This post explains how to enable Trusted Launch (TL) for Azure Virtual Machines to strengthen boot-level and runtime security. We discuss what Trusted Launch is, its key features like Secure Boot and vTPM, prerequisites for enabling it, and how to configure it via the Azure Portal or CLI. We also cover how to handle Gen1-to-Gen2 migrations and what to do if you need to revert from TL.
In the previous post, we troubleshoot the network-related issue connecting to Azure Cosmos DB, where the error messages are clear, leading us directly to the root cause. This article discusses the IAM-related issues where the error messages may look confusing.
This post discusses the Role-Based Access Control (RBAC) model for Azure Key Vault, which Microsoft recommends to strengthen security by clearly separating security responsibilities from administrative tasks. RBAC ensures that users holding 'Contributor' roles cannot grant themselves unauthorized access, and offers advantages such as a unified access approach across Azure services. I also provide a detailed table showing the necessary IAM roles required for accessing keys, secrets, and certificates in Azure Key Vault, concluding with my opinion on transitioning existing vaults.
The post discusses how to securely deploy an Azure Function with a storage account, focusing on securing storage via Virtual Network (VNet) integration and automation using ARM templates and Terraform.
JSON Web Tokens (JWTs) are a secure and compact method for transmitting information between parties as JSON objects. They are widely used for authentication and authorization. This article explains the structure of JWTs and how they work, and provides practical examples of using JWTs.