/az-secu-wrkshp

Microsoft Azure Security Workshop

Microsoft Azure Security Workshop

Date: 12/07/2017 Author: Hyunsuk Shin (hyssh@microsoft.com)

Goal

Implement a secure cloud environment for SQL Server Virtual Machine.

Workshop Scenario

There are multiple ways to attack or still data from servers. On the other hands, there are also many services to protect data from variety of threat. To have a safe environment multiple level of protection should be considered and implemented. Also monitoring is important as well. For a secure cloud environment, you can leverage many Azure Services to protect data from different level of attacks. For example, simple you can use Network Security Group to control network access to a Virtual Machine. Or you can use Key Vault to encrypt database on the Virtual Machine.

Architecture

Following is a sample architecture you are going to build in this lab.

Final Architecture

Agenda

>> Lab #01. Create Resource Group

>> Lab #02. Create Virtual Network

>> Lab #03. Create Network Security Group

>> Lab #04. Create Key Vault

>> Lab #05. Create SQL Server Virtual Machine

>> Lab #06. Encryt Database (TDE)

>> Lab #07. Backup Virtual Machine

>> Lab #08. Restoure data from Backup Vault

>> Lab #09.

>> Lab #99. Remove Resources


Tips for Hands on Lab

Make your own Azure Portal Dashboard

Please follow next two steps to create your own dashboard first.

  1. Log on Azure portal.

  2. Click '+ New Dashboard' on the portal.

alt text

Change name of the dashboard and click 'Done customizing' to save name. And you'll see empty dashboard.

alt text


Pin to dashboard

When you create resource you'll see 'Pin to dashboard'. Check the box when you create a resource so you can have short cut to access to a resource.

alt text


Use search to find your resource or Azure service

To find your specific resource you can use search at the Azure portal.

alt text


>> NEXT