Azure
Introduction Today we will be deploying an Azure Virtual Machine with the SQL extension using Terraform. The SQL VM extension in Azure is awesome as it offers a multitude of nice features. It provides a flexible way to manage and configure your SQL Server instances running on Azure VMs. With
Azure
Introduction Web Application Firewall (WAF) is something we have touched on briefly before on Lindbergtech but it is time to write a bit more in-depth into this topic. WAF is a service within Azure that you can add ontop of your Application Gateway or Frontdoor deployments to provide a
Azure
Introduction In this post we will discuss internet access for Azure virtual machines. The most common method is using the implicit IP on VM, which assigns a dynamic public IP address to the virtual machine without you having to configure anything. However, this can cause issues with IP address changes
Azure
Microsoft recently announced that Microsoft Entra API-driven provisioning now is in public preview. This is great for several reasons as it lets you be more flexible with the way you manage identities in your organization. If you wish to have a single pane of glass for managing your identities
Azure
Azure Firewall is a firewall service in Azure that can do several things for you. It can inspect traffic flowing in and out of your environment, it can scale automatically depending on the load of traffic you experience and much more. It works with availability zones in your Azure Environment.
Azure
On September 1, 2023 the Malware Scanning add-on for Defender for Storage will be going generally available instead of preview. This is a great add-on which lets you protect your storage accounts and prevent malicious content from being uploaded and stored in your cloud storage. This is an
Azure
The main goal with Azure Chaos Studio is to introduce faults and problems into your environment in order to test your resiliency. In the same way that we configure backups we need to sometimes test restores, to be confident in our setup we need to test our other capabilites in
Azure
Whilst I was working on the Become a Defender for Cloud Ninja modules I found a link that has been very helpful to me in my day to day life working with Defender for Cloud. Future Kortor has written this community blog about the Defender for cost estimation and coverage
Azure
Introduction Soft-delete is a feature where as if you delete a vault or a vault object such as a key, secret or certificate you can restore it. For how long items remain in a soft-deleted stage is a configurable setting which ranges from 7-90 days. In short:
Azure
Introduction Your OS and data disks on your virtual machines are encrypted at rest by default, it is called Server-Side Encryption (SSE) and uses platform managed keys and there is no requirement of you to configure anything. However if you want to have more control over this there is
Azure
Introduction A common misunderstanding is that Microsoft Defender for Cloud (MDC) is expensive. And whilst a lot of the features inside the cloud workload protection platform (CWPF) comes with a price tag MDC also has the cloud security posture management (CSPM) feature which is free. A huge capability in the
Azure
App service cerfificates Managing certificates is a common task for an IT administrator and everyone has most certainly experienced downtime and service issues due to a certificate expiring and there was no system in place to make us aware of this, if you haven't I question if you