Learning Objectives

• Configure security policies to classify, protect, and manage data
• Configure data retention for storage and databases
• Set up Azure SQL security features and auditing
• Learn how to configure storage account security and access
• Learn how to secure HDInsight clusters
• Configure Cosmos DB security
• Configure Data Lake security
• Learn good design features of an Azure application
• See how Azure App Services can secure your app
• See how a governance policy can help formalize security requirements

Intended Audience

• People preparing for Microsoft’s AZ-500 exam
• System administrators
• App developers

Prerequisites

• Experience with Microsoft Azure
• Experience with Office 365
• Basic knowledge of computer security principles
• Basic networking knowledge

SQL auditing allows you to record various types of database events; specifically, data access, data changes, schema changes, security exceptions, and changes to account, roles and permissions. The audit log data is written to append blobs associated with your subscription. Auditing can either be set up at the server level or per individual database. If you set up your auditing at the server level, there is no need to set it up at the database level, as this is a duplication. Having said that, there could be situations where you want to record different types of events for one database specifically that aren't being recorded for all the others on the server. Or maybe you want to use a different storage account or retention period for a particular database.