Azure Centric · Cloud securityPosts, a podcast and video series about Microsoft Azure by Marcos Nogueira.https://azurecentric.com/Find gaps between enabled Defender plans and protected resourceshttps://azurecentric.com/posts/find-gaps-between-enabled-defender-plans-and-protected-resources/https://azurecentric.com/posts/find-gaps-between-enabled-defender-plans-and-protected-resources/Troubleshoot gaps between enabled Defender plans and protected resources by checking subscription, workspace, and resource-level scopes.Mon, 14 Sep 2026 00:00:00 GMTcloud-securitydefender-for-cloudtroubleshootingpermissionsBuild a security review into a new Azure workloadhttps://azurecentric.com/posts/build-a-security-review-into-a-new-azure-workload/https://azurecentric.com/posts/build-a-security-review-into-a-new-azure-workload/Structure a security review for a new Azure workload by separating posture management from workload protection and verifying permissions.Wed, 22 Jul 2026 00:00:00 GMTcloud-securitydefender-for-cloudcloud-securitycspmsecurity-postureworkload-protectionInvestigate a CodeQL alert before merging a pull requesthttps://azurecentric.com/posts/investigate-a-codeql-alert-before-merging-a-pull-request/https://azurecentric.com/posts/investigate-a-codeql-alert-before-merging-a-pull-request/Investigate a CodeQL alert in a pull request: locate the annotation, assess the data flow, and push a fix to pass the check.Sat, 30 May 2026 00:00:00 GMTcloud-securityalertsgithub-advanced-securitycodeqltroubleshootingSet useful boundaries for security exemptionshttps://azurecentric.com/posts/set-useful-boundaries-for-security-exemptions/https://azurecentric.com/posts/set-useful-boundaries-for-security-exemptions/Distinguish governance rules for remediation SLAs from suppression rules for alert noise in Defender for Cloud.Sat, 04 Apr 2026 00:00:00 GMTcloud-securitydefender-for-cloudalertsalert-managementgovernance-rulessecurity-posturesuppression-rulesReview the regulatory compliance dashboard in Defender for Cloudhttps://azurecentric.com/posts/review-the-regulatory-compliance-dashboard-in-defender-for-cloud/https://azurecentric.com/posts/review-the-regulatory-compliance-dashboard-in-defender-for-cloud/Navigate the Defender for Cloud regulatory compliance dashboard to assess standards, understand control states, and plan remediation.Sat, 07 Feb 2026 00:00:00 GMTcloud-securitydefender-for-cloudregulatory-compliancecloud-securitysecurity-benchmarkAssign owners to cloud security recommendationshttps://azurecentric.com/posts/assign-owners-to-cloud-security-recommendations/https://azurecentric.com/posts/assign-owners-to-cloud-security-recommendations/Assign owners to security recommendations using Defender for Cloud governance rules to drive accountability and track remediation SLAs.Wed, 17 Dec 2025 00:00:00 GMTcloud-securitydefender-for-cloudgovernanceremediationChoose between network security groups, Azure Firewall and WAFhttps://azurecentric.com/posts/choose-between-network-security-groups-azure-firewall-and-waf/https://azurecentric.com/posts/choose-between-network-security-groups-azure-firewall-and-waf/Compare Azure Firewall SKUs and NSGs to choose the right network security layer for your workload.Sat, 25 Oct 2025 00:00:00 GMTcloud-securityazure-firewallwafnetwork-security-groupsConfigure malware scanning for an Azure Storage accounthttps://azurecentric.com/posts/configure-malware-scanning-for-an-azure-storage-account/https://azurecentric.com/posts/configure-malware-scanning-for-an-azure-storage-account/Configure automated responses to malware scanning in Defender for Storage using Logic Apps or Event Grid.Mon, 01 Sep 2025 00:00:00 GMTcloud-securitydefender-for-storageazure-storagemalware-scanningazure-event-gridazure-logic-appsautomationInvestigate agentless vulnerability findings before remediationhttps://azurecentric.com/posts/investigate-agentless-vulnerability-findings-before-remediation/https://azurecentric.com/posts/investigate-agentless-vulnerability-findings-before-remediation/Investigate agentless vulnerability findings by verifying scan scope, inventory freshness, and exploitability context before remediation.Mon, 07 Jul 2025 00:00:00 GMTcloud-securitydefender-for-cloudtroubleshootingagentless-scanningcontainer-securityvm-securityvulnerability-managementUse attack paths to prioritise exposed Azure resourceshttps://azurecentric.com/posts/use-attack-paths-to-prioritise-exposed-azure-resources/https://azurecentric.com/posts/use-attack-paths-to-prioritise-exposed-azure-resources/Use Defender for Cloud attack paths to prioritise remediation by identifying exploitable chains rather than treating alerts in isolation.Thu, 15 May 2025 00:00:00 GMTcloud-securitydefender-for-cloudattack-pathsalertscloud-security-graphsecurity-prioritisationReview repository protection as GitHub security product choices changehttps://azurecentric.com/posts/review-repository-protection-as-github-security-product-choices-change/https://azurecentric.com/posts/review-repository-protection-as-github-security-product-choices-change/How to apply GitHub security configurations after the April 2025 GHAS split into Secret Protection and Code Security.Sat, 05 Apr 2025 00:00:00 GMTcloud-securitygithub-advanced-securitygithubgithub-secret-protectionconfigurationgithub-code-securityReview infrastructure security findings during a pull requesthttps://azurecentric.com/posts/review-infrastructure-security-findings-during-a-pull-request/https://azurecentric.com/posts/review-infrastructure-security-findings-during-a-pull-request/Enable and triage Defender for Cloud pull request annotations for Infrastructure-as-Code in GitHub and Azure DevOps.Thu, 20 Mar 2025 00:00:00 GMTcloud-securitydefender-for-cloudgithubazure-devopsdevops-securitypull-request-annotationsinfrastructure-as-codeGitHub Code Security and Secret Protection: plan for the new product choiceshttps://azurecentric.com/posts/github-code-security-and-secret-protection-plan-for-the-new-product-choices/https://azurecentric.com/posts/github-code-security-and-secret-protection-plan-for-the-new-product-choices/Plan for GitHub's new security products starting April 2025, separating secret protection from code security.Sat, 08 Mar 2025 00:00:00 GMTcloud-securitygithub-advanced-securitygithubgithub-secret-protectiongithub-code-securityRoll out GitHub push protection without disrupting developershttps://azurecentric.com/posts/roll-out-github-push-protection-without-disrupting-developers/https://azurecentric.com/posts/roll-out-github-push-protection-without-disrupting-developers/Configure GitHub push protection with delegated bypass to block secret commits while maintaining a controlled approval workflow for developers.Mon, 20 Jan 2025 00:00:00 GMTcloud-securitygithub-advanced-securitypush-protectiongithubdelegated-bypasssecurity-workflowsecret-scanningEnable GitHub secret scanning and assign alert ownershiphttps://azurecentric.com/posts/enable-github-secret-scanning-and-assign-alert-ownership/https://azurecentric.com/posts/enable-github-secret-scanning-and-assign-alert-ownership/Enable GitHub Secret Scanning and push protection, then assign alert ownership via security configurations.Thu, 28 Nov 2024 00:00:00 GMTcloud-securitygithub-advanced-securitysecret-scanningalertsgithubpush-protectionsecurity-configurationsConnect GitHub repositories to Defender for Cloudhttps://azurecentric.com/posts/connect-github-repositories-to-defender-for-cloud/https://azurecentric.com/posts/connect-github-repositories-to-defender-for-cloud/Connect GitHub to Defender for Cloud posture management and configure the Microsoft Security DevOps action for code scanning.Sat, 28 Sep 2024 00:00:00 GMTcloud-securitydefender-for-cloudgithubdevops-securitygithub-actionsmsdoTrace a blocked outbound connection in Azure Firewall logshttps://azurecentric.com/posts/trace-a-blocked-outbound-connection-in-azure-firewall-logs/https://azurecentric.com/posts/trace-a-blocked-outbound-connection-in-azure-firewall-logs/Trace blocked Azure Firewall traffic using structured logs, legacy diagnostics, and DNS proxy checks.Sat, 03 Aug 2024 00:00:00 GMTcloud-securityazure-firewalldnsstructured-loggingtroubleshootingKeep Azure Firewall rules consistent with Firewall Policyhttps://azurecentric.com/posts/keep-azure-firewall-rules-consistent-with-firewall-policy/https://azurecentric.com/posts/keep-azure-firewall-rules-consistent-with-firewall-policy/Align Azure Firewall rule priorities with the policy hierarchy to ensure predictable traffic filtering and avoid performance degradation.Mon, 10 Jun 2024 00:00:00 GMTcloud-securityazure-firewallfirewall-policyperformancerule-configurationCompare Defender plan coverage across subscriptionshttps://azurecentric.com/posts/compare-defender-plan-coverage-across-subscriptions/https://azurecentric.com/posts/compare-defender-plan-coverage-across-subscriptions/Audit Defender plan coverage across subscriptions by verifying scope, permissions, and workspace linkage.Thu, 18 Apr 2024 00:00:00 GMTcloud-securitydefender-for-cloudlog-analyticscspmdefender-for-serverssecurity-postureTurn secure score findings into a practical remediation queuehttps://azurecentric.com/posts/turn-secure-score-findings-into-a-practical-remediation-queue/https://azurecentric.com/posts/turn-secure-score-findings-into-a-practical-remediation-queue/Turn Defender for Cloud recommendations into owned remediation work, using secure score alongside resource exposure, operational impact and verification.Thu, 22 Feb 2024 00:00:00 GMTcloud-securitydefender-for-cloudremediationsecure-scoreEnable Defender for Cloud with a clear subscription scopehttps://azurecentric.com/posts/enable-defender-for-cloud-with-a-clear-subscription-scope/https://azurecentric.com/posts/enable-defender-for-cloud-with-a-clear-subscription-scope/Enable Defender for Cloud deliberately: confirm the subscription, separate posture management from paid protection, and give the first recommendations an owner.Tue, 02 Jan 2024 00:00:00 GMTcloud-securitydefender-for-cloudcloud-securitysecurity-postureUnderstanding the limits on Azure Key Vaulthttps://azurecentric.com/posts/understanding-the-limits-on-azure-key-vault/https://azurecentric.com/posts/understanding-the-limits-on-azure-key-vault/When you are designing the architecture for your application on Azure, I always revisit the Azure Subscription Service Limits to see if all the requirements are not over the…Mon, 30 Apr 2018 00:00:00 GMTcloud-securityazure-key-vaultazure-subscriptionsHow to secure your Azure Virtual Machinehttps://azurecentric.com/posts/how-to-secure-your-azure-virtual-machine/https://azurecentric.com/posts/how-to-secure-your-azure-virtual-machine/We know that Microsoft Azure offers several technologies that help to keep your data secure in use, in transit, and at rest. But what additional security measures can we…Mon, 06 Mar 2017 00:00:00 GMTcloud-securityazure-key-vaultazure-virtual-machineslinux