Azure for Architects - Second Edition

Reducing the attack surface area

NSGs and firewalls help you to manage authorized requests to the environment. However, the environment should not be overtly exposed to security attacks. The surface area of the system should be optimally enabled to achieve its functionality, but disabled enough that attackers cannot find loopholes and access areas that are opened without any intended use, or opened but not adequately secured. Security should be adequately hardened, making it difficult for any attacker to break into the system.

Some of the areas that should be configured include the following:

• Remove all unnecessary users and groups from the operating system.
• Identify group membership for all users.
• Implement group policies using directory ...