IT Best Practices - Microsoft Press – serie

Deliver microservices architecture, step-by-step: from defining business problems through development, deployment, and monitoring

Increasingly, organizations are modernizing application development by integrating open source technologies into a holistic architecture for delivering high-quality workloads to the cloud. This is a complete, step-by-step guide to building flexible microservices architecture by leveraging Microsoft Azure cloud services, together with key open source technologies such as Java, Node.JS, .NET Core and Angular. Through a realistic case study project, expert Microsoft engineers Ovais Mehboob Ahmed Khan and Arvind Chandaka guide you through every step of technical implementation required to achieve value: establishing end-to-end infrastructure, developing cloud-native applications, automating deployments, monitoring operations, and more.

Microsoft engineers Ovais Mehboob Ahmed Khan and Arvind Chandaka show how to:

Define application features and business requirements, and map them onto microservices using modeling techniques Design microservices solution architecture that enables high-quality workloads Develop an application front-end, and build microservices with open source technologies Leverage Azure Kubernetes Services for Docker container orchestration Use various patterns to build reliable and resilient microservices Enforce microservices app security, and use Azure AD B2C for user authentication/authorization Establish an API gateway that provides a unified “front door” to back-end microservices Set up continuous integration and deployment with Azure DevOps Monitor microservices with Azure Monitor and Azure Application Insights

About This Book

For everyone interested in developing microservices, including architects, engineers, and consultants

Will help IT professionals build new applications, modernize existing systems, migrate workloads, improve app management, and more.

Master a complete strategy for protecting any Azure cloud network environment!

Network security is crucial to safely deploying and managing Azure cloud resources in any environment. Now, two of Microsoft's leading experts present a comprehensive, cloud-native approach to protecting your network, and safeguarding all your Azure systems and assets. Nicholas DiCola and Anthony Roman begin with a thoughtful overview of network security’s role in the cloud. Next, they offer practical, real-world guidance on deploying cloud-native solutions for firewalling, DDOS, WAF, and other foundational services – all within a best-practice secure network architecture based on proven design patterns.

Two of Microsoft's leading Azure network security experts show how to:

Review Azure components and services for securing network infrastructure, and the threats to consider in using them Layer cloud security into a Zero Trust approach that helps limit or contain attacks Centrally direct and inspect traffic with the managed, stateful, Platform-as-a-Service Azure Firewall Improve visibility into Azure traffic with Deep Packet Inspection Optimize the way network and web application security work together Use Azure DDoS Protection (Basic and Standard) to mitigate Layer 3 (volumetric) and Layer 4 (protocol) DDoS attacks Enable log collection for Firewall, DDoS, WAF, and Bastion; and configure NSG Flow Logs and Traffic Analytics Continually monitor network security with Azure Sentinel, Security Center, and Network Watcher Customize queries, playbooks, workbooks, and alerts when Azure's robust out-of-the-box alerts and tools aren't enough Build and maintain secure architecture designs that scale smoothly to handle growing complexity

About This Book

For Security Operations (SecOps) analysts, cybersecurity/information security professionals, network security engineers, and other IT professionals For individuals with security responsibilities in any Azure environment, no matter how large, small, simple, or complex

Discover and apply the Azure platform's most powerful data solutions

 

Cloud technologies are advancing at an accelerating pace, supplanting traditional relational and data warehouse storage solutions with novel, high-value alternatives. Now, three pioneering Azure Data consultants offer an expert introduction to the relational, non-relational, and data warehouse solutions offered by the Azure platform. Drawing on their extensive experience helping organizations get more value from the Microsoft Data Platform, the authors guide you through decision-making, implementation, operations, security, and more. Throughout, step-by-step tutorials and hands-on exercises prepare you to succeed, even if you have no cloud data experience.

 

Three leading experts in Microsoft Azure Data Solutions show how to:

Master essential concepts of data storage and processing in cloud environments Handle the changing responsibilities of data engineers moving to the cloud Get started with Azure data storage accounts and other data facilities Walk through implementing relational and non-relational data stores in Azure Secure data using the least-permissions principle, Azure Active Directory, role-based access control, and other methods Develop efficient Azure batch processing and streaming solutions Monitor Azure SQL databases, blob storage, data lakes, Azure Synapse Analytics, and Cosmos DB Optimize Azure data solutions by solving problems with storage, management, and service interactions

About This Book

For data engineers, systems engineers, IT managers, developers, database administrators, cloud architects, and other IT professionals Requires little or no knowledge about Azure tools and services for data analysis

Proven best practices for success with every Azure compute service!

Compute services are key to most Azure cloud solutions, but maximizing their value requires best-practice planning, design, deployment, and operations. Now, leading consultant Avinash Valiramani presents expert guidance for driving maximum value from Microsoft’s portfolio of Azure compute services for IaaS, PaaS, and FaaS. Drawing on his extensive work with Microsoft’s Azure teams, he covers Azure VMs, VM Scale Sets, App Services, Azure Virtual Desktops, Azure Container Instances, Azure Functions, Azure Batch, and other Compute services. Whatever your role in delivering efficient, scalable compute services, this deep dive will help you make the most of your Azure investment.

Leading Azure consultant Avinash Valiramani shows how to:

Dive deeply into the frequently used Azure Compute services to better understand how each service works Walk through configuring each compute service and its related features and options Size, price, and create Azure VMs, and deliver the right levels of redundancy and availability Use VM Scale Sets (VMSS) to integrate VMs with load balancing and autoscaling Host web applications, mobile app back ends, and REST APIs via Azure App Service Run desktops-as-a-service at scale with Azure Virtual Desktop (AVD) Easily deploy containers on demand with Azure Container Instances (ACIs) Use serverless Azure Functions to build web APIs, process streams, and manage message queues

About this Book

For everyone interested in Azure infrastructure, including IT/cloud admins, security specialists, developers, engineers, and others at all levels of Azure compute experience. Especially useful for experienced IT pros in mid-sized to large organizations who have deployed, operated, monitored, upgraded, migrated, or designed infrastructure services.

Proven best practices for success with every Azure networking service

For cloud environments to operate and scale optimally, their networking services must be designed, deployed, and managed well. Now, there’s a complete, best-practice guide to doing just that. Writing for everyone involved in delivering Azure workloads and services, leading cloud consultant Avinash Valiramani provides a deep dive and practical field advice for Azure Virtual Networks, Azure VPN Gateways, Azure Load Balancing, Azure Traffic Manager, Azure Firewall, Azure DNS, Azure Bastion, Azure Front Door and more. Whatever your role in delivering efficient, scalable networking services, this guide will help you make the most of your Azure investment.

Leading Azure consultant Avinash Valiramani shows how to:

Use Azure Virtual Networks to establish a backbone for hosting other Azure resources Provide HTTP/HTTPS load-balancing and routing for web servers and apps through Azure Application Gateway Connect on-premises and other public networks to Azure for secure communications using the Azure VPN Gateway service Provide secure load balancing to apps from internal and public networks using Azure Load Balancer services Integrate Azure Firewall to centrally protect Azure resources across multiple subscriptions Access globally scaled, fully-managed DNS services with 100% SLA from the closest Azure DNS servers Provide optimal network routing to the closest application endpoint for public-facing applications with Azure Traffic Manager Use Microsoft’s global edge network along with Azure Front Door to speed up access, harden security and enhance scalability for consuming-facing and internal web applications

Also look for these Definitive Guides to Azure success:

Microsoft Azure Compute: The Definitive Guide Microsoft Azure Monitoring and Management: The Definitive Guide Microsoft Azure Storage: The Definitive Guide

Proven best practices for success with every Azure monitoring and management service

For cloud environments to deliver optimal value, their monitoring and management services must be designed, deployed, and managed well. Leading cloud consultant Avinash Valiramani shows how to simplify administration, reduce downtime, control cost, solve problems faster, and prepare for any workload in any environment. Explore detailed, expert coverage of Azure Backup, Azure Site Recovery, Azure Migrate, Azure Monitor, Azure Network Watcher, Azure Portal, Azure Cloud Shell, Azure Service Health, Azure Cost Management, and more. Whatever your role in delivering efficient, reliable cloud services, this best practice, deep dive guide will help you make the most of your Azure investment.

Leading Azure consultant Avinash Valiramani shows how to:

Back up on-premises, Azure-based, and other cloud workloads for short- and long-term retention Implement simple, stable, cost-effective business continuity/disaster recovery with Azure Site Recovery Discover, assess, and migrate diverse workloads to Azure, VMs, web apps, databases, and more Monitor all Azure applications, VMs, and other deployed services centrally via Azure Monitor Track, troubleshoot, and optimize networking for IaaS resources Create and manage anything from single-service solutions to complex multi-service architectures Run Azure Cloud Shell's cloud-native command line from any device, anywhere Monitor service health, workload levels, service layer resources, and availability

Also look for these Definitive Guides to Azure success:

Microsoft Azure Compute: The Definitive Guide Microsoft Azure Networking: The Definitive Guide Microsoft Azure Storage: The Definitive Guide

Master best practices for success with all aspects of Azure cloud storage

For cloud environments to operate and scale as they should, their storage components must be designed and configured well. Now, there's a complete, best-practice guide to designing, deploying, and managing Azure storage services for maximum performance, scalability, and value. Leading cloud consultant Avinash Valiramani shows how to make the most of Azure storage tools and services to reduce downtime, avoid unnecessary costs, simplify management, and maintain excellent performance no matter how large you scale. You'll fi nd detailed, expert coverage of Azure blob, fi le, queue storage, managed disks, Data Share, Data Box, and more. Whatever your role in delivering efficient, reliable cloud services, this deep dive will help you make the most of your Azure investment.

Leading Azure consultant Avinash Valiramani shows how to:

Use Blob Storage to store and access large volumes of unstructured data in the cloud, including application data, streaming content, logs, backups, and archival data Replace traditional on-premise file servers with Azure Files to provide scalable shared fi le storage services over SMB and NFS Implement Managed Disks to provide scalable, secure, and redundant disks for virtual machines in Azure Promote scalability and resilience in large distributed applications with Azure Queue Storage Import/export large data volumes across Azure storage services with Azure Data Box Establish secure, automated, and manageable global data sharing with Azure Data Share

About This Book

For all IT, cloud, infrastructure, storage, and virtualization administrators or architects at all levels of Azure experience Especially useful to IT pros in mid- to large-sized organizations who have deployed, operated, monitored, upgraded, migrated, or designed cloud services

Also look for these Definitive Guides to Azure success:

Microsoft Azure Compute: The Definitive Guide Microsoft Azure Networking: The Definitive Guide Microsoft Azure Monitoring and Management: The Definitive Guide

The definitive practical guide to Microsoft Defender for Cloud covering new components and multi-cloud enhancements!

Microsoft Defender for Cloud offers comprehensive tools for hardening resources, tracking security posture, protecting against attacks, and streamlining security management – all in one natively integrated toolset. Now, leading Microsoft security experts Yuri Diogenes and Tom Janetscheck help you apply its robust protection, detection, and response capabilities throughout your operations, protecting workloads running on all your cloud, hybrid, and on-premises platforms.

This guide shows how to make the most of new components, enhancements, and deployment scenarios, as you address today's latest threat vectors. Sharing best practices, expert tips, and optimizations only available from Microsoft's Defender for Cloud team, the authors walk through improving everything from policies and governance to incident response and risk management. Whatever your role or experience, they'll help you address new security challenges far more effectively—and save hours, days, or even weeks.

Two of Microsoft's leading cloud security experts show how to:

Assess new threat landscapes, the MITRE ATT&CK framework, and the implications of ''assume-breach'' Explore Defender for Cloud architecture, use cases, and adoption considerations including multicloud with AWS and GCP Plan for effective governance, successful onboarding, and maximum value Fully visualize complex cloud estates and systematically reduce their attack surfaces Prioritize risks with Secure Score, and leverage at-scale tools to build secure cloud-native apps Establish consistent policy enforcement to avoid drift Use advanced analytics and machine learning to identify attacks based on signals from all cloud workloads Enhance security posture by integrating with the Microsoft Sentinel SIEM/SOAR, Microsoft Purview, and Microsoft Defender for Endpoint Leverage just-in-time VM access and other enhanced security capabilities

 About This Book

For architects, designers, implementers, SecOps professionals, developers, and security specialists working in Microsoft Azure environments For all IT professionals and decision-makers concerned with securing modern hybrid/multicloud environments, cloud-native apps, and PaaS services

Build next-generation security operations with Microsoft Sentinel

Microsoft Sentinel is the scalable, cloud-native, security information and event management (SIEM) solution for automating and streamlining threat identification and response across your enterprise. Now, three leading experts guide you step-by-step through planning, deployment, and operations, helping you use Microsoft Sentinel to escape the complexity and scalability challenges of traditional solutions. Fully updated for the latest enhancements, this edition introduces new use cases for investigation, hunting, automation, and orchestration across your enterprise and all your clouds. The authors clearly introduce each service, concisely explain all new concepts, and present proven best practices for maximizing Microsoft Sentinel's value throughout security operations.

 

Three of Microsoft's leading security operations experts show how to:

Review emerging challenges that make better cyberdefense an urgent priority See how Microsoft Sentinel responds by unifying alert detection, threat visibility, proactive hunting, and threat response Explore components, architecture, design, and initial configuration Ingest alerts and raw logs from all sources you need to monitor Define and validate rules that prevent alert fatigue Use threat intelligence, machine learning, and automation to triage issues and focus on high-value tasks Add context with User and Entity Behavior Analytics (UEBA) and Watchlists Hunt sophisticated new threats to disrupt cyber kill chains before you're exploited Enrich incident management and threat hunting with Jupyter notebooks Use Playbooks to automate more incident handling and investigation tasks Create visualizations to spot trends, clarify relationships, and speed decisions Simplify integration with point-and-click data connectors that provide normalization, detection rules, queries, and Workbooks

 

About This Book

For cybersecurity analysts, security administrators, threat hunters, support professionals, engineers, and other IT professionals concerned with security operations For both Microsoft Azure and non-Azure users at all levels of experience

Optimize Windows system reliability and performance with Sysinternals

IT pros and power users consider the free Windows Sysinternals tools indispensable for diagnosing, troubleshooting, and deeply understanding the Windows platform. In this extensively updated guide, Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis help you use these powerful tools to optimize any Windows system’s reliability, efficiency, performance, and security. The authors first explain Sysinternals’ capabilities and help you get started fast. Next, they offer in-depth coverage of each major tool, from Process Explorer and Process Monitor to Sysinternals’ security and file utilities. Then, building on this knowledge, they show the tools being used to solve real-world cases involving error messages, hangs, sluggishness, malware infections, and much more.

Windows Sysinternals creator Mark Russinovich and Aaron Margosis show you how to:

Use Process Explorer to display detailed process and system information Use Process Monitor to capture low-level system events, and quickly filter the output to narrow down root causes List, categorize, and manage software that starts when you start or sign in to your computer, or when you run Microsoft Office or Internet Explorer Verify digital signatures of files, of running programs, and of the modules loaded in those programs Use Autoruns, Process Explorer, Sigcheck, and Process Monitor features that can identify and clean malware infestations Inspect permissions on files, keys, services, shares, and other objects Use Sysmon to monitor security-relevant events across your network Generate memory dumps when a process meets specified criteria Execute processes remotely, and close files that were opened remotely Manage Active Directory objects and trace LDAP API calls Capture detailed data about processors, memory, and clocks Troubleshoot unbootable devices, file-in-use errors, unexplained communication, and many other problems Understand Windows core concepts that aren’t well-documented elsewhere

Use Microsoft cloud services to help build a more competitive, agile business Grow your business with Microsoft public cloud services--without costly new hardware or IT staff. Discover high-value services including Microsoft Office 365, Microsoft Intune, Azure, OneDrive for Business, and Windows Server 2012 R2 in the cloud. Set up your work environment, build websites, customize apps, market online, and more! This Microsoft book: Walks you through setting up your business in the cloud Presents easy instructions to help you get started fast Links online demos, hands-on labs, and additional free training through the Microsoft Virtual Academy Covers all types of Microsoft public cloud services: software as a service (SaaS), infrastructure as a service (IaaS), and platform as a service (PaaS) Get the benefits of new technology without the hassles Deliver powerful Office 365 productivity tools on smartphones, tablets, and PCs Store files by using the built-in security features of Microsoft OneDrive for Business Collaborate via Skype for Business and Microsoft Dynamics CRM Online Manage all your Windows, iOS, and Android devices with Microsoft Intune Create virtual servers to handle your workload tasks Quickly extend business software to new users by using Microsoft Azure RemoteApp Access and use cloud applications from within the Azure Application Gallery Build new websites by using Azure Websites Develop mobile apps by using Windows App Studio

Enable employees to be productive and access data from any location or device Protect both corporate assets and employee privacy, so your people can be fully productive from any device, anywhere. Learn how to use Microsoft Intune to manage applications to satisfy your unique requirements, make the most of Mobile Device Management (MDM) for Office 365, and defend on-premises resources with Microsoft Advanced Threat Analytics (ATA). Plan, deploy, and deliver complete enterprise mobility while improving security Choose the right Microsoft enterprise mobility solution for your organization Protect apps and data with Microsoft Intune Mobile Application Management (MAM) Identify suspicious user or device activity in hybrid cloud/on-premises environments Prepare for and successfully implement Microsoft ATA Flexibly manage diverse mobile devices with MDM for Office 365 Configure access, define policies, enroll mobile devices, and manage compliance

Implement maximum control, security, and compliance processes in Azure cloud environments In Microsoft Azure Security Infrastructure, three leading experts show how to plan, deploy, and operate Microsoft Azure with outstanding levels of control, security, and compliance. You’ll learn how to prepare infrastructure with Microsoft’s integrated tools, prebuilt templates, and managed services–and use these to help safely build and manage any enterprise, mobile, web, or Internet of Things (IoT) system. The authors guide you through enforcing, managing, and verifying robust security at physical, network, host, application, and data layers. You’ll learn best practices for security-aware deployment, operational management, threat mitigation, and continuous improvement–so you can help protect all your data, make services resilient to attack, and stay in control no matter how your cloud systems evolve.

Three Microsoft Azure experts show you how to:

• Understand cloud security boundaries and responsibilities

• Plan for compliance, risk management, identity/access management, operational security, and endpoint and data protection

• Explore Azure’s defense-in-depth security architecture

• Use Azure network security patterns and best practices

• Help safeguard data via encryption, storage redundancy, rights management, database security, and storage security

• Help protect virtual machines with Microsoft Antimalware for Azure Cloud Services and Virtual Machines

• Use the Microsoft Azure Key Vault service to help secure cryptographic keys and other confidential information

• Monitor and help protect Azure and on-premises resources with Azure Security Center and Operations Management Suite

• Effectively model threats and plan protection for IoT systems

• Use Azure security tools for operations, incident response, and forensic investigation