Cloud Application Security Essentials with Azure: Azure application security, confidential computing, app identity, authentication, and authorization (English Edition)

Modern application development is deeply intertwined with cloud computing, making robust application security an absolute imperative for every professional. As applications increasingly leverage cloud components and services like Azure, understanding the security implications for both your app architecture and its underlying platform is critical to prevent breaches and ensure system integrity.

This book starts by defining modern app security, outlining crucial security assertions and security metrics for cloud environments. It then dives into different clouds, including private vs. public cloud models and their impact on app security requirements, highlighting Azure examples and confidential computing. You will explore fundamental blockchain concepts and their relevance, then master app identity, app keys, and delegation concepts. This book aims to define metrics to help evaluate the application security level and establish security as a feature of the application.

Upon completing this book, you will possess a strong foundational and practical understanding of how to secure modern applications across diverse cloud landscapes. You will be well-prepared to design, implement, and maintain secure applications, effectively mitigating risks and contributing confidently to your organization's cloud security posture, and evaluate it in other cases.

What you will learn

● Explore common concepts related to security – using private clouds, encryption, authorization, etc.

● Define modern app security assertions, architecture, and cloud metrics.

● Implement cloud app identity, app keys, and delegation securely.

● Integrate app architectures, cloud services, and blockchain for security.

● Apply robust data encryption, Azure support, and secure key access.

● Understand app monetization, blockchain economics, and security implications.

Who this book is for

This book is ideal for application developers, owners, consumers, store owners, and cloud architects who want to learn about application security in cloud environments. It aims to equip these professionals with the knowledge to estimate and enhance an application's security level.

Table of Contents

1. Introduction to Application and Cloud Security

2. Different Clouds and Confidential Compute Promise

3. Public and Private Clouds

4. Application Identities

5. Compute, Storage and Networking in the Cloud

6. Authentication and Authorization

7. Encryption

8. Economic Models

9. Summary

Rouskov Y. R. has completed his master’s degree in computer science. He has about 30 years of experience in software development, primarily at Microsoft, where he served as software development engineer (SDE), SDE lead, and a software architect specializing in identity of all types – enterprise and consumer.