Azure Fundamentals (AZ-900) Study Guide

Chapter 12. Azure Identity, Access, and Security

In the previous chapter, we explored how Azure securely stores and manages data in Azure Storage. Now, we turn our focus to another essential pillar of cloud computing: identity, access, and security.

At its core, “identity, access, and security” refers to the systems and practices that ensure only authorized users or services can access the right resources at the right time, and nothing more. This is vital for maintaining trust, protecting sensitive data, preventing unauthorized access, and complying with industry regulations. In cloud computing, where resources are accessible from anywhere, these protections become even more critical.

Azure embeds identity, access, and security into the core of its platform, providing a built-in framework for managing users, controlling access to resources, and protecting against cyberthreats. At the heart of this framework is Microsoft Entra ID (formerly Azure Active Directory), which acts as the central identity provider. It enables organizations to authenticate users and devices, enforce multifactor authentication (MFA), set Conditional Access policies, and manage external identities.

Access management in Azure is powered by role-based access control (RBAC), enabling fine-grained permissions based on job roles or responsibilities. Meanwhile, Azure’s security services, such as Microsoft Defender for Cloud, help continuously monitor your environment, detect threats, and strengthen your security ...