Azure Governance - #4 - Microsoft Defender for Cloud | Overview

แชร์
ฝัง
  • เผยแพร่เมื่อ 11 ก.ย. 2024

ความคิดเห็น • 7

  • @mosksky
    @mosksky 5 ปีที่แล้ว +1

    Comment about JIT:
    I created Application security group, then added AppSG to the NICs of two VMs (even different vNets), enabled JIT from one of the VM. By looking to the Networking Inbound port rules i can see that second VM also has JIT rule propagated.
    The only differences is that the Destination IP is the private IP of the VM which i've added to JIT.
    Not sure if that's a bug or by design, but would be really great to restrict Users access to the Web Site (cluster vm in the LB backend pool) by using JIT with destination to the Application security group
    6:21
    27 Subscriptions
    azure boot camp (bravo) has 58 resources - what are those? Objects in that subscription?
    In my case it shows 17, but from navigation/subscriptions/resources i actually have 81

    • @mosksky
      @mosksky 5 ปีที่แล้ว +1

      Got my JIT questions answered, the reason why is that both VMs belongs to the same NSG (since destination is only to the VM requesting access to, other VM is still blocked) - has nothing to do with APSG, JIT works as expected

    • @AzureAcademy
      @AzureAcademy  4 ปีที่แล้ว +1

      thanks for pointing this out!

    • @pokemon_france
      @pokemon_france 4 ปีที่แล้ว +1

      @@AzureAcademy what about Azure sécurity availbility dr bcm

    • @AzureAcademy
      @AzureAcademy  ปีที่แล้ว +1

      What about it?

  • @vladimirnekic3241
    @vladimirnekic3241 2 ปีที่แล้ว +3

    Shame this is too old and outdated to even watch and or follow along. Next...

    • @AzureAcademy
      @AzureAcademy  2 ปีที่แล้ว +1

      Really…how so? The largest difference is the name is not security center?
      Give me a list and I will remake it