DYI Azure Security Assesment

### Practical Security Auditing for Microsoft Azure At 00:00, application security expert Tanya Janca delivers a practical, step-by-step guide to conducting comprehensive security assessments of Microsoft Azure cloud subscriptions without disrupting production services.

### Scoping and Stakeholder Communication At 06:00, Janca highlights the operational etiquette of cloud auditing. Security assessors must establish transparent rules of engagement with internal system administrators to ensure audit activities do not trigger unintended service outages or operational alarm.

### Benchmarking with Azure Security Center and Policies At 12:01, the speaker explores built-in governance tools. She demonstrates auditing Azure environments against the CIS Azure Foundations Benchmark using Azure Security Center, highlighting common oversights such as unencrypted storage blobs, exposed management endpoints, and unforced multi-factor authentication (MFA).

### Virtual Machine Hygiene and Disk Encryption At 18:01, Janca examines compute security, auditing unattached virtual disks, checking OS image patch cadences, and verifying that virtual machine storage volumes are protected by Azure Key Vault-managed encryption keys.

### Network Security Groups and Perimeter Defense Concluding between 24:02 and 30:04, Janca addresses perimeter network architecture. She demonstrates auditing Network Security Groups (NSGs) to close public RDP (port 3389) and SSH (port 22) exposures, and details configuring Web Application Firewall (WAF) policies on Azure Application Gateways to protect cloud services against OWASP Top 10 vulnerabilities.

(AI summary — Gemini Flash)