Isolating a Data Source

5m 32s

Using Network Isolation to Secure Azure Data looks at how to network components like firewalls, network security groups, and endpoints to enhance the protection of Azure data sources. This lesson focuses on the special case of Azure data resources delivered as platform-as-a-service, such as Azure SQL, storage accounts, Azure Cosmos DB, and the like. Unlike data sources hosted on a virtual machine or an Azure SQL Managed Instance, which are deployed within a virtual network, PaaS data sources appear to transcend network topology by not operating within a network.

Learning Objectives

  • Overview of Azure networking elements
  • Learn how network traffic flows to Azure data services
  • Secure Azure data services with endpoints

Intended Audience

  • Students who want to learn how to use Azure networking elements to further secure Azure data resources
  • Students preparing for the AZ-500: Microsoft Azure Security Technologies exam


  • Be familiar with Active networking concepts such as virtual networks, subnets, firewalls, network security groups, and endpoints
  • It is recommended to have viewed Implementing Azure Network Security prior to taking this lesson
About the Author
Learning paths

Hallam is a software architect with over 20 years experience across a wide range of industries. He began his software career as a  Delphi/Interbase disciple but changed his allegiance to Microsoft with its deep and broad ecosystem. While Hallam has designed and crafted custom software utilizing web, mobile and desktop technologies, good quality reliable data is the key to a successful solution. The challenge of quickly turning data into useful information for digestion by humans and machines has led Hallam to specialize in database design and process automation. Showing customers how leverage new technology to change and improve their business processes is one of the key drivers keeping Hallam coming back to the keyboard. 

Covered Topics