microsoft/mcw-azure-security-and-management

MCW Azure security and management

Azure security and management

The content of this workshop has been consolidated with the Azure security, privacy, and compliance workshop and renamed Security baseline on Azure. This workshop is archived and is no longer being maintained. Content is read-only.

Contoso Holdings LLC is a multi-national holding company headquartered in Los Angeles, CA that owns 48 manufacturing companies located in North America, Europe, and Asia.

In this workshop, you will help Contoso Holdings design and implement the systems to manage their Azure infrastructure at scale. Per Roberto Milian, VP of Development and IT Operations, "Contoso's primary concern is how to best deploy, test, manage, monitor, patch, secure and troubleshoot these applications in Azure IaaS.”

Target audience

• Infrastructure Architect
• IT Professional
• DevOps Engineer
• Cloud Solution Architect

Abstract

Workshop

In this workshop you will learn to design solutions using Azure’s native security and management services. With increasing number of resources running in the cloud, enterprises will need to apply the right capabilities to secure and well manage their data and resources.

At the end of this workshop, you will be better able to design and implement security and management solutions in Azure including inventory tracking and management, application performance monitoring , preventative maintenance and application and security alerting.

Whiteboard design session

In this whiteboard design session, you will work in a group to examine Contoso's enterprise environment with resources hosted on both on-premises and Azure. In a small working team, you will whiteboard design how Azure Security Center, Key Vault, Update management, as well as Azure Monitor and Application Insights, can help secure and well manage applications and virtual machines. You will also have the opportunity to design governance through Azure Policy.

At the end of this whiteboard design session, you will be better able to design a security and management solutions in Azure including inventory tracking and management, application performance monitoring, preventative maintenance and application and security alerting.

Hands-on lab

In this hands-on lab, you will first deploy a simple web application and database to Azure IaaS VMs, using a Resource Manager Template and Azure Automation DSC. You will then configure a range of infrastructure management capabilities on this deployment, including Update Management, Security Center, Service Map, Change Tracking and Application Insights. You will use Azure Monitor to configure application alerts and send, via both email and mobile application notifications. You will also learn how to further investigate infrastructure status using Log Analytics queries. In doing so, you will learn both how to deploy these solutions and be introduced to their capabilities.

At the end of this hands-on lab, you will be better able to design, implement and use a wide range of infrastructure management systems in Azure.

NOTE: The setup tasks should be completed in advance of the hands-on lab to save deployment time.

Azure services and related products

• Azure Automation
• Azure Monitor
• Azure Log Analytics
• Change Tracking
• Update Management
• Security Center
• Service Map
• Application Insights
• Virtual machines

Related references

• Microsoft Cloud Workshop

mcw-azure-security-and-management's Issues

Blurry image

• Slide 30 - Notifications app screenshot is blurry. Should be replaced.
Whiteboard design session trainer presentation - Azure security and management.pptx

Lab guide is updated in branch

Lab guide is updated with updated instructions.

https://github.com/Microsoft/MCW-Azure-security-and-management

Archive unguided lab doc

@ciphertxt
Hi Scott,
Please create an Archive folder inside the Hands-on lab folder and place the HOL unguided lab there. Close this issue when complete.
Thanks!
Dawnmarie

Blurry image

https://github.com/Microsoft/MCW-Azure-Security-and-Management/raw/master/HOL/images/Handsonlabstep-by-step-Azuresecurityandmanagementimages/media/image180.png image is blurry

HOL step-by-step

Exercise 1, task 1, # 2 -
Instructions say Click +Create a resource, and type Automation.....
Image below it has +New....not +Create ??

PowerShell DSC scripts

The DSC scripts referenced in the HOL are not included in the repo.

Before the HOL document

Task 3 # 4 (line 151) image is not showing

HOL step-by-step

Line 165 - Doesn't look quite right. Not sure if there's supposed to be an image there, or if that's the image. If that's the correct image, there is no alt-text.

Content update scheduled

This package is scheduled for an update. Please review the contents of this repo and comment on this issue with suggested updates. All suggestions must be added to this issue by EOD Friday, November 9, 2018.

WDS trainer presentation - PPT

Slide 2 - Abstract on the ReadMe page does not match the abstract on the PPT slide.
Slide 11 - First bullet item has a period at the end of the sentence. MS Style guide states no end punctuation on bulleted items unless there are multiple sentences. (except question marks and colons).
Slide 15 - Remove period at the end of the second bullet item.
Slide 16 - Three of the icons do not have alt-text.
Slide 26 - Last two sentences need periods at the end (They aren't bullet items so punctuation is needed). Lower case A in Alerts. Last sentence, add a comma after diagnostics. Missing alt-text on image.
Slide 27 - Missing alt-text on image.
Slide 28 - Add a period at the end of the last sentence on the slide (not a bulleted item).
Slide 30 - Add either a period or a colon after "broken out by severity...
Slide 32 - Missing alt-text on right side image
Slide 35 - Remove punctuation on since sentence bullet lines. Is there supposed to be 4 bulleted items? It looks like Application Insights has many capabilities.... may be a different bullet point.
Slide 37 - the images you have in the PPT are different than the image used in the trainer guide

HOL - step-by-step

Line 355 - has an odd line of code that looks like it's making the numbering off - please review.

Line 371 - Doesn't look quite right. Not sure if there's supposed to be an image there, or if that's the image. If that's the correct image, there is no alt-text.

GUI has changed for Security Center: Missmatch in the screenshots & steps.

In HOL Step by Steps: Excercise 3, Task 2 Explore Security Center
There is missmatch in screenshots, steps as GUI has changed.
Can someone please review and update.

Powerpoint for design needs some updates

Work with Ben Di Qual and Albert Chew (albertc) to confirm what changes need to be made to the this.

Merge conflict

Hello,
All of the issues from my QC have been addressed and this one is ready to merge. I created a pull request but there are conflicts that I do not yet know how to resolve. Please resolve and merge branches.
Thank you!
Dawnmarie

Add Azure Monitor for containers in Microsoft Cloud Workshop: Containers and DevOps

Hi all, in the container and devops, I don't see monitoring for the deployment and AKS. Can we have that added? If you need help, please let me know. thanks,

Blurry image

MCW-Azure-Security-and-Management/HOL/images/Handsonlabstep-by-step-Azuresecurityandmanagementimages/media/image182.png image is too blurry to read.

Option for Install monitoring agent on your Virtual machines is missing in Azure portal under Security Center

Exercise 3 Task 2 Step 6 -> Click the option for Install monitoring agent on your Virtual machines. On the next screen, click Install agents to turn on automatic provision of the monitoring agent.
but didn't find this option under Security Center in Azure portal.

Can you please look into this and fix this?

HOL - unguided and step-by-step

Abstracts on documents do not match what is on the ReadMe page of the workshop.

FYI - I removed punctuation from bulleted items.

Diversify beyond Microsoft centric technology in scenario

needs a more heterogenous environment for customer examples. The PG team has already noted this and it would be great to include non SQL DBs, Linux distos and other things to highlight the way the security and management solution work across technologies.

Before the Lab document

Need to update to most current template - Document is missing title/updated date info, license information & TOC

Document name should be: Before the HOL - Azure security and management

MS Style guide states bulleted or numbered items should not have ending punctuation unless there are multiple sentences (except question marks and colons). I corrected on this document, it will be an expectation moving forward.

HOL step-by-step

Line 531 - Doesn't look quite right. Not sure if there's supposed to be an image there, or if that's the image. If that's the correct image, there is no alt-text.

Azure security and management obsolete content for Azure Monitor

Hi all, I am reading the azure security and management and see some obsolete information for Azure Monitor. AppInsights is part of Azure Monitor. Also, many insights products are missing suck as Azure Monitor for VM (VM Insights) and Container Insights. Let us know if you need help in the contents. Service Map is part of Azure Monitor for VM.

WDS student & trainer guides

Abstracts on the ReadMe page do not match the abstracts on the documents.