November 2025
Intermediate to advanced
130 pages
1h 11m
Chinese
Content preview from Azure上のLinux (Chinese Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
第6章. 在Azure中保护 Linux工作负载
本作品已使用人工智能进行翻译。欢迎您提供反馈和意见：translation-feedback@oreilly.com
企业在采用云服务时最关心的问题之一就是安全性。毕竟，云服务引入了独特的架构和功能，这些特性并不适合传统的安全防护方法。简单地在云端复制数据中心的架构和安全实践不仅效率低下，反而会阻碍安全目标的实现。本章将通过保障 Linux 工作负载安全的视角，全面解析 Microsoft Azure 提供的各类安全功能与服务。
Azure：从代码到云的安全平台
托管于微软Azure的应用程序依托多层级安全防护体系。基础设施安全虽是安全策略的关键组成部分，但绝非唯一控制手段。基础设施安全应与应用程序安全（AppSec）协同运作，为组织提供整体解决方案。
虽然超出本章讨论范围，但我们仍需简要提及安全领域的"左移"实践。该实践包含三个关键要素：
-
在开发流程早期就让安全团队参与进来
-
为开发人员建立黄金路径与规范模式
-
在持续集成与持续交付（CI/CD）流程早期整合安全扫描工具
Microsoft Azure 与 GitHub 高级安全、Azure DevOps 平台等主流 DevOps 及安全工具深度集成，助力从工具与流程层面建立 DevSecOps 实践。作为实践者，您仍需在团队中建立这些流程与工具，并推动其在整个组织中的应用。
您所负责的安全范围取决于责任共担模型。
关键 Azure 安全服务
无论选择何种平台托管应用程序，Microsoft Azure 均提供强大的工具和服务组合保障其安全性。微软的安全最佳实践可帮助您实现网络安全的核心功能，包括安全态势管理、事件防护、检测响应，以及保密性、完整性与可用性（CIA）三要素保障。
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.