This document provides an overview of monitoring, managing, and securing Microsoft Azure. It discusses various Azure services for monitoring like Azure Monitor and Application Insights. It also covers managing Azure through tools like Azure Advisor, log analytics, and Azure governance features. Finally, it outlines steps for securing Azure such as using Azure Active Directory, Privileged Identity Management, and security-related services. The document provides guidance on skills needed for working with Azure and recommends certifications and additional learning resources.

1. A lap around monitoring, managing
and securing Microsoft Azure

2. I help companies move securely to the cloud.
Hey there, I’m Jussi!
@JussiRoine

4. All Azure services, super briefly!
Understanding Microsoft Azure
Monitoring
Securing
Where to go from here?
Collect all the logs
I don’t trust the cloud
Survival guide
Managing
99 problems but a subscription ain’t one

5. Understanding Azure

6. But there’s a server
somewhere!
I know there is!

7. Microsoft Azure

8. Platform Services
Infrastructure Services
Compute Storage
Datacenter Infrastructure
Application Platform
Web
Apps
Mobile
Apps
API
Apps
Notification
Hubs
Hybrid
Cloud
Backup
StorSimple
Azure Site
Recovery
Import/Export
Networking
Data
SQL
Database DocumentDB
Redis
Cache
Azure
Search
Storage
Tables
SQL Data
Warehouse
Azure AD
Health Monitoring
Virtual
Network
Express
Route
Blob Files DisksVirtual Machines
AD Privileged
Identity
Management
Traffic
Manager
App
Gateway
Operational
Analytics
Compute Services
Cloud
Services
Batch
RemoteApp
Service
Fabric
Developer Services
Visual Studio
Application
Insights
VS Team Services
Containers DNS
VPN
Gateway
Load
Balancer
Domain Services
Analytics & IoT
HDInsight Machine
Learning Stream Analytics
Data
Factory
Event
Hubs
Data Lake
Analytics Service
IoT Hub
Data
Catalog
Security &
Management
Azure Active
Directory
Multi-Factor
Authentication
Automation
Portal
Key Vault
Store/
Marketplace
VM Image Gallery
& VM Depot
Azure AD
B2C
Scheduler
Xamarin
HockeyApp
Power BI
Embedded
SQL Server
Stretch Database
Mobile
Engagement
Functions
Intelligence
Cognitive Services Bot Framework Cortana
Security Center
Container
Service
Queues
VM
Scale Sets
Data Lake Store
Dev/Test Lab
Integration
BizTalk
Services
Service Bus
Logic
Apps
API
Management
Media & CDN
Content
Delivery
Network
Media
Services
Media
Analytics

10. Required skills for an IT Pro in 2000
Install Windows XP
Install Windows 2000 Server
Install IIS
Install SQL Server 2000
Install & configure Active Directory
Install hotfixes and service packs
Install other business software

11. Required skills in 2018
▪ Microsoft Azure: IaaS, PaaS
▪ ARM templates, maybe Terraform also
▪ PowerShell, in all its variations
▪ Git, GitHub, Azure DevOps
▪ Docker and Containers and Kubernetes and basically everything
▪ Windows Server
▪ Active Directory and Azure Active Directory
▪ Windows 10 management
▪ System Center and Intune and co-management
▪ Office 365: Exchange Online, SharePoint Online, Teams etc.
▪ Security *.*
▪ Networking
▪ Browsers & Office clients

12. On average, 30 % of employees do not willingly study or learn new skills at work,
unless specifically told to do so.
Keep up!
azure.microsoft.com
/en-us/blog/
Azure Advisors
azure.microsoft.com
/en-us/updates/
docs.microsoft.com/
learn/
Conference decks &
videos
eLearning academy.microsoft.com/
professional-program/
Follow Azure PG people

13. Managing
and monitoring Azure

15. Tools for auditing and monitoring

16. Azure Monitor

17. Application Insights
Analytics and insights to your application performance and failures

18. Azure Advisor
Recommendations to reliability, security, performance and cost

19. Log analytics
Available now as integrated feature in Azure
Monitor
Collect telemetry and other data from
multiple sources
Query for advanced analytics
New: Monitor VMs: Health, performance,
map

20. Demo
Application Insights
Azure Monitor

21. Azure
Governance
Azure Policy
Azure Cost
Management
Azure
Blueprints
Azure
Resource
Graph

24. Company Blueprint
Other Templates
Policies
Foundational Templates
RBAC
Scripts
Curated Marketplace

25. Securing Azure

26. Securing Privileged Access
Office 365 Security
Rapid Cyberattacks
(Wannacrypt/Petya)
https://aka.ms/MCRA Video Recording Strategies
SQL Encryption &
Data Masking
Office 365
Dynamics 365
+Monitor
Data Loss Protection
Data Governance
eDiscovery

27. Security-related services
Active Directory
Advanced Threat Analytics
Firewall, proxy, VLANs etc.
Microsoft Identity Manager
Data Loss Prevention
Threat Intelligence
Secure Score
Compliance Manager
Connect Health
Cloud App Security
Network Security Group
Cloud App Security
Identity Protection
Privileged Identity Management
Azure Active Directory
Conditional Access
Log Analytics
Security Center
Azure MFA
Azure Information Protection
Intune
Customer Key
Advanced Threat Protection

28. First steps to securing your cloud services

29. Getting rid of static admin roles with Azure AD
Privileged Identity Management (PIM)
▪ Instead of granting permanent admin privileges, PIM
allows ad-hoc & just-in-time admin roles
▪ Users can request for new privileges for predefined duration
▪ Scans for fixed admin roles and changes them to temporary
roles
▪ Admin roles become non-permanent
▪ Duration can be set from 1 hour to 72 hours
▪ Can enforce MFA during role grant
▪ Approval workflows for new privilege requests
▪ Central view & management for all admins roles
throughout Azure and Office 365
”Just-in-time” administration privileges for users on request

30. Further steps towards securing your Azure

31. Demo
Security walkthrough

32. Where to go from here?

33. Certifications

34. 2
3
4
5
6
Understand Azure Active
Directory
Features, licenses, limitations and
capabilities and how to setup stuff.
Work with ease in both PaaS and
IaaS
You often need both.
Be vigilant with security, but
keep it reasonable
Utilize good practices, employ security
services and make an effort. Operational
and design time checklists are great!
Make hybrid possible, but drive
towards the cloud
Many companies still need on-premises, like it or
not.
Create proof of concepts and use
preview features
You need to see and anticipate for the future.
Unlearn when needed; stick to legacy
when it makes more sense.
No need to change your framework every week.
But do not stick with Visual Basic 6 and Windows
NT just because you know them well.
1
Survival guide

35. Structured review of Azure
bit.ly/AzReview
Azure Security Best Practices
bit.ly/AzSecBP
Azure Operational Security
bit.ly/AzOpSec
Azure monitoring at scale
bit.ly/AzMon