README.md

Extras

Contents

• Overview
• Configurations
• Demo videos

Overview

Contains additional Terraform configurations and supporting resources.

Configurations

This section describes additional Terraform configurations that can be added to #AzureSandbox. These configurations are not required to use #AzureSandbox, but may be useful for learning or testing purposes.

• terraform-azurerm-aistudio enables the use of Azure AI Studio in #AzureSandbox, including:
  • An Azure AI Studio hub configured for network isolation. The hub is connected to the shared services storage account and key vault.
    • An Application Insights workspace connected to the hub.
    • An Azure Container Registry connected to the hub.
  • Additional AI services which can be connected to the hub, including:
    • An Azure AI Services resource.
    • An Azure AI Search resource.
• terraform-azurerm-rg-devops includes the following:
  • A resource group which contains DevOps environment resources.
  • A key vault for managing secrets.
  • A storage account for use as a Terraform azurerm backend.
  • A Linux virtual machine for use as a DevOps agent.
• terraform-azurerm-vm-devops implements a collection of identical IaaS virtual machines designed to be used as Windows Developer Workstations.
• terraform-azurerm-vnet-onprem simulates connectivity to an on-premises network using a site-to-site VPN connection and Azure DNS private resolver.

Demo videos

This section contains an index of demo videos that were built using aspects of #AzureSandbox.

• Improving your security posture with Azure Update Manager (June 2024)

• Improving your security posture with Microsoft Defender for Cloud (May 2024)

  Video	Description
  Defender for Cloud (Part 1)	This video provides an introduction to Microsoft Defender for Cloud.
  Defender for Cloud (Part 2)	This video covers free Foundational Cloud Security Posture Management capabilities.
  Defender for Cloud (Part 3)	This video covers how to enable paid Defender for Cloud CSPM plans.
  Defender for Cloud (Part 4)	This video covers remediating security recommendations for Azure Storage.
  Defender for Cloud (Part 5)	This video covers remediating security recommendations for Azure SQL Database.
  Defender for Cloud (Part 6)	This video covers remediating security recommendations for Windows Server.
  Defender for Cloud (Part 7)	This video covers remediating security recommendations for Ubuntu Server.
  Defender for Cloud (Part 8)	This video covers remediating additional security recommendations for Ubuntu Server.
  Defender for Cloud (Part 9)	This video covers remediating security recommendations for Key Vault.
  Defender for Cloud (Part 10)	This video covers remediating security recommendations for Azure Backup.
  Defender for Cloud (Part 11)	This video covers miscellaneous low risk security recommendations.

• Accessing Azure Files over HTTPS (October 2023)

• Fixing a PowerShell script bug with GitHub Copilot (August 2023)