Designing & Developing Secure Azure Solutions

Cloud workloads that run the core of a business face threats that older defenses were never built for. Security has to be designed into an Azure application from the start, not added later, and it has to be applied at every stage of the development lifecycle. This book, written by a group of experienced Azure security specialists, is both a practical guide for solving today's problems and a reference meant to stay useful for years.

The authors show how to get the most from the platform by combining several Azure security technologies at the application and network layers. Their coverage runs from the design and coding stages through testing, deployment, governance, and compliance. Topics include reducing attack surfaces, applying zero trust principles in cloud code, and using security patterns to address recurring problems. Readers learn to model threats early so that mitigations can be planned effectively, and to implement modern identity solutions using OpenID Connect and OAuth2.

Operational security gets equal attention. The book explains how to use Azure monitoring and logging, along with Kusto queries, and how to apply the best practices of the Azure Security Benchmark. Secure coding principles are covered in depth, including writing defensive code, repairing insecure code, and testing software for security flaws. Further chapters address Azure cryptography and confidential computing, risk and compliance programs, the security of CI/CD pipelines, and the protection of containers and networks.

The intended readers are anyone who designs, builds, or tests Azure applications: architects, developers, development managers, and testers. It also suits anyone who wants their cloud designs and code to be as secure as possible.