Summary
At the very end of this book, we have covered all aspects of Microsoft Azure security. From the shared responsibility model to advanced security features, we have come to the end. It's important to remember that the cloud changes all the time, and more and more services are available that can help us to increase security. Let's focus on the most important takeaways from this book:
- Keep your identity and secrets secure with all the means available.
- When it comes to access, take two approaches: Just Enough Administration (JEA) and Just-in-Time Administration (JIT Administration).
- Nothing should be exposed to public access if it's not necessary, especially management and security access.
- Data should be encrypted at all times.
- All communication and traffic should be encrypted (over HTTPS) and on a secure (private) network, if possible.
- Microsoft Defender for Cloud and Microsoft Sentinel can help you with analytics, detection, and recommendations...
