Secure Microsoft Foundry environments
Intermediate
Security Engineer
Developer
Azure
Microsoft Foundry
Microsoft Defender for Cloud
To secure Microsoft Foundry environments requires layered protections that control access, safeguard credentials, isolate network communication, and maintain visibility across connected resources. The approach includes defining access boundaries with Microsoft Entra ID and project roles, and integrating Key Vault for secret management. It also uses managed virtual networks, Private Link, and diagnostic logging to maintain privacy, visibility, and compliance. These practices create secure, traceable AI environments that support collaboration without compromising protection.
Learning objectives
In this module, you learn to:
- Define access boundaries using Microsoft Entra ID and role-based access control (RBAC)
- Manage project-level permissions within shared environments
- Secure secrets with Key Vault and managed identities
- Isolate workloads with managed virtual networks and Private Link
- Enable diagnostic logging for centralized visibility and investigation
Prerequisites
Before starting, you should have:
- Experience using Azure portal and core services
- Familiarity with Microsoft Entra ID, RBAC, and conditional access
- Basic understanding of network security, logging, and cloud compliance concepts
Get started with Azure
Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.