Azure security combines native capabilities and security practices to protect Azure identities, data, applications, infrastructure, and networking resources. It addresses threats such as ransomware, brute-force attacks, supply-chain attacks, vulnerabilities, misconfigurations, unauthorized access, and data theft while reducing the likelihood of breaches. section 1.1 section 1.9
Layer Azure security across the environment with services including:
- Microsoft Entra ID, Azure DDoS Protection Standard, Azure Firewall Standard and Premium, and Azure Web Application Firewall. section 1.1
- Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft Defender for DevOps, Azure Monitor, Azure Key Vault, and Azure Policy. section 1.1
- Combine technology with people, processes, shared-responsibility decisions, and continuous security-posture improvement. section 1.1 section 1.9
Layered defense
A resilient Azure environment applies more than one security service because evolving attacker tactics can defeat an isolated control. section 1.9
