Yeah, I can see
Okay, so let me start sharing my screen. Nick, you could see my presentation, right
Yes, I can see. Okay, so guys, let's start. And in between, I think you could maybe listen more
But once you get a time as Nick requested, you can type
Thank you. So, here. Azure Security Defenses You Ought to Know
This is a very interesting topic. And nowadays, as enterprises are moving towards the cloud, we know we still have that kind of hesitation
We have some kind of not that confidence which we gather on on-prem from couples of decades
like how my data is secure, what is going to be, where my data will store
And that kind of questions I also encounter day to day when I do consulting, when I speak to different public sectors
They have that kind of a geographical limitation, the political limitation. If that's a geographical limitation, it means, you know, one country don't want the data to be stored in another country
For example, if I'm working with Canadian public sector or government sector, they don't want me
I will use data center that is maybe in Europe or maybe outside Canada
That's not allowed. That's not allowed. That's not a, though it costs us less, but that's not recommended
So, we will look for what are the defense we have available
And we will take it forward from there. Why my screen is not showing here
So, security is for everyone's job
If I talk about security, security is for everyone. Security is not limited or restricted for, you know, for any specific department
Earlier we think whenever we develop a code, I'm coming from a background of development
So, whenever I write a very beautiful code, very beautiful application, I think, hey, I did my job
My application is running perfectly fine. All functionality is working. I hardly pay any attention to security
However, that's not the case. Security is not limited or restricted up to a specific department like these wonderful guys, right
They are there in the market to ensure the security. However, for IT, I don't think that's going to be, you know, a good idea
That's not at all a good idea, right? In IT, we have to ensure what we are doing, how my data is secure
If I have written very good application, very, very good application, and it's not secure
Say I have written world's best functionality, give very good user interface, very good data, and I ensure everything
But the same day that application got hacked, then definitely it's not going to be a secure application
So, we have to take the ownership and responsibility as well as ownership if security has been compromised
And we have been leveraged by Azure to ensure the security. So, the question is why security is important
We have a security breach, multiple security breaches. We have come across many cases where security has been compromised
Nowadays, cryptojacking and crypto pirates are another cases where security has been regularly compromising
They take your data and ask you to pay in the form of cryptocurrencies
You know what I mean. That happens to a very good bank as well
That is another thing where we have to plan and prepare ourselves, hey, whatever I'm working, wherever I'm working
whether it is my application or whether it is my personal website, my data is secure
We always have insider threats. We do have someone from company who is not intentionally, but he's sitting in the team hotel enjoying the coffee
and writing some very nice code and interacting with the database, making some credit
but that guy doesn't know that network where you are connected on the cafe, and I think that happens with everyone
I usually went to teams and, you know, whenever I have to do some work, so I also do that thing
but we don't know that network is not secure. Someone is watching you
Someone has your all passwords. Someone could connect on your behalf, and they could manipulate or update your credits and request and response accordingly
So, that is kind of another threat which we do have, and this is very common threat if we are working on any public open network, unsecure network
That is another thing. Accidental, this may happen to anyone, anywhere, without any guilt, without any reason, so maybe natural, maybe unnatural
but we have to ensure our data is secure. If our data is secure, then probably we could say, hey, our data is secure, and we could mitigate any accidental case
For example, if there is a tsunami or there is an earthquake, we could mitigate that scenario by replicating some of our data
We could replicate our data maybe on the different geographical location, maybe on different zones, so that is the power we have from cloud
We have corporate hackneyed, right? That is also not something which never happened and which will not happen
So, we should consider that kind of scenario where we are considering, hey, we found someone in the organization that is actually not working for the organization
and he is working for another organization. From cloud, we could leverage ourselves with that as well
Ransomware is another case. And, hello, I could see your message. Could you tell us your location as well
Thank you. So, another is the denial of services. This is a very beautiful pattern and services offered by Microsoft, by which you leverage yourself with the patterns of, thank you, Leo
patterns of common security threats. For example, if your storage is being hammered by someone with the different, different patterns, different, different common passwords and different, different options
then denial of services automatically comes into the picture. Denial of services is an artificial intelligence power pattern which understands, hey, this guy does not seem to be a regular or authentic guy
For example, if I have logged into my Azure portal from a smartphone, and very next instance I try to log in my Azure portal, say, from Europe or from Africa
then Azure portal will understand, well, denial of services or artificial intelligence will understand, hey, it seems something dicey, right
You have to validate your authentication. Can I send you password or can I send you SMS or could you validate on email
That kind of thing is also there. And we do have a reputation where we have good friends who are working across different companies
An employee can be the friend of my employee and both are working on the company which are really not in good relationship
So that kind of thing also happens and that's why only to all these eight scenarios we have to never compromise our security
We have to work hard level best to ensure we are doing best security
There are some offerings from Microsoft as well where we could understand, yeah, these are some of the scenarios
So cloud native, earlier we were thinking cloud as being like a guy, what is my understanding
We were thinking application and services that automate and integrate the concept of continuous delivery, micro services, containers and serverless
But that's not for cloud native. We could say, you know, not copying everything from your traditional data center to another data center
It's way beyond that. We couldn't say if we are saying cloud native, I'm a cloud guy, I'm only concerned about, you know, migration of data
No, that's not the case. We have a lot of options. We could write our application
We could deploy our application. We could ensure the security. We could work on various old software development life cycles
So we have to think about beyond this and we could say, hey, we need to migrate our data
That's one thing. But I could deploy my application. I could deploy my firewall
I could deploy my VPN and I could work around it. So that's one of the beautiful things of it
And whenever we talk about cloud security and, you know, then we are saying about confidentiality, integrity and availability
All these factors are the part of Azure Cloud Platform where we are confidential
We are not going to share any data to anyone. If your data, even a Microsoft employee can't access your data and their data center is more like a jail, right
If you don't find any records, any USB port where you could plug and play or any front end TV or monitor is there, no
That's not available. Another thing is the availability. Azure Microsoft, we ensure data is available every time to everyone
It's available every time. If there is natural disaster, if there is some geological disaster, if there is the regional disaster, we ensure we have copy of your data
We ensure if you lose your data on a particular location, your business is still running
Your data could be made available within fraction of minutes at most and you could access your data from there
And we have very sound foundation on the integrity as well. So that's what we are offering
We have the silence improbability. We are ensuring you have confidentiality, availability and integrity thing
So being said that, let's jump into Azure Advisor. There are a couple of offerings which you could leverage yourself
I will discuss, I think, if time allows, two to three offerings today and maybe check on another offerings later on
So first is the Azure Advisor. If you are Azure guy and you have Azure portal, I know couple of guys who are in session
You know, we have common Azure background. So if you want to ensure your security, so we have this guy Advisor
You could write here Azure and type Advisor. As well as you type Advisor, you will land it to a left-hand panel here
And here Azure Advisor will give you recommendation on the basis of your resources, on the basis of performance
So this is my Advisor. Here I would like to show you guys
I don't have a lot of resources available here. Because whenever I perform any demo or whenever I perform any tech talk, I deleted those resources
I don't need those resources. So I have seven resources and it's Advisor giving me suggestions on the basis of seven resources
So as per Advisor, I have one resource impacted. So if this is a low impact and Azure service issue affect me, it is on one subscription
And let's see the description by going here. I'm here. It says I'm on Microsoft Azure subscription
Health alert is there. What I want to do? Postpone, dismiss or implement
So I do have that option. I click again to understand what is basically this Azure service health alert is
And I will say alert target is for Azure sponsorship. 140 services are selected
Region is not selected. I could select the region. Maybe Canada Central
There you go. And service health criteria is three. And I could say enable rule upon creation or don't enable rule creation
I could create some action group as well where I have option to create action group
What need to do? Do I need to send some notification? Do I need to send some emails, et cetera
So I'm not doing that at this demo. I could select it
I could either postpone it for a week or a month or a couple of weeks, right
Or I could also implement the security. So that's up to me
That is the Azure Monitor. This is very good tool available by Microsoft
So if you are using your Azure resources, any point of time you could use this advisor recommendation
You could look or keep looking over and what they are saying
This is come under higher ability area. Under security, I have six recommendations
And these recommendations are very high impact on my resources. So I could go over here, okay
I could say what this recommendation is. It presents potential security breaches
It's really neat, right? It really looks very impacted. It could impact me on a larger extent
So over here I could go and say what is my score
Out of four resources, three are unhealthy resources. So I have three high severity recommendations, one medium severity recommendation
And this recommendation is from my storage, blog storage and database. One is for identity access
It gives me score as well. If I implement this security, enable multiple authenticated access account, then I will get 50 credit
It means my total score, security score or total resources score will increase by 50
I could implement it or I could say, if I go here, I could say, okay, I will implement later
Another is the enable auditing for SQL server. It gives me options as well
What I need to do, if I click over here, it will say, hey, you did not implement the auditing on your SQL server to track the database, right
So what I could do, I could go here and it will say here, I need to go and implement under auditing
I need to turn it on. As soon as I turn it on, my auditing destination will be secure
It will be now auditing mode. As soon as I will do that, my recommendation, my score will be increased
So that implementation has been implemented. Another is the fellow security center recommendation
Let's look over this recommendation, what it's saying. So when you just designated more than one owner of your subscription, it say, I have more than one owner on my subscription
Let's go back and look here. And it's giving me five secure scores
So my score will increase by five. And as soon as I click it, I have same option to go to next step and implement it
Let me take a pause, guys. I'm very, very thirsty. So I have this access control
I could implement it, role assignment. I could add and implement that security recommendation
So I'm very impressed by this Azure Advisor tool. It's giving me options about security
I don't have any option about recommendation on performance, meter on scores
I'm super happy. I'm not paying a lot of amount for my resources
And overall, I have seven recommendations, which is impacting four resources. Out of these seven, six are high-impact recommendations, and one is the low-impact recommendation
So this is the beauty of the Azure Advisor. I could download it as a PDF
I guess I already downloaded it. I could open it. And I could read from here what this security is, what I need to do, what I need to implement it
and what are the potential benefits, like get notified when Azure services use to affect you
or prevent potential security breaches. More on security breaches, one is on the My Month subscription
One is on tool subscription. So I'm getting a lot of information
We could download it as CSV file as well. So this is about Azure Advisor
I will recommend you guys to try it. And then let's go to another tool
So another is the Azure Security Center. Azure Security Center is from a file available to us
And I think everyone of us has to base it. If you not base it yet, I think this is going to be a good idea, right
I will also follow. It is nice to keep looking over your resources where you are working
If you are finding some security recommendation, take it seriously, guys. It may impact you
It will save as possible hacking. Because cloud security is different, right
We have complete infrastructure visibility. We have complete threat monitoring. And that's the beauty
We don't have to implement our security compliances from scratch. We could leverage ourselves from the learning pattern of the Microsoft
They have a vast resources where they are managing the resources. And they are encountering day by day about the various hackers
team of hackers and, you know, various security compliances. So if you are using Azure Security Center, which I'm just going to share
it's not a specific one guy or one team or a couple of teams input
It is input from a lot of learning, a lot of resources, a lot of companies
They say, hey, we feel our data is, you know, hiding, compromised or attacked
And whenever data is compromised or attacked, we should consider it may be some things of very expert guys like you
or it may be a team of spotted by some country. That is another thing we have to consider
If a country wants to access some data, they have a lot of teams
They have a lot of guys. They have resources. They have all the facilities
And to mitigate those kind of threats in real scenario, Azure Security Center is really one of the best things I feel I could rely on
And let's look for Azure Security Center and then what they are saying
So this is the Security Center. It's on my left panel. If you want to use, you have also your option to write Security Center
And you could find it, Security Center. But I'm going on my left side over here
I'm clicking on Security Center. And then this guy will come up
It will take a while to scan my whole resulting. It will give me different options
I could see here false and compliance is my secure. Score is 205 out of 290
That's not too bad, I guess. It means I'm taking care of my resources on cloud in a better way, right
But I will also understand there are four recommendations available to me
which I need to implement. We did implement one recommendation earlier. So my security is not too bad
If you want to understand about your security score, you could go over here
You could understand, okay, where you are getting what score. I'm getting 170 under identity and access
I could increase up to 225. I'm getting 35 out of 35 in networking
Hey, hey, that's great. About data and storage, I do not have any score
That's bad. I think I really have to look for that thing
And compute and apps have zero score. So I could improve my score
And the recommendation is enable multi-factor authentication for account with owners. This is the top recommendation, which gave me 50 points
If I click over here, I have enable MSA for account and owner permission for your subscription
If I implement it, I will get 50 score, and I could implement directly from here
I have to enable multiple-factor authentication where I could see, hey, these are the things I need to do
And I have to select it and add multiple-factor assignment as role assignment
And once I did role assignment, I'm right here. So I could do deny assignment as well
I could define roles, various roles. I could specify the other roles
Owner role, you could add anyone. Well, not anyone, frankly, but your boss, say, maybe, Satya, if I'm working on Microsoft, your owner or your team on different roles
But remember, guys, don't give owner permission to anyone, not to anyone
Give them contributor, give them permission. Never give anyone any permission of owner
No, that's not a good idea, not at all. So, well, here we have option to enable MSA
I'm not doing that right now because after this demo, another demo, probably I will destroy my resources, and then I could enable auditing on SQL Server
Give me a second. I'm super thirsty. And enable transparent data encryption
So if I implement all these recommendations, my score will be 290, which is the best score
And once I have kind of, say, 80 percent to 90 percent of score, I could say, hey, I take care of maximum security compliances or maximum recommendation
Sleep very well. And I could look over here
This tab is very favorite tab of mine. Whenever I'm at work, I keep looking threat protection
It will say, do I have any security alert? Does someone from, say, Africa or Nigeria or any geographical location where nobody from my team or organization exists try to connect my resources
If I found some threat protection, it understand, it will understand that protection
It will say, OK, this is not going to be expected behavior
So I'm taking a pause. You validate your identity. So different patterns, different flow coming to the picture
So I don't have any security alert. And here, if you didn't start it, you could start your Azure Security Center subscription, which is free for 30 days
You could look over your coverage, what you are coverage you are doing, like coverage in terms of the subscription
I'm using my Visual Studio Enterprise subscription is totally covered. So you could do coverage on the basis of your subscription
If you have more than one subscription, you could cover the subscription where you are exposing your resources
You have secure score. Secure policy, et cetera
We could secure key hygiene implemented on data and storage, compute and apps
You could see various related and effective resources over there. And we have some security solutions as well
So another very great thing, which is coming into the picture, this is on the preview
That is a playbook. You could implement it. I implemented the first demo for Azure Security Playbook
If some resources, some guys, some state actors or maybe some hackers want to access my resources, how am I going to react on that
I would like some email to be sent, some notification or completely block out, dropping that resource, deleting that resource, et cetera
So I had that display for demo for Azure Security, which is basically a security thing
And I could use various versions, various workflow settings. And here I could add logic apps, which Nick was also mentioning, you know, what I need to do in that case of scenario and what access key I would like to provide
What alert I need in that case. So this is in preview, but it's really a very good feature
Keep looking, keep exploring that feature. It provides me log and diagnostic as well
So with that, I think I'm all set with my 40 minutes
I have whatever I need to discuss today. I have discussed about Azure Security
If you want to learn more about Azure Security, there are a couple of channels where you could connect me
You could connect me on my website, which is Deepakashic.com. You reach over there, contact me
I'm super happy to help you with consulting. If your organization requires any Azure or cloud-related details, I would love to discuss with you guys
Just go to my website, click contact, send me an email. Or you could also contact me by Twitter
My Twitter handler is Think4Deepak. You could reach me over there as well
I'm super happy to connect you guys on LinkedIn as well. So usually I'm very active on LinkedIn and Twitter
So that is my favorite area where I would love to connect
So you could come to my website, look over various resources. I have a lot of articles you could look over in January, December, every month-wise
You could look over articles if they are meeting your requirements or if that is something you want to discuss
I'm super happy to connect you guys. But if that is not what you are looking for, don't hesitate to connect me
I would love to share my true sense. I would love to discuss
We could plan a meeting and we could connect