Book Image

Hands-On Linux Administration on Azure

By : Frederik Vos
Book Image

Hands-On Linux Administration on Azure

By: Frederik Vos

Overview of this book

Azure’s market share has increased massively and enterprises are adopting it rapidly, while Linux is a widely-used operating system and has proven to be one of the most popular workloads on Azure. It has thus become crucial for Linux administrators and Microsoft professionals to be well versed with managing Linux workloads in an Azure environment. With this guide, system administrators will be able to deploy, automate, and orchestrate containers in Linux on Azure. The book follows a hands-on approach to help you understand DevOps, monitor Linux workloads on Azure and perform advanced system administration. Complete with systematic explanations of concepts, examples and self-assessment questions, the chapters will give you useful insights into Linux and Azure. You’ll explore some of Linux’s advanced features for managing multiple workloads and learn to deploy virtual machines (VMs) in Azure. Dedicated sections will also guide you with managing and extending Azure VMs’ capabilities and understanding automation and orchestration with Ansible and PowerShell DSC. In later chapters, you’ll cover useful Linux troubleshooting and monitoring techniques that will enable you to maintain your workload on Azure. By the end of this book, you’ll be able to make the most out of Azure’s services to efficiently deploy and manage your Linux workloads.
Table of Contents (14 chapters)

Managing Linux Security and Identities

This chapter is about security, the protection of your workload at operating system level. Of course, Azure already provides you with services to protect your virtual machine in many ways and at many levels. The following are a few of the services:

  • Azure Resource Manager, which provides security, auditing, and tagging features
  • The web application firewall, which protects against many attacks, such as SQL injection
  • The stateful packet filtering feature of Network Security Groups
  • The Azure Firewall service, which provides a stateful firewall tightly integrated with the monitoring functions of Azure

And you can subscribe to the Azure Security Center service for unified security management with nice features such as continuous security assessment.

With all these possibilities, do we still need protection at the OS level? In my opinion, multi...