Visão Geral

Este curso aborda segurança de identidades e controle de acesso no Microsoft Azure, contemplando RBAC, Entra ID, managed identities, service principals, Conditional Access e princípios de Zero Trust.

Objetivo

Após realizar este curso, você será capaz de:

• Implementar IAM seguro no Azure
• Configurar RBAC
• Proteger identidades e aplicações
• Aplicar princípios de Zero Trust

Publico Alvo

• Azure Administrators
• Cloud Security Professionals
• IAM Professionals
• DevOps Security Teams

Pre-Requisitos

• Conhecimentos básicos de Azure
• Familiaridade com Microsoft Entra ID
• Conhecimentos de IAM
• Noções de RBAC
• Conhecimentos básicos de cloud security

Conteúdo Programatico

Module 1: Azure Identity Architecture

1. Azure identity architecture
2. Microsoft Entra ID
3. Azure subscriptions
4. Management groups
5. Tenants
6. Users and groups
7. Service principals
8. Managed identities
9. Identity lifecycle
10. Identity security architecture

Module 2: Azure Role-Based Access Control

1. RBAC fundamentals
2. Roles
3. Role assignments
4. Scope
5. Resource permissions
6. Custom roles
7. Privileged roles
8. Role inheritance
9. Least privilege
10. RBAC governance

Module 3: Authentication Security

1. Authentication methods
2. MFA
3. Passwordless authentication
4. Conditional Access
5. Authentication policies
6. Risk-based authentication
7. Device-based controls
8. Session controls
9. Authentication monitoring
10. Authentication hardening

Module 4: Application and Workload Identity

1. Service principals
2. Managed identities
3. Application registrations
4. Application permissions
5. Delegated permissions
6. Secrets
7. Certificates
8. Workload identity security
9. Application consent
10. Application identity governance

Module 5: Privileged Access Security

1. Privileged roles
2. Microsoft Entra PIM
3. Just-in-Time access
4. Eligible assignments
5. Administrative accounts
6. Privileged Access Workstations
7. Access reviews
8. Privileged activity monitoring
9. Privilege escalation risks
10. Privileged identity hardening

Module 6: Identity Threats

1. Credential attacks
2. Token theft
3. Account takeover
4. Consent attacks
5. Service principal abuse
6. Privilege escalation
7. Persistence
8. Identity reconnaissance
9. Identity threat detection
10. Identity incident response

Module 7: Monitoring and Governance

1. Sign-in logs
2. Audit logs
3. Identity Protection
4. Azure Monitor
5. Microsoft Sentinel
6. Security alerts
7. Access reviews
8. Identity governance
9. Zero Trust
10. Security reporting

Module 8: Practical Azure Identity Security

1. Identity assessment
2. RBAC assessment
3. Conditional Access configuration
4. Managed identity security
5. Privileged access review
6. Identity threat investigation
7. Monitoring implementation
8. Governance validation
9. Security hardening
10. Azure identity security case studies