Yönetilen kimlikler: sistem atanan vs kullanıcı atanan

PeopleSphere'de, farklı İK hizmetlerinin sırları yönetmeden Azure kaynaklarına güvenli erişime ihtiyacı var. Bazı hizmetler yalnızca kendi kimliklerine ihtiyaç duyarken, diğerleri uygulamalar arasında ortak bir kimliği paylaşmak zorunda.

Bu egzersiz, kursun bir parçasıdır

Geliştiriciler için Azure Güvenliğini Uygulama

Kursa Göz Atın

Uygulamalı etkileşimli egzersiz

Teoriyi etkileşime dönüştürün, interaktif egzersizlerimizden biriyle

Egzersize başla

Bu egzersiz, kursun bir parçasıdır

Geliştiriciler için Azure Güvenliğini Uygulama

IntermediárioNível de habilidade

4.8+

94 reviews

Kursa Ücretsiz Başla

In this chapter, you’ll first get hands-on with Microsoft Entra ID to manage users, groups, and roles in a secure, centralized way. Then, you’ll build a solid foundation in identity management, exploring how authentication, authorization, and service principals work together to control access. Finally, you’ll learn to use Shared Access Signatures to grant limited, time-bound access to storage without exposing sensitive credentials.

Exercise 1: Getting started with Azure security Exercise 2: Microsoft Entra ID overview Exercise 3: Selecting the right security tool Exercise 4: Authentication and authorization in Entra ID Exercise 5: Creating users in Entra ID Exercise 6: Secure access Exercise 7: Authentication vs. authorization Exercise 8: Microsoft identity platform Exercise 9: Application object vs service principal Exercise 10: App-only access scenarios Exercise 11: Shared Access Signatures (SAS)Exercise 12: Choosing the right SAS Exercise 13: Creating a SAS token Exercise 14: Secure vs. insecure SAS practices

In this chapter, you'll build a strong foundation in securing app settings and sensitive data using Azure App Configuration and Key Vault. You’ll explore how to manage configurations, enable feature flags, and safeguard settings using encryption, private endpoints, and managed identities. Moving into Key Vault, you’ll learn how it stores secrets, keys, and certificates, and how to apply authentication and authorization best practices. Finally, you'll examine advanced protections like Soft Delete and Purge Protection to ensure your critical data remains safe and recoverable.

Exercise 1: Azure App configuration Exercise 2: Deploying App Configuration Exercise 3: Storing settings in App Configuration Exercise 4: Classify feature management components Exercise 5: Getting started with Key vault Exercise 6: Classifying keys, secrets, and certificates Exercise 7: Retrieve Key Vault secrets in Logic App Exercise 8: Managing secrets in Key Vault Exercise 9: Advanced Key vault settings Exercise 10: Choosing the right authorization model Exercise 11: Soft delete & purge protection

In this part of the course, you’ll begin with Azure Managed Identities, seeing how they let applications access resources securely without managing credentials. You’ll then move into Microsoft Graph, where you’ll explore its unified API and practice queries in Graph Explorer. Finally, you’ll advance to techniques like pagination and batching to handle data more efficiently and build scalable integrations.

Exercise 1: Yönetilen kimliklerle güvenli erişim Exercise 2: Yönetilen kimlikler: sistem atanan vs kullanıcı atanan

Geçerli egzersiz

Exercise 3: Birden fazla kaynak için UAMI atama Exercise 4: Microsoft Graph’e Giriş Exercise 5: HTTP yöntemlerini sınıflandırma Exercise 6: Microsoft Graph Explorer’a hızlı tur Exercise 7: Graph Explorer ile verileri keşfet Exercise 8: Microsoft Graph’ın ileri düzey kullanımı Exercise 9: $top ile istemci tarafı sayfalama Exercise 10: Yanıtları isteklerle eşle