Skip to content
TrackPodcasts
educationApr 7, 202622:01pending

Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 8: Governance and Container Security

CyberCode Academy

About this episode

In this lesson, you’ll learn about Azure platform protection and governance strategies in Microsoft Azure:Azure Resource Manager (ARM)
  • Understanding Azure Resource Manager (ARM) as the control plane for Azure
  • Managing all resources through a single, consistent API
  • Ensuring standardized deployment, access, and configuration across environments
Access Control with Custom Roles
  • Extending RBAC with custom roles:
    • Defined using JSON
    • Granting fine-grained permissions
  • Example use case:
    • Allow restarting a VM without permission to delete it
Resource Protection Mechanisms
  • Using Resource Locks to prevent accidental changes:
    • Read Only → No modifications allowed
    • Cannot Delete → Prevents deletion
  • Applying locks across:
    • Users
    • Roles
    • Subscriptions
Policy Enforcement with Azure Policy
  • Using Azure Policy to enforce compliance
  • Controlling resource properties instead of user actions
  • Common policy use cases:
    • Restricting deployments to approved regions
    • Blocking risky configurations (e.g., public IPs on internal VMs)
    • Enforcing organizational standards
Container & Compute Security
  • Securing Azure Kubernetes Service (AKS):
    • Integrating with Azure AD for identity control
    • Using pod identities for secure service access
    • Applying network policies to control pod-to-pod traffic
  • Strengthening container security:
    • Enforcing least privilege
    • Isolating workloads
    • Managing secrets securely
Vulnerability Management
  • Scanning container images and running workloads for vulnerabilities
  • Leveraging third-party tools such as:
    • Aqua Security
    • Twistlock
  • Ensuring:
    • Continuous monitoring
    • Secure image pipelines
    • Runtime protection
Exam Preparation & Key Concepts
  • Reinforcing knowledge with AZ-500 exam scenarios
  • Key focus areas:
    • Azure Update Management
    • Docker Content Trust
    • Governance vs access control differences
Key Takeaways
  • ARM provides centralized and consistent resource management
  • Governance is enforced through roles, locks, and policies
  • Container and compute security require identity, isolation, and monitoring
  • Platform protection depends on combining control, visibility, and enforcement
This lesson marks a major milestone in mastering Azure platform protection, covering critical concepts required for both real-world security and the AZ-500 certification.

You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy

Get every episode summarized

Each time CyberCode Academy publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.

Email me new episodes

Free for 3 shows. No card needed.

Hosts & guests

No transcript yet

This episode has not been transcribed. Request it and it moves to the front of the queue.

Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 8: Governance and Container Security

CyberCode Academy

0:00
22:01

More episodes

More from CyberCode Academy

View all episodes →

Course 42 - Mobile Malware Analysis Fundamentals | Episode 14: Architecture and...

CyberCode Academy

Sep 10, 202624:31completed

Course 42 - Mobile Malware Analysis Fundamentals | Episode 13: Designing and Arc...

CyberCode Academy

Sep 9, 202617:34failed

Course 42 - Mobile Malware Analysis Fundamentals | Episode 12: Dynamic Analysis...

CyberCode Academy

Sep 8, 202628:08completed

Course 42 - Mobile Malware Analysis Fundamentals | Episode 11: Dynamic Analysis...

CyberCode Academy

Sep 7, 202624:15completed