book

Pro Azure Governance and Security: A Comprehensive Guide to Safeguarding Your Cloud Computing

Name: Pro Azure Governance and Security: A Comprehensive Guide to Safeguarding Your Cloud Computing
Author: Rezwanur Rahman
ISBN: 9798868815270

by Rezwanur Rahman

October 2025

Intermediate to advanced

674 pages

13h 10m

English

Apress

Read now

Unlock full access

Pro Azure Governance and Security
Introduction
What This Book Is AboutWho This Book Is ForStructure of the Book
Acknowledgments
Table of Contents
About the Author
About the Technical Reviewer
1. Modern Governance in the Cloud
Evolution of Cloud GovernanceGovernance in Cloud ProviderGovernance in Cloud ConsumerKey Principle of Cloud GovernanceCore Principles of Cloud GovernanceTools for EnforcementPoliciesInitiativesRole-Based Access Control (RBAC)Overview of Azure Governance ServicesTenantsKey Points About Azure TenantsSubscriptionsCore Cloud Service CategoriesTenant and Subscription RelationshipKey PointsManagement GroupKey Aspects of Management GroupsCreating a Management Group StructureExample Organization StructureBenefits of Management Group HierarchyResources and Resource GroupResourcesResource GroupsRelationship StructureBlueprintsRole of Cloud Governance in Digital TransformationHow Governance Facilitates Digital TransformationStrategic Importance of Governance Planning and ImplementationAzure Governance PlanningAzure Foundational ArtifactsPlanning for TenantsPlanning for SubscriptionsPlanning for Resource GroupsPlanning for Management GroupsPlanning for Azure Governance ArtifactsSummary
2. Advanced Azure Scaffold for Enterprise Architecture
Designing an Effective Azure ScaffoldGovernance and Security Best PracticesManagement Group StrategiesSubscription Models and ScalabilitySummary
3. Contemporary Azure Naming Conventions and Standards
Importance of Consistent Naming ConventionsGeneral Recommendations and StandardsAzure Governance Naming CategoriesAdvanced Tagging StrategiesTags for Governance and ComplianceAutomation of Naming StandardsNaming at Scale with AutomationBenefits of Automation in NamingAutomation MethodsScaling Naming in Multi-region and Multi-team ScenariosAdditional Resources and ExamplesNaming Standards in ActionSubscriptionsResource GroupsManagement GroupsPoliciesInitiativesBlueprintsSummary
4. Comprehensive Azure Policy Implementation
Introduction to Azure PolicyAzure Policy PlanningAzure Policy TerminologyPolicy BasicsPolicy LocationCreating and Managing Policy DefinitionsCreating Policy DefinitionsAssigning PoliciesUpdating Policies and AssignmentsMinor Objective ChangesMajor Objective ChangesPolicy Initiatives and ScopingCreating InitiativesAssigning InitiativesUpdating InitiativesPolicy Assignment Scope and ExclusionsCompliance Management and ReportingTaking Action on Policy ResultsAddToNetworkGroupAppendAuditAuditIfNotExistsDenyDenyActionDeployIfNotExistsDisabledReal-Time Policy EnforcementRemediation OptionsManual RemediationAutomatic RemediationSummary

5. Enhanced Security with Microsoft Defender for Cloud
Overview of Microsoft Defender for Cloud and Its CapabilitiesA Changing World of Cloud SecurityCloud Security Is Still a Shared ResponsibilityAddressing Modern Security ChallengesKey Features of Microsoft Defender for CloudReal-Time Threat ProtectionDefender for DevOps: Security from Code to CloudCompliance, Automation, and PlaybooksRegulatory Compliance Monitoring and ReportingPolicy Management and Governance IntegrationSecurity Automation and PlaybooksUnified Visibility and AuditabilityPricing: Free vs. Paid Defender PlansFree Tier (Plan 0)Paid Defender Plans (Modular Protection)Multi-cloud and Hybrid BillingCost Management and Estimation ToolsConfiguring Microsoft Defender for Cloud for EnterprisesEnabling Free TierManaging Microsoft Defender for Cloud Using PowerShellEnabling Paid Defender PlansSwitching Between EditionsCollecting Data in Microsoft Defender for CloudCollecting Data from Azure and Non-Azure Virtual MachinesAzure Virtual MachinesNon-Azure Virtual Machines (Hybrid or Multi-cloud)Advanced Threat Protection and DetectionJust-in-Time VM AccessFile Integrity MonitoringPrerequisites for File Integrity Monitoring (FIM)Threat Detection and ResponseSimulating AttacksMicrosoft Defender for Cloud Threat Intelligence ReportManaging Security AlertsInvestigate a Security AlertRespond to a Security AlertSecurity Automation and OrchestrationWhat Are Security Playbooks?Building Automated Workflow Using Logic AppsConfiguring Playbook TriggersContinuous Security MonitoringFixing Security RecommendationsMonitoring Resource HealthHardening Network ResourcesFirewall ManagementAzure Firewall ManagerKey Features of Azure Firewall ManagerConclusion
6. Leveraging Azure Monitor and Log Analytics for Operations
Comprehensive Monitoring StrategiesDefining a Monitoring Strategy Aligned with Governance GoalsStep 1: Understand the Purpose of Monitoring in GovernanceStep 2: Define What You Want to GovernStep 3: Identify Who Needs What VisibilityStep 4: Establish Metrics for SuccessStep 5: Define a Monitoring LifecycleDifferences Between Observability, Monitoring, and AlertingMonitoring in Hybrid vs. Cloud-Native EnvironmentHybrid Monitoring: Bridging Two WorldsCloud-Native Monitoring: Born in the CloudUnderstanding Core Concept of Azure MonitorMetrics: Real-Time Numerical DataTypes of MetricsUse Case ExampleLogs: Detailed Event and Diagnostic DataTypes of LogsHow Azure Monitor Logs WorksCase Study ExampleWorkbooks: Interactive Data Visualization and ReportingUse Case ExampleExploring Log Analytics WorkspaceWhat Is a Log Analytics WorkspaceCreating and Adding Resources in Log Analytics WorkspaceCreating a Log Analytics WorkspaceAdding Resources to the WorkspaceWriting Basic Kusto Query Language (KQL)What Is Kusto Query Language (KQL)What Is a Kusto Query?What Is a Query Statement?Basic KQL Syntax ElementsHands-On ExamplesReturn the Latest Log EntriesFilter Logs by a Specific ComputerSelect Specific ColumnsSort Logs by Time (Most Recent First)Count Heartbeat Entries per VMMeasure Average CPU Usage Over TimeIdentify Failed Login AttemptsReal-World Use CasesDetecting Repeated Sign-In Failures Across UsersIdentifying Unauthorized Resource DeletionsTracking Cost-Intensive Operations Over TimeChecking Virtual Machine Health and Reporting GapsMonitoring Role Assignments for ComplianceDemo: Try KQL Using Microsoft Demo EnvironmentAutomated Alerting and ResponseSetting Up Alerting in Azure MonitorCreate an Alert for High CPU Usage on a Virtual MachineSummary
7. Scaling Governance with Azure Blueprints
Introduction to Azure BlueprintsWhat Are Azure Blueprints?Key Concepts: Definitions, Artifacts, AssignmentsBlueprint DefinitionArtifacts in ContextBlueprint AssignmentWhy Organizations Need Blueprints for Governance at ScaleThe Scale ChallengeCase in Practice: HIPAA/HITRUST Compliance in HealthcareStrategic AdvantageBlueprints vs. ARM Template vs. Azure PolicyAzure Resource Manager (ARM) Templates: Declarative Infrastructure DeploymentAzure Policy: Continuous Enforcement and ComplianceAzure Blueprints: Governance Packaging and Lifecycle ManagementSupported Artifact TypesResource Group ArtifactPolicy Assignment ArtifactRole Assignment ArtifactARM Template ArtifactExecution and OrderUse Cases: Greenfield vs. Brownfield EnvironmentsGreenfield Deployments: Establishing Standards from the StartBrownfield Environments: Retrofitting Governance at ScaleCreating and Assigning BlueprintsDesigning Blueprint Structure for Standardized EnvironmentDesign Scenario: Standardized Production Subscription BlueprintArtifact PlanningResource Group StructurePolicy AssignmentsRBAC (Role-Based Access Control) DesignInfrastructure TemplateParameterization PlanExecution Order PlanningNaming and VersioningCreating Blueprint Definitions in Azure PortalSpecifying Artifacts: Best Practices for Each Artifact TypeDefining Policies and InitiativesPolicy Artifacts in Blueprint ContextBest Practices for Embedding Policies in BlueprintsEmbedding ARM TemplatesUnderstanding ARM Template Artifacts in BlueprintsBest Practices for Embedding ARM Templates in BlueprintsAssigning RBAC RolesRBAC in the Blueprint ContextBest Practices for Role Assignments in BlueprintsStructuring Resource GroupsKey Architectural Principles for Resource Group StructuringPublishing Azure Blueprints with VersioningAssigning Blueprint to SubscriptionsUnderstanding Blueprint AssignmentParameterization and Dynamic AssignmentBlueprint Assignment Modes: Locking Options (ReadOnly, DoNotDelete, Don’t Lock)Why Locking MattersStrategic Use of Locking in BlueprintsReadOnly (Strictest Control)DoNotDelete (Balanced Control)Don’t Lock (Flexible Control)Troubleshooting Assignment FailuresCommon Causes of Assignment FailuresLifecycle Management of BlueprintsUnderstanding the Blueprint LifecycleBlueprint Lifecycle StagesDraftPublishedAssignedUpdated/DeprecatedUpdating Blueprints Without Impacting AssignmentsUnderstanding the Version-Assignment DecouplingInfrastructure As Code (IaC) with ARM TemplatesWhat Is Infrastructure As Code in Azure?IaC Core PrinciplesWhy IaC Matters in Azure GovernanceNative IaC Tools in AzureCore Concepts of ARM Template DesignStructure of an ARM TemplateCore Design ConceptsTemplate and Parameter FilesTemplate File: Declarative Infrastructure DefinitionParameter File: Deployment-Time ConfigurationLinked and Nested TemplatesWhy Modular Templates MatterLinked TemplatesNested TemplatesTemplate Functions and ExpressionsExpression Syntax in ARM TemplatesCommonly Used ARM FunctionsBest Practice PatternsValidation and Testing of ARM TemplatesValidating Templates Before DeploymentTesting in Context: Policy and Role ImpactsUsing Static Analysis ToolsParameter Set Testing and Input VariationDeployment Simulation Through Sandbox EnvironmentsIntegration with Source Control SystemsWhy Source Control Matters for ARM TemplatesRecommended Repository StructureCI/CD Integration: Automating Validation and DeploymentReal-World Scenarios: Automating Environment DeploymentsScenario: Provisioning a Development Environment via Azure DevOps PipelineSummary
8. Azure Sentinel: Next-Generation SIEM
Introduction to Azure SentinelWhat Is Azure Sentinel?Why Cloud-Native SIEM?Scale Without LimitsSee Everything, EverywhereSmarter, Not Just LouderNo Maintenance HeadachesFast to Deploy, Easy to StartBuilt for AutomationComparison: Traditional SIEM vs. Azure SentinelPositioning Sentinel Within Microsoft Security EcosystemThe Nerve Center for Microsoft Security SignalsSeamless Integration with Defender XDRA Platform, Not Just a ProductKey Features and Benefits of Azure SentinelScalability and Cloud-Native ArchitectureArchitectural InsightsNative Integration with Microsoft 365, Defender, and Other ServicesArchitectural InsightsMachine Learning and AI for Threat DetectionArchitectural InsightsIntegration with MITRE ATT&CK FrameworkArchitectural InsightsBenefit to the SOCCustom Workbooks and DashboardsArchitectural InsightsExample Use CaseDeploying and Configuring Azure SentinelPrerequisites and Initial PlanningStep by Step: Onboarding Azure SentinelConnecting Data SourcesData Connector OverviewConnecting Microsoft Data SourcesCost Considerations1. Data Ingestion Costs2. Data Retention and Archival3. Additional Cost Factors4. Monitoring and OptimizationAutomating Incident Response with PlaybooksWhat Are Playbooks (Based on Logic Apps)?Common Use Cases: Email Alerts, Ticketing Integration, Containment1. Email Alerts and Notifications2. Ticketing System Integration3. Threat Containment and RemediationCreating Playbooks from Templates1. Accessing Templates via Content Hub2. Using Logic App Designer for Customization3. Trigger Types and Automation RulesTriggering Playbooks via Analytics Rules1. Linking Playbooks to Analytics RulesAdvanced Threat Hunting TechniquesWhat Is Threat Hunting?Importance of Threat Hunting in Azure GovernanceDemo: Use Threat Hunting Query in Microsoft SentinelUsing Hunting Bookmarks and AnnotationsLeveraging Machine Learning in Azure SentinelUEBA (User and Entity Behavior Analytics)How UEBA Works in Microsoft SentinelHow to Enable and Use UEBAFusion Rules and CorrelationHow Fusion Works?How to Use Fusion in Microsoft SentinelConfigure Fusion Rules in Microsoft SentinelWhat Are Fusion Rule Templates?Fusion for Ransomware DetectionData Sources Monitored for Ransomware CorrelationMicrosoft Security GraphWhat Is the Microsoft Security Graph?How Does Microsoft Sentinel Uses Microsoft Security Graph?Building Custom ML Models with Azure ML and NotebooksDemo: Anomaly Detection with Azure ML and SentinelSummary
9. AI and Machine Learning in Cloud Security
AI and ML for Threat DetectionGaps in Rule-Based Detection: Why Custom ML Is Now NecessaryStatic Rules Don’t Detect Unknown ThreatsRule Correlation Is Shallow and Non-contextualRules Require Manual Tuning and Don’t LearnUsing Azure Machine Learning to Classify Suspicious Logins or Resource ChangesProblem Framing: Binary ClassificationKey Data Sources and FeaturesModel Development with Azure MLCreating Custom Models with Historical Incident Labels (True/False Positive)Automating Security ResponsesAI-Driven Decision Logic in Playbooks: Confidence-Based Branching in Logic AppsUsing Enrichment Data to Escalate, Isolate, or LogWhat Is Enrichment?Applying AI-Powered Enrichment in Automated Security WorkflowsEscalation to the Security Operations Center (SOC)Isolation of Compromised Users or DevicesLogging and Monitoring Low-Risk EventsPredictive Analytics for SecurityWhat Is Predictive Security?Predictive Security in CybersecurityForecasting Future ThreatsPrioritizing Risks with AI ModelsWhat Is Risk Prioritization?Proactive Responses Based on PredictionsReal-World Applications and Case StudiesEnterprise Use Case: Reducing Alert Fatigue Using Supervised ML to Rank AlertsCross-Cloud Risk Detection: Azure ML Model Consuming AWS IAM and Microsoft Entra ID Login AnomaliesFinancial Sector: Predicting Fraudulent Resource Creation Using Correlation GraphsSummary
10. Implementing Zero Trust Architecture in Azure
Principles of Zero TrustWhat Is Zero Trust?Core Tenets of Zero TrustWhy Zero Trust in the Cloud EraZero Trust vs. Traditional Perimeter Security ModelsZero Trust Model in AzureZero Trust Architecture for Microsoft AzureSecurity Policy Enforcement as the Architectural CoreThreat Intelligence and Automated RemediationDeployment Strategy: From Components to InitiativesMapping Zero Trust Pillars to Azure ServicesZero Trust Maturity Model (Basic to Optimal)Identity and Access ManagementMicrosoft Entra ID as the Identity Control PlanePrivileged Identity Management (PIM)Role Activation Workflow Using Microsoft Entra ID PIMEntitlement Management and Access ReviewsEntitlement ManagementAccess ReviewsSecuring Machine Identities and Service PrincipalsUnderstanding the Identity TypesService PrincipalsManaged IdentitiesNetwork Segmentation and Micro-segmentationThe Role of Network Isolation in Zero TrustHub-and-Spoke Network Topology in AzureNSGs, ASGs, and Route TablesNetwork Security Groups (NSGs)Application Security Groups (ASGs)User-Defined Route Tables (UDRs)Private Endpoints and Service EndpointsMicro-segmentation with Azure Application Gateway and WAFSummary
11. Multi-Cloud Environment
Governance Challenges in Multi-cloud EnvironmentsWhat Is Multi-cloud?Why Companies Use More Than One CloudCommon Problems in Multi-cloud: Visibility, Control, and CostsVisibility ChallengesControl InconsistenciesCost Management ComplexityReal-World Example: Inconsistent Tagging Across CloudsTools and Strategies for Multi-cloud GovernanceIntroduction to Governance ToolsMicrosoft Azure Governance ToolsAmazon Web Services (AWS) Governance ToolsGoogle Cloud Platform (GCP) Governance ToolsOrganizing Resources with Tags and Naming RulesMicrosoft Azure: Naming and Tagging Best PracticesNaming Conventions in AzureTagging Strategy in AzureAmazon Web Services (AWS): Tagging Best PracticesTagging Strategy in AWSGoogle Cloud Platform (GCP): Labels and TagsLabels in GCPGCP Tags (Resource Manager Tags)Tracking Cloud Costs with Microsoft Cost Management + GCP BillingMicrosoft Azure: Cost Management + BillingGoogle Cloud Platform: Cloud BillingDemo: Tracking Cloud Costs in Azure with Microsoft Cost ManagementDemo: Tracking Costs in Google Cloud Platform with Cloud BillingIntegrating Azure with Other Cloud ProvidersConnecting Azure and AWS Using Azure ArcSummary
12. Future Directions in Cloud Governance and Security
Emerging Trends and TechnologiesThe Expansion of Zero Trust into AI, IoT, and Edge WorkloadsSecuring AI Workloads with Zero TrustZero Trust for IoT DevicesEdge Computing and Zero Trust with Azure Stack and Azure ArcRise of AI-Powered Governance and Security ToolsMicrosoft Security Copilot: AI for Threat Detection and ResponseNatural Language Incident SummarizationAutomated Playbook GenerationThreat Hunting with Natural LanguageContext-Aware RecommendationsAI-Enhanced Policy Recommendations in Microsoft Defender for CloudCopilot for Microsoft Entra: Governance and Identity InsightsMicrosoft Purview and AI-Powered Data GovernanceShift Toward Multi-cloud Governance StandardsMicrosoft’s Approach to Multi-cloud GovernanceMicrosoft Defender for Cloud: Multi-cloud Security Posture ManagementAzure Arc: Unifying Governance Across PlatformsAzure Policy and Azure Monitor for Multi-cloud EnvironmentsThe Role of Quantum Computing in Cloud SecurityUnderstanding Post-Quantum Cryptography (PQC)How Microsoft Is PreparingHow to Prepare Your Cloud Environment for PQCQuantum Threat Modeling for Cloud SystemsWhy Quantum Threat Modeling Is NeededQuantum-Resistant Key Management in AzureHow Azure Supports Quantum-Resistant Key ManagementMicrosoft’s Quantum Initiatives in Cloud SecurityAzure Quantum and Cryptography ResearchMicrosoft’s Role in Global PQC StandardizationEnhanced Compliance and Regulatory RequirementsAnticipating Changes in Global Data Privacy LawsPreparing for Regulatory Change—Microsoft’s GuidanceIndustry-Specific Compliance TrendsHealthcare Compliance TrendsFinancial Services Compliance TrendsGovernment and Defense Compliance TrendsEnergy and Utilities Compliance TrendsEducation Sector Compliance TrendsThe Future of Cloud Governance FrameworksFrom Blueprints to Azure Landing Zones 3.0What Is an Azure Landing Zone?Technical Architecture Overview: Azure Landing Zone Building BlocksFrom Blueprints to Code-Based GovernanceSustainability and ESG Integration in Governance StrategiesWhy Sustainability Matters in Cloud GovernanceAzure Tools for ESG-Aware GovernanceLooking Ahead: A Cloud Governance Vision for 2030AI-First Governance EnginesDecentralized and Self-Sovereign IdentitiesESG-Aware Governance as a DefaultUnified Multi-cloud and Edge GovernanceTrust-Centric and Ethically Aligned GovernanceSummary
13. Harnessing Azure AI and Copilot for Governance and Security
Overview of Azure AI CapabilitiesEvolution of AI in Microsoft AzureKey Azure AI ServicesAzure Cognitive ServicesAzure OpenAI ServicesAzure Machine Learning (AML)Role of AI in Enterprise Governance and SecurityImplementing Azure AI for Security and ComplianceAI-Driven Threat Detection with Microsoft Defender for CloudUsing AI in Risk Analysis and Regulatory ComplianceAI in Microsoft Compliance ManagerAI-Driven Compliance Scoring in Microsoft Defender for CloudAutomated Classification with Microsoft PurviewAI-Powered Policy Enforcement and Drift DetectionDemo: Automating Compliance Reports with AIIntroduction to Azure CopilotWhat Is Azure Copilot?Architecture and Deployment OverviewComparison with Other Microsoft CopilotsUsing Copilot for Governance and AutomationCopilot Scenarios for Resource GovernanceAutomating Azure Policy Creation and Management with CopilotEnhancing Cost Management and Budget ForecastingReal-Time Cost Analysis with CopilotForecasting and “What If” ModelsAI-Powered Cost Optimization RecommendationsReal-World Use Cases and Best PracticesAI for Large-Scale Policy EnforcementCopilot for Incident Response in Zero Trust ArchitecturesLessons from Early AdoptersEthical Considerations and Data Residency ConcernsSummary
14. Elevating skills in Azure Governance and Security
Evolving As a Governance and Security PractitionerThe Mindset of Lifelong Learning in the Azure EcosystemTips and Tricks for Lifelong Learning in AzureAdapting to Continuous Change in Cloud PlatformsTips and Tricks for Adapting to Azure ChangesThe Shift from Reactive Management to Proactive GovernanceBuilding a Personal Azure Governance LabSetting Up a Free-Tier or Sandbox Environment SafelySetting Up a Safe Azure Lab Using the Free AccountMastering Microsoft Learn for Governance and SecurityTargeted Learning Paths and ModulesMaximizing Sandbox Labs and AssessmentsLeveraging Open Source and Community ProjectsEssential GitHub Repositories Every Architect Should FollowReusable Templates and Automation ToolsCommunity Contributions and CollaborationCertifications for Strategic AdvancementSC-100, AZ-500, AZ-305: What to Pursue and WhySC-100: Microsoft Cybersecurity ArchitectAZ-500: Microsoft Azure Security Engineer AssociateAZ-305: Azure Solutions Architect ExpertStudy Strategies, Labs, and Learn IntegrationMapping Certifications to Job RolesStaying Current in the Azure EcosystemMonitoring Updates, Blogs, and Release NotesTools for Tracking Road Map and Platform ChangesSummary
Index

Overview

Pro Azure Governance and Security will be an indispensable guide for IT professionals, cloud architects, and security engineers aiming to master the latest governance and security practices within Microsoft Azure. This updated edition will build on the foundational elements of the original book, integrating cutting-edge technologies and tools that have emerged in recent years. The book will provide a comprehensive understanding of how to effectively utilize Azure Policy, Blueprints, Security Center, and Sentinel, while also introducing new topics such as Azure AI, Copilot, Copilot Studio, and other advanced governance and security tools.

In an era where digital transformation is accelerating, organizations are increasingly moving their workloads to the cloud. Effective governance and security practices are crucial to ensure that these cloud environments are compliant, secure, and resilient. With the continuous evolution of cloud technologies, it is essential to stay updated with the latest tools and methodologies. This book will address these needs by providing comprehensive coverage of both foundational and advanced topics, making it a vital resource for anyone responsible for managing and securing Azure environments.

The integration of AI, machine learning, and automation tools like Azure Copilot will further enhance the ability to proactively manage and secure cloud resources. By incorporating these cutting-edge technologies, the book will ensure that readers are equipped with the knowledge and skills required to navigate the complexities of modern cloud governance and security effectively.

What You'll Learn

Modern Governance in the Cloud
Advanced Azure Scaffold for Enterprise Architecture
Contemporary Azure Naming Conventions and Standards
Comprehensive Azure Policy Implementation
Enhanced Security with Azure Security Center
Leveraging Azure Monitor and Log Analytics for Operations
Scaling Governance with Azure Blueprints and DevOps
Azure Sentinel: Next-Generation SIEM
Integrating AI and Machine Learning in Cloud Security
Implementing Zero Trust Architecture in Azure
Multi-Cloud and Hybrid Cloud Governance
Future Directions in Cloud Governance and Security
Harnessing Azure AI and Copilot for Governance and Security
Additional Azure Governance and Security Tools

Who This Book Is For

Technical engineers, consultants, solution and cloud architects, IT managers, and SecOps teams who need to understand how to integrate governance, security, and compliance in hybrid and Azure environments. A basic understanding of Azure or other public cloud platforms is beneficial, but not required.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Mastering Azure Security - Second Edition

Publisher Resources

ISBN: 9798868815270Purchase Link Publisher Website

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills