Secure Azure application platform services for security engineer - Part 1

Containers and Kubernetes provide organizations with speed, portability, and scalability, but they also introduce new attack surfaces across container images, registries, cluster configuration, identities, networking, secrets, and runtime workloads. In this session, participants will learn how to detect container security risks and implement layered security controls across Azure Kubernetes environments. **About the Session** Securing Kubernetes requires more than protecting the underlying virtual machines. Cloud Security Engineers must consider the entire container lifecycle, including: * Container images * Azure Container Registry * Cluster configuration * Kubernetes API access * Identities and permissions * Network connectivity * Secrets * Pods and workloads * Runtime behavior * Vulnerability management * Threat detection This session will explore how Microsoft security technologies can help organizations build a stronger security posture for containerized applications running on Azure. **What You Will Learn** By the end of the session, participants should understand how to: * Explain the security risks associated with containerized workloads * Enable Microsoft Defender for Containers * Assess vulnerabilities in container images * Review security recommendations affecting AKS * Detect suspicious container runtime activity * Secure access to the Kubernetes API * Integrate Microsoft Entra ID with AKS * Apply Kubernetes RBAC * Use private cluster access to reduce external exposure * Configure network security controls * Use workload identity instead of embedded application credentials * Strengthen secrets management * Apply pod security standards * Reduce the attack surface of containerized workloads * Build a defense-in-depth security model for AKS **Who Should Attend?** This session is ideal for: * Participants in the Cloud and AI Security Bootcamp * Cloud Security Engineers * Azure Security Engineers * Kubernetes Administrators * AKS Engineers * DevOp