Search for a command to run...
Zero Trust is not only for the identity layer; it's for all layers.
I’m Amir Rouhanipoor, an IT Consultant specializing in Azure and cloud solutions. I help organizations streamline their IT and drive growth through secure, efficient cloud technologies.
No comments yet. Be the first to comment.
The SC-100 certification, officially called Microsoft Certified: Cybersecurity Architect Expert, is designed for professionals who specialize in cybersecurity strategies and architecture.
A Rapid Modernization Plan Zero Trust Rapid Modernization Plan (RAMP) is an ongoing project focusing on three key areas: User Access and Productivity: Control and secure user access User Account: Keep user accounts passwordless with MFA to secure t...
PowerShell Script for VM Size Comparison This script lists all session hosts with their host pool, VM name, and VM size across all host pools(loop through multiple resource groups): Connect-AzAccount # Get all host pools $hostPools = Get-AzWvdHostPo...
M03 - Unit 4: Configure an ExpressRoute Gateway Exercise Scenario To connect your Azure virtual network to your on-premises network using ExpressRoute, you must first create a virtual network gateway. A virtual network gateway serves two key purposes...
M02-Unit 3 Create and configure a virtual network gateway Scenario You will configure a VPN gateway to securely connect CoreServicesVnet (East US) and ManufacturingVnet (North Europe) using VNet-to-VNet VPN. Task 1: Create CoreServicesVnet and Manuf...
Introduction Azure ExpressRoute is a private, enterprise-grade connection that enables secure and reliable network connectivity between your on-premises infrastructure and Microsoft’s global network. It bypasses the public internet and provides high ...
You need to create three virtual networks: 1. CoreServicesVnet Region: East US Purpose: Main network (web services, databases, shared services like DC/DNS). Connectivity: Needs VPN connection to on-premises. Address Space: Large (because of expe...
Security-focused Cloud & Automation Engineer with a Master’s in Computer Science and 6+ years of experience automating and supporting enterprise IT environments across multi-site corporate and operational infrastructures. Proficient in Python scripting, Azure infrastructure, Windows Server, and identity management. Skilled in integrating third-party platforms, securing configurations, and streamlining operations. Currently pursuing the Cybersecurity Architect Expert certification with a strong focus on cloud security and automation.
Identity
Users and workloads
Authentication methods
Least privileged access
Endpoints
Applications
Shadow IT (Check if users are using forbidden apps)
App permissions
User actions (Monitor user actions)
Network
Traffic segmentation
Secure protocols
Inspection (Layer 3 to layer 7)
Monitoring
Infrastructure
Servers(e.g. VMs)
Containers
PaaS (e.g., App Services, SQL Databases)
Serverless (Azure Functions, Logic Apps)
Data(Most important assets**)**
First, discover and locate the data
Classify data
Data access control
DLP (Data Loss Prevention)
for more: https://learn.microsoft.com/en-us/security/zero-trust/deploy/overview