/images/nasan-avatar.jpeg

Securing Resources in Azure VMs with Microsoft Entra Private Access in a Hub-and-Spoke Architecture

I did a little Microsoft Entra Private Access Test setup. My goal was to test access to some private Resources hosted on Azure Virtual Machines with Microsoft Entra Private Access instead of VPN. Overview The test setup is illustrated below: Preview I have one Virtual Machine (VM) with a Windows File Share that I wish to access from my endpoint and I also want to be able to access this VM via RDP.

AzureAD App Registrations explained

Azure AD App registration Recently I had some talks with developers which made me to realize that I didn’t fully understand how App Registrations are working. I was aware that we are registering an app and allowing the app certain permissions but in detail I didn’t understand it. Why Azure AD App registration? Basically for every app where you want to use the Microsoft Identity Platform, you need to register your app.

SC-100 - Microsoft Certified Cybersecurity Architect Expert - MindMap Collection

Studying SC-100 In my recent self-study, I have been working through the Microsoft SC-100 learning path. One of the ways that I have been organizing and consolidating my learning is by creating mind maps of the key concepts and topics covered in the course. You can find some of those mind maps below: Design a Zero Trust strategy and architecture Build an overall security strategy and architecture: Preview Design a security operations strategy: Preview Design an identity security strategy: Preview Evaluate Governance Risk Compliance (GRC) technical strategies and security operations strategies Evaluate a regulatory compliance strategy Preview Evaluate Security Posture - Manage Risk Preview Design security for infrastructure Preview Design strategy for data and applications Preview Recommend security best practices Security best practices using Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmarks Preview