Azure Architecture Explained
Chapter 1
As organizations continue to decentralize and outsource non-core functions to suppliers, it’s essential to establish trust between partners and have transparency in data management to ensure data security and privacy
IAM is a technology framework that helps organizations ensure that the right people have access to the right resources. IAM includes two main functions: authentication and authorization.
IAM capabilities have become the central pillar for cloud-based scenarios
A crucial piece of an IAM solution is its life cycle management capabilities.
Microsoft Cloud Adoption Framework (CAF) provides a set of best practices, guidance, and tools for different stages of cloud adoption, from initial planning to implementation and optimization
- it is not just for Azure, it can work with Amazon Web Services (AWS) and Google Cloud.
- includes a specific IAM design area that focuses on providing guidance and best practices for designing secure and scalable IAM solutions
Azure AD supports two distinct types of security principals: user principals, which represent user accounts, and service principals, which represent applications and services. A user principal encompasses a username and password, while a service principal (also referred to as an application object/registration) can possess a secret, key, or certificate.
Each employee’s Azure AD account would be associated with their Microsoft 365
https://learning-oreilly-com.dclibrary.idm.oclc.org/library/view/azure-architecture-explained/9781837634811/B19515_01.xhtml#_idParaDest-18
Comments
Post a Comment