Audit logs
25 - Managed Identity for Azure Resources
26 - Challenge - Design data access controls
27 - Solution - Design data access controls

Conclusion

28 - Developing solutions for Azure and beyond