Isolating a Data Source

This Lesson is now outdated.

Using Network Isolation to Secure Azure Data looks at how to network components like firewalls, network security groups, and endpoints to enhance the protection of Azure data sources. This lesson focuses on the special case of Azure data resources delivered as platform-as-a-service, such as Azure SQL, storage accounts, Azure Cosmos DB, and the like. Unlike data sources hosted on a virtual machine or an Azure SQL Managed Instance, which are deployed within a virtual network, PaaS data sources appear to transcend network topology by not operating within a network.

Learning Objectives

• Overview of Azure networking elements
• Learn how network traffic flows to Azure data services
• Secure Azure data services with endpoints

Intended Audience

• Students who want to learn how to use Azure networking elements to further secure Azure data resources
• Students preparing for the AZ-500: Microsoft Azure Security Technologies exam

Prerequisites 

• Be familiar with Active networking concepts such as virtual networks, subnets, firewalls, network security groups, and endpoints
• It is recommended to have viewed Implementing Azure Network Security prior to taking this lesson