-
Learn how to secure your apps by leveraging key Azure tools and best practices. This course can also prepare you for the Developing Solutions for Microsoft Azure (AZ-203) exam.
With the rise of cloud computing, and especially platform as a service (PaaS) solutions, developer productivity has reached new heights. A single developer can now be responsible for the design and even configuration of databases, web servers, and application deployment. But with this new power comes a new set of security concerns. In this course, learn how to secure your applications by leveraging key Azure tools and best practices. This course can also prepare you for the Implement Azure security portion of the Developing Solutions for Microsoft Azure (AZ-203) exam. Instructor Karl Ots covers how to control access to the Azure development environment, securely authenticate end users, and securely connect application logic to Azure data services.
Overview
Syllabus
-
Introduction
- Why security matters for developers
- What you should know
- Azure role-based access control (RBAC)
- Grant role-based access to a user
- Azure RBAC roles for development
- The Contributor role
- The User Access Administrator and Owner roles
- Custom Azure RBAC roles
- Create custom Azure RBAC roles
- Management pane vs. data pane RBAC roles
- Challenge: Design Azure access control
- Solution: Design Azure access control
- Register an application to Azure Active Directory (Azure AD)
- Web application sign-in with Azure AD
- Securing web application authentication with Azure AD Conditional Access
- The Microsoft Authentication Library (MSAL)
- Challenge: Internal web application with Azure AD
- Solution: Internal web application with Azure AD
- Manage Azure application secrets
- Shared access signatures (SAS) in Azure
- Azure Key Vault service
- Adding secrets to an Azure Key Vault
- Azure Key Vault access policies
- Azure Key Vault audit logs
- Managed identity for Azure resources
- Challenge: Design data access controls
- Solution: Design data access controls
- Exam AZ-203: Developing Solutions for Microsoft Azure and beyond
