AzureFunBytes Episode 57 - Securing @Azure with @shehackspurple
Tags: infosec, security, azure, cloud
Published: 2021-09-16 19:17:34

AzureFunBytes is a weekly opportunity to learn more about the fundamentals and foundations that make up Azure. It's a chance for me to understand more about what people across the Azure organization do and how they do it. Every week we get together at 11 AM Pacific on [Microsoft LearnTV](https://cda.ms/226) and learn more about Azure.

![AzureFunBytes animation](https://res.cloudinary.com/practicaldev/image/fetch/s--Z7BxBMz1--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_66%2Cw_880/https://dev-to-uploads.s3.amazonaws.com/uploads/articles/j2xzw2g664tj31jij13t.gif)

On this week's AzureFunBytes Episode 57, Securing Azure, I welcome [Tanya Janca](https://twitter.com/shehackspurple) from [We Hack Purple](https://wehackpurple.com/) to give an overview of security basics within Azure!

Tanya Janca, also known as SheHacksPurple, is the best-selling author of ‘[Alice and Bob Learn Application Security](https://AliceandBobLearn.com )’. She is also the founder of We Hack Purple, an online learning academy, community and podcast that revolves around teaching everyone to create secure software. Tanya has been coding and working in IT for over twenty years, won countless awards, and has been everywhere from startups to public service to tech giants (Microsoft, Adobe, & Nokia). She has worn many hats; startup founder, pentester, CISO, AppSec Engineer, and software developer. She is an award-winning public speaker, active blogger & streamer and has delivered hundreds of talks and trainings on 6 continents. She values diversity, inclusion and kindness, which shines through in her countless initiatives. 

Our agenda:

* Tanya made an Azure course
* Why it’s important to secure your Azure instance
* Let’s investigate a security incident
* How could we have prevented this?
* Security center overview

{% youtube CLdCauszCt4 %}

[00:00:00 - Opening](https://youtu.be/CLdCauszCt4)
[00:05:23 - Let's meet Tanya](https://youtu.be/CLdCauszCt4?t=323)
[00:15:40 - We Hack Purple](https://youtu.be/CLdCauszCt4?t=940)
[00:28:28 - Azure Security Center](https://youtu.be/CLdCauszCt4?t=1700)
[00:36:47 - Looking at a security alert](https://youtu.be/CLdCauszCt4?t=2207)
[00:40:11 - Secure score](https://youtu.be/CLdCauszCt4?t=2411)
[00:45:44 - Azure Bastion](https://youtu.be/CLdCauszCt4?t=2744)
[00:54:28 - Can you customize recommendations to fit your own baselines?](https://youtu.be/CLdCauszCt4?t=2744)

### Azure Security Center 

[Azure Security Center](https://cda.ms/2Hz) provides unified security management and advanced threat protection across hybrid cloud workloads.  By implementing Security Center into your workloads, you can use best practices to strengthen the security posture of your apps and IT infrastructure.  

[From the Azure Security Center documentation](https://cda.ms/2HB):

*Keeping your resources safe is a joint effort between your cloud provider, Azure, and you, the customer. You have to make sure your workloads are secure as you move to the cloud, and at the same time, when you move to IaaS (infrastructure as a service) there is more customer responsibility than there was in PaaS (platform as a service), and SaaS (software as a service). Azure Security Center provides you the tools needed to harden your network, secure your services and make sure you're on top of your security posture.*

*Azure Security Center addresses the three most urgent security challenges:*

- ***Rapidly changing workloads** – It's both a strength and a challenge of the cloud. On the one hand, end users are empowered to do more. On the other, how do you make sure that the ever-changing services people are using and creating are up to your security standards and follow security best practices?*
- ***Increasingly sophisticated attacks** - Wherever you run your workloads, the attacks keep getting more sophisticated. You have to secure your public cloud workloads, which are, in effect, an Internet facing workload that can leave you even more vulnerable if you don't follow security best practices.*
- ***Security skills are in short supply** - The number of security alerts and alerting systems far outnumbers the number of administrators with the necessary background and experience to make sure your environments are protected. Staying up-to-date with the latest attacks is a constant challenge, making it impossible to stay in place while the world of security is an ever-changing front.*

*To help you protect yourself against these challenges, Security Center provides you with the tools to:*

- ***Strengthen security posture**: Security Center assesses your environment and enables you to understand the status of your resources, and whether they are secure.*
- ***Protect against threats**: Security Center assesses your workloads and raises threat prevention recommendations and security alerts.*
- ***Get secure faster**: In Security Center, everything is done in cloud speed. Because it is natively integrated, deployment of Security Center is easy, providing you with auto provisioning and protection with Azure services.*




------

Learn about Azure fundamentals with me!

Live stream is normally found on Twitch, YouTube, and [LearnTV](https://cda.ms/226) at 11 AM PT / 2 PM ET Thursday. You can also find the recordings here as well:

[AzureFunBytes on Twitch](https://twitch.tv/azurefunbytes)
[AzureFunBytes on YouTube](https://aka.ms/jaygordononyoutube)
[Azure DevOps YouTube Channel](https://www.youtube.com/channel/UC-ikyViYMM69joIAv7dlMsA)
[Follow AzureFunBytes on Twitter](https://twitter.com/azurefunbytes)

Useful Docs:

[Azure security fundamentals documentation](https://cda.ms/2Fs)
[Introduction to Azure security](https://cda.ms/2Ft)
[Azure Security Center](https://cda.ms/2FL)
[Azure Bastion](https://cda.ms/2FM)
[Learn Azure Security with Tanya Janca](https://aka.ms/WHPSec)
[Security services and technologies available on Azure](https://cda.ms/2Fr)
[We Hack Purple Academy](https://wehackpurple.com/)
[Alice and Bob Learn Application Security](https://AliceandBobLearn.com)
[Azure security best practices and patterns](https://cda.ms/2Fq)
[Tanya on Twitter](https://twitter.com/shehackspurple)
[SheHacksPurple](https://shehackspurple.ca)
[Tanya on YouTube](https://www.youtube.com/shehackspurple)
[Newsletter](https://newsletter.shehackspurple.ca)
[Tanya on LinkedIn](https://www.linkedin.com/in/tanya-janca)
[Tanya on Facebook](https://www.facebook.com/tanya.janca/)
[Free Community at We Hack Purple](https://community.wehackpurple.com)