TenT-Day08.pptx
Download as PPTX, PDF0 likes21 views
The document discusses the importance of governance in Azure to ensure consistency and security as environments grow. It covers Azure Policy for defining granular rules, Azure RBAC for controlling access, Blueprints for standardizing resource deployments, and Locks for preventing changes to complete environments. Governance becomes more crucial as the number of Azure resources increases to manage sprawl, costs, compliance and access. Policies define rules, RBAC controls permissions, Blueprints capture designs and relationships, and Locks protect finalized structures. Questions are welcomed on any of the governance topics.
![Role Based Access Control (RBAC)
Role Based Access Control
Who?
Security principal
User Group Service principal
Role assignment
Contributor
"Actions": [
"*"
],
"NotActions": [
"Auth/*/Delete",
"Auth/*/Write",
"Auth/elevate"
]
Marketing group
Pharma-sales
Resource group
What?
Role definition
Owner
Contributor
Reader
Backup Operator
Security Reader
Contributor
Reader Support Tickets
Virtual Machine Operator
Where?
Scope
Management group
Subscription
Resource group
Resource](https://image.slidesharecdn.com/tent-day08-230801125816-0b91e9e2/85/TenT-Day08-pptx-7-320.jpg)
More Related Content
Similar to TenT-Day08.pptx (20)
More from Johan Myburgh (6)
Recently uploaded (20)
![SketchUp Pro Crack [2025]-Free Download?](https://cdn.slidesharecdn.com/ss_thumbnails/tighteningeverybolt-fosdem2025-250224092147-cc175839-250305114942-10710f44-thumbnail.jpg?width=560&fit=bounds)
![AVG Antivirus Crack With Free version Download 2025 [Latest]](https://cdn.slidesharecdn.com/ss_thumbnails/tighteningeverybolt-fosdem2025-250224092147-cc175839-250305170448-f3a5e54e-250307161054-70f02df2-thumbnail.jpg?width=560&fit=bounds)
TenT-Day08.pptx
- 1. Day 8 Governance and Compliance Johan Myburgh 10Tuesdays To Azure Fundamentals https://aka.ms/AZ900LM https://aka.ms/AZ900EP08LM
- 2. Johan Myburgh Azure Technical Trainer (ATT) @ Microsoft UK Cloud Solution Architect Passionate about people and sharing knowledge jomyburg@microsoft.com @sayedimac aka.ms/johan
- 3. Day 8 Governance and Compliance Why governance? Azure Policy Azure RBAC Blueprints Locks
- 4. Why Governance Ensures environment runs the way it is indented to run Rules for operating environment Build into your process Sprawl Consistency Size, SKU, Region, etc. Cost Security Loose canons Without it
- 5. Azure Policies Granular rules you can apply to structure Evaluate/Report or stop deployments JSON definitions Group together as Initiatives
- 6. 50% off Exam Vouchers To qualify: Scan the QR code and fill out the form Add 17969 as the event ID You must attend 5 out of the 7 remaining sessions to be eligible for the voucher Please note this offer is only valid until 31st March 2023
- 7. Role Based Access Control (RBAC) Role Based Access Control Who? Security principal User Group Service principal Role assignment Contributor "Actions": [ "*" ], "NotActions": [ "Auth/*/Delete", "Auth/*/Write", "Auth/elevate" ] Marketing group Pharma-sales Resource group What? Role definition Owner Contributor Reader Backup Operator Security Reader Contributor Reader Support Tickets Virtual Machine Operator Where? Scope Management group Subscription Resource group Resource
- 8. Blueprints Design templates of: Resources Policies Roles (RBAC) Resource Groups / Structure Achieve Compliance Blueprints are versioned (small changes) Maintains relationship between design (Blueprint) and resources Track and Audit deployments
- 9. Resource Locks Locks down structure / resources when complete Ensure no simple mistakes slip in Should be part of your process 2 Types Delete Lock Read-only Lock (includes delete)
- 10. Summary Bigger your Azure footprint, the more important this becomes Policies Rules RBAC Permissions Blueprints includes all and resources Locks Read-only / Delete
- 11. Questions?
Editor's Notes
- #4: Role assignments Policy assignments Azure Resource Manager templates Resource groups
- #5: Fast IDentity Online (FIDO) standards based passwordless auth Standalone security key or key built-in
- #8: Fast IDentity Online (FIDO) standards based passwordless auth Standalone security key or key built-in
- #9: Fast IDentity Online (FIDO) standards based passwordless auth Standalone security key or key built-in
- #10: Fast IDentity Online (FIDO) standards based passwordless auth Standalone security key or key built-in
- #13: Thank the attendees, customer point-of-contact (PoC), and Microsoft PoC. Stage additional follow through on Parking lot items via Microsoft contacts.