Security monitoring and auditing
Every activity in your environment, from emails to changing a firewall, can be categorized as a security event. From a security standpoint, it's necessary to have a central logging system to monitor and track the changes made. During an audit, if you find suspicious activity, you can discover what the flaw in the architecture is and how it can be remediated. Also, if you had a data breach, the logs will help security professionals to understand the pattern of an attack and how it was executed. Also, necessary preventive measures can be taken to avoid similar incidents in the future. Azure provides the following two important security resources to manage all security aspects of the Azure subscription, resource groups, and resources:
- Azure Monitor
- Azure Security Center
Of these two security resources, we will first explore Azure Monitor.
Azure Monitor
Azure Monitor is a one-stop shop for monitoring Azure resources. It provides...