When using PaaS services in a hub-and-spoke architecture a best-practice approach is to use Private Endpoints for accessing those services. This allows us to ensure that these services are only available internally in the Azure VNET and not publicly available. For instance, with this example below. Where we have a Read more…
So been working a lot with Azure Firewall lately and wanted to adress some of the current limitations that is has. Azure Firewall is a layer 4 stateful firewall offering in Azure as a complete PaaS service. Using a native PaaS service for firewall management (outside of NSG rules) in Read more…
This is the next post on my blog posts on Microsoft Azure and Security Best Practices, my first post focusing on Identity can be found here –> http://msandbu.org/microsoft-azure-and-security-best-pratices-part-1-identity/ One of the main concerns about moving the workload to the public cloud is security, basically, you now can manage your entire infrastructure Read more…