Home Services Experience About Careers Blog Contact MANAGED SERVICES MultiVendor Cloud Security with the Microsoft Stack POSTED ON 29TH NOVEMBER 2021 BY JAMIE PULLINGER 29 Nov Over Last few years there has been a large rise in identity based attacks and breaches. Company network perimeters have been broken down with the rise of remote working and Bring-your-own-devices (BYOD), the modern workplace brings more security criteria for businesses to consider. (Image Credit: Microsoft) Alongside those mentioned above there is a large gap with multivendor Cloud and 3rd party applications where Identity management can add extra risk. Remembering passwords for three of the big cloud providers and any 3rd party apps your business uses can leave users, using either the same password or making passwords similar that are easy to crack and breach. It also leaves you looking at multiple security centres and configurations. Wouldn’t it be great if you could manage your entire Identity Access Management (IAM) suite in one place? Even better if one IAM suite had the ability to configure security controls, identify risk, automatically learn, and respond and keep your administrators up to speed with what’s going on across your cloud platforms? With Microsoft Zero Trust line-up this is all possible. For sure Single-Sign-On (SSO) has been around for a while, but in this blog I’m going to talk about multi-cloud SSO and the potential benefits Azure Active Directory (AAD) and Microsoft Defender for Identity – part of the Microsoft 365 (M365) Defender services suite – could bring to your organisation. We will leave device management, cloud apps security and information protection for future blogs. (Image Credit: Microsoft) Even without using a Zero Trust Principled Architecture, there are still security gains that can be made around Identity management. If we take the “Verify Explicitly” principle, where we would verify User Location and Device Health, we can apply some level of monitoring to any AAD user within our tenant. However, you’ve then got a separate account for the other big cloud providers outside of Azure, which you would need to monitor within those platforms’ IAM systems. So why not link AAD to AWS (as an example, other cloud platforms are available) and use AAD as your Identity provider, meaning your users have the simplicity of being able to use their standard Microsoft (AAD) account to login to the AWS Workspace. With this Setup: Roles are all defined within AWS meaning you can build specific roles to control User and Admin access to the levels you require. These Roles are pulled through to AAD and can be managed by the standard Group Role Assignment within AAD. Users then get added to the groups giving them the access they require. The beauty of using the Microsoft Defender for Identity is you can set up conditional access based around the criteria you select, Session Risk, User Risk and Locations to name (just a few.) You can utilise the Microsoft Security Information and Event Management (SIEM) called Azure Sentinel, that can sit over the top of the M365 Defender suite to re-assess these risk’s continually, meaning the level of security and control you can apply to AWS logins is to a safe standard you would like. Again, for sure this can be done in most cases with each platforms’ IAM Security Suite but it’s more management for administrators from a security point of view and more cost for the business due to running multiple IAM Security Suites. If you’re interested in how we could help you around IAM, please reach out to us! Related Posts Google Cloud Next The Cloud BI Transition: ETL & Data Movement in the Cloud Adatis has earned the Analytics on Microsoft Azure Advanced Specialisation This entry was posted in Managed Services and tagged AAD, Amazon Web Services, AWS, Azure, Azure Active Directory, Azure Sentinel, GCP, Google Cloud, IAM, Identity Access Management, Microsoft Defender, Single Sign On, SSO. JAMIE PULLINGER Azure Logic Apps B2B EDI integration capabilities MultiVendor Cloud Security with the Microsoft Stack Over Last few years there has been a large rise in identity based attacks and 29 Nov Azure Logic Apps B2B EDI integration capabilities One of the standard and most commonly used suites of protocols for B2B data transfer 02 Nov How digital transformation can reshape the travel and transportation industry The travel and transportation sector has been severely affected since the start of the Covid-19 01 Nov Create Integration Services (SSIS) solution One of our clients provided us with a bunch of Integration Services packages for upgrade. 28 Oct Leave a Reply Your email address will not be published. Required fields are marked * Comment Name * Email * Website About Here the Adatis team share their musings and latest perspectives on all things advanced data analytics. Categories Categories Select Category Business Intelligence (246) Business Transformation (39) Company Culture (25) Data Analytics (109) Data Architecture (79) Data Architecture, DevOps & Governance (6) Data Engineering (225) Data Science (48) Data Strategy (13) Data Visualisation (100) DevOps & Governance (29) Machine Learning (26) Managed Services (16) Modern Data Warehouse (55) News and Events (107) Power BI (28) Project Management (7) Thought Leadership (37) Uncategorised (3) Adatis Authors Jeremy Kashel (86) Sacha Tomey (84) Tim Kent (68) Martyn Bullerwell (50) Callum Green (47) Ust Oldfield (42) Jonathon Eve-OConnor (31) Simon Whiteley (27) Jose Mendes (25) Catherine Sachdev (25) Tristan Robinson (23) Nigel Meakins (17) Jason Bonello (15) Matt How (14) Dan Perrin (13) Sophie Marshall (11) Lazaros Viastikopoulos (10) Calvin Ferns (10) Dan Evans (10) Ben Jarvis (9) Martin Philpott (9) Kalina Ivanova (9) Günter Richter (9) Terry Mc Cann (8) Chris Uren (8) Zach Stagers (8) Piotr Starczynski (7) Shane Grimes (7) Richard Whitehead (7) Matt Willis (7) Tino Zishiri (7) Hugh Freestone (6) Jeffin Mathew (6) Dan Fitton (6) Emma Stewart (6) Alexandru Malanca (5) Jonathan Jones (5) James Russell (5) Nick Baladi (5) Francesco Sbrescia (5) Tom Jordan (5) David Stelfox (5) Graham Thelwall (5) Alex Aleksandrov (5) Jonathan Harding (5) George Cable (4) Scott Hudson (4) Tori Tompkins (4) Dave Stokes (4) Alex Lai (3) Lyubomir Lirkov (3) BILateral (3) Ivan Vazharov (3) Piotr Mucha (3) Tas Mazid (2) Neil Dobner (2) Jonathan Hill (2) Victor Mendes (2) Alex Kordbacheh (2) Plamena Mincheva (2) Jonathan D'Aloia (2) David Morrison (2) Liam Doyle (2) Shaun Ryan (2) Magdalena Bakalova (2) Simon Mattison (2) Emma Jobling (2) Cameron Mc Lurcan (2) Viktoriya Ivanova (2) Tony Adeyemi (1) Harry Mc Lellan (1) Florian Held (1) Dan Bilsborough (1) Samuel Rapier (1) Iva Rozelin (1) Chewar Siwaily (1) Lyuben Tomev (1) Jamie Pullinger (1) Eva Szokol-Humay (1) Tongai Matongorere (1) Michelangelo Rubino (1) Donna Bavin (1) Steve Purnell (1) Janeta Parakosova (1) Ella Zheng (1) Tag Cloud AI Analysis Services Automation Azure Azure Databricks Azure Data Factory Azure DataWarehouse Big Data Business Intelligence C# company culture Dashboards data analytics Databricks Data Lake Data Science Data Warehousing DAX DevOps ETL Excel Infrastructure Machine Learning Master Data Management Master Data Services MDM MDS MDX PerformancePoint PowerBI Power BI PowerBIDesktop PowerPivot Power Query Python R Reporting Services SQL SQL Server SQL Server 2005 SQL Server 2008 SSAS SSIS SSRS Tabular Archives November 2021 (3) October 2021 (5) September 2021 (5) August 2021 (3) July 2021 (6) June 2021 (3) May 2021 (7) April 2021 (7) March 2021 (3) February 2021 (5) January 2021 (3) December 2020 (7) November 2020 (5) October 2020 (6) September 2020 (11) August 2020 (6) July 2020 (11) June 2020 (9) May 2020 (9) April 2020 (8) March 2020 (11) February 2020 (15) January 2020 (13) December 2019 (11) November 2019 (17) October 2019 (13) September 2019 (6) July 2019 (2) June 2019 (4) May 2019 (3) April 2019 (5) March 2019 (4) February 2019 (7) January 2019 (12) December 2018 (9) November 2018 (7) October 2018 (7) September 2018 (4) August 2018 (3) July 2018 (3) June 2018 (5) May 2018 (4) April 2018 (4) March 2018 (13) February 2018 (16) January 2018 (15) December 2017 (7) November 2017 (3) October 2017 (8) September 2017 (4) August 2017 (5) July 2017 (9) June 2017 (7) May 2017 (8) April 2017 (17) March 2017 (2) February 2017 (8) January 2017 (12) December 2016 (4) November 2016 (11) October 2016 (8) September 2016 (2) August 2016 (3) July 2016 (2) June 2016 (1) May 2016 (9) April 2016 (2) March 2016 (5) February 2016 (6) January 2016 (5) December 2015 (7) November 2015 (10) October 2015 (2) September 2015 (9) August 2015 (1) July 2015 (1) June 2015 (4) May 2015 (4) April 2015 (2) March 2015 (6) February 2015 (5) January 2015 (1) December 2014 (1) November 2014 (7) October 2014 (5) September 2014 (5) August 2014 (1) July 2014 (4) June 2014 (2) May 2014 (2) April 2014 (1) March 2014 (3) February 2014 (2) January 2014 (3) November 2013 (1) October 2013 (1) September 2013 (4) August 2013 (1) July 2013 (2) June 2013 (3) May 2013 (2) April 2013 (1) March 2013 (1) February 2013 (4) December 2012 (1) November 2012 (2) October 2012 (4) September 2012 (2) March 2012 (3) February 2012 (2) January 2012 (1) November 2011 (7) October 2011 (2) September 2011 (2) August 2011 (3) July 2011 (6) June 2011 (3) May 2011 (3) April 2011 (1) March 2011 (4) February 2011 (1) January 2011 (2) September 2010 (2) August 2010 (1) July 2010 (1) June 2010 (4) May 2010 (3) April 2010 (2) March 2010 (4) February 2010 (4) December 2009 (2) November 2009 (4) October 2009 (4) March 2009 (2) February 2009 (2) January 2009 (4) December 2008 (5) November 2008 (9) October 2008 (11) September 2008 (6) August 2008 (11) July 2008 (11) June 2008 (11) May 2008 (12) April 2008 (11) March 2008 (10) February 2008 (9) January 2008 (4) December 2007 (7) November 2007 (7) October 2007 (7) September 2007 (3) August 2007 (7) July 2007 (4) June 2007 (13) May 2007 (5) January 2007 (1) October 2006 (1) August 2006 (1) June 2006 (2) May 2006 (1) April 2006 (1) March 2006 (2) February 2006 (3) Recent Comments Jose Mendes on The Common Data Model in Azure Data Lake Storage – Power BI Dataflows Tomas on The Common Data Model in Azure Data Lake Storage – Power BI Dataflows Jose Mendes on The Common Data Model in Azure Data Lake Storage – Azure Data Services – Data Factory Data Flow Sing on The Common Data Model in Azure Data Lake Storage – Azure Data Services – Data Factory Data Flow Piotr Starczynski on Power BI CI/CD with DevOps YAML Pipelines Office locations Get in touch Twitter latest Adatis London 8 Boundary Row London SE1 8HP Adatis Surrey Farnham Business Park Farnham GU9 8QT Adatis Bulgaria Work and Share Tintyava 15-17 Str., 1113 Sofia Adatis India Marigold IT Park, Marisoft 1, 2nd Floor Kalyani Nagar Pune – 411014. Maharashtra, India 0219 696 302(0) 44+ enquiries@adatis.co.uk Adatis @AdatisBI Over the last few years, there has been a large rise in identity-based attacks and breaches. This blog from #ManagedServices Consultant, Jamie, covers Using Microsoft Identity to manage MultiCloud Vendor and Security Risk. Home Services Experience About Careers Blog Contact 2021 © Adatis all rights reserved Company Number: 05727383 VAT Registered: GB 887761165 Privacy and Cookie Policy