- Enabling and using Microsoft Defender for Cloud.
As I said before,
the whole point of this exercise in your lab
is to understand Cloud Security Posture Management.
And the fact that we are using Defender for Cloud
is only to create this correlation
between the theory about Cloud Security Posture Management
and a product that implements that.
Keep in mind that Cloud Security Posture Management
is one of the most growing solution in the market.
As a matter of fact, Cloud Security Posture Management
belongs to a new category created by Gartner
called CNAPP, Cloud-Native Application Protection Platform.
Why is this important nowadays?
Well, because statistically,
there is a lot of research that were done
and found out that 98% of most of the attacks
that are happening,
they could have been prevented with basic security hygiene.
And Cloud Security Posture Management
is all about security hygiene.
It is all about doing the proactive work, closing the doors,
remediating security recommendation, hardening resources,
implementing security best practice.
All those things are proactive actions
to increase your security posture
and decrease the likelihood of compromise.
We always say decrease the likelihood of compromise
because we cannot guarantee 100% security.
That does not exist.
What you do is you increase your level of resiliency,
you increase your defense, right?
Because by doing that, you decrease the likelihood,
the probability that a threat actor
will be able to exploit a vulnerability.
Because there are so many barriers
in between the beginning of the attack vector
and the compromise that the threat actor
may not be able to finish its operation.
And by the time the threat actor has done something,
you have the second pillar,
which is the one on the right side of this diagram,
which is the CWPP, the Cloud Workload Protection Platform.
The Cloud Workload Protection Platform is there to detect,
is the detection capability of the cloud.
Different workloads have different threat landscape.
So when the threat access, try, for example,
to compromise a storage account,
there are different alerts that can be triggered
to show that a threat actors
trying to compromise that storage account.
So Cloud Security Posture Management
and Cloud Workload Protection Platform,
they both are part of CNAPP solution.
And Defender for Cloud is a leading product
when it comes to CNAPP in the market.
So it's a good idea to validate
and to test those things using the platform.
Now, how are you gonna do that?
Well, in the same URL that you access
to deploy your lab resources, the MDC labs,
you also have Module 2.
And Module 2 really covers the basics
of Cloud Security Posture Management.
So you are going to go through Module 2
and execute all the steps
to familiarize yourself with Defender for Cloud,
from enabling to navigating through the dashboard.
And I'm gonna give a brief demonstration for you
right after this slide.
So now that you have your Azure subscription,
you already provisioned your resources,
you can open portal.azure.com
and start navigating through Microsoft Defender for Cloud.
Microsoft Defender for Clouds, when it's populated,
it has this comprehensive dashboard
that allows you to see some indicators
of your security posture.
There is tile, multiple tiles.
This tile here is about Security posture.
As you can see, this solution is a multi-cloud solution
because it has visibility across Azure, AWS and GCP.
And that's the whole point
about Cloud Security Posture Management, right?
Is to give you the state of security
across different workloads.
So when I go to Recommendations tab,
I'm able to see the Secure score,
which is an indication where my journey
to improve the security posture is.
Right now, it's 43%.
So I have a long way to go until I reach 100%,
which means that I remediate all the recommendations
and I increase my level of security
across the different workloads.
The way that the recommendations are categorized here
is based on security controls.
So I have different security controls.
As I remediate each recommendation of security control,
I will gain this amount of points on my secure score.
And this is a top-down approach.
The Defender for Cloud organized everything
based on priorities.
So the most important recommendation
will give you more points.
Now, it's important to remember
that if you just remediate two recommendations out of four,
like we have here on Secure management ports,
you're not gonna get partial points, right?
You only get eight points when you remediate everything.
So it's very important to do this exercise continuously.
And talking about exercise,
when you navigate to the aka MDC labs page,
the module that it'll give you,
that you're gonna do right now is Module 2, right?
Module 2 is exploring Defender for Cloud.
So you're gonna go through all the details
about security posture and everything.
Everything that I'm talking about now.
So I don't want to go into the details of this
because that's part of the lab.
So make sure to do the lab, make sure to explore everything
and familiarize ourself
with Defender for Cloud because this is
the Cloud Security Posture Management platform product
that we are utilizing
to exemplify the importance of security hygiene
in nowadays workloads and cloud security.