## Azure Security Fundamentals

Microsoft Azure is massive in the corporate world. It is tightly integrated with Active Directory.

### 1. Entra ID (Formerly Azure AD)
This is NOT just Active Directory in the cloud. It is a completely different identity system using OIDC/SAML protocols.
*   **Conditional Access**: "If user is Admin AND location is China -> Block."
*   **PIM (Privileged Identity Management)**: "Just-in-Time" admin access. You aren't Admin 24/7. You request admin access for 1 hour to fix a server, then it expires.

### 2. Azure Sentinel (The SIEM)
Cloud-native SIEM. (Covered in Module 22).

### 3. Defender for Cloud (ASC)
*   **CSPM (Cloud Security Posture Management)**: Scans your account for bad configs.
    *   "Hey, you have an SQL Database with no encryption."
    *   "Hey, you have `0.0.0.0` on your VM."
*   **Secure Score**: Gamifies security. "Your score is 45%. Turn on MFA to get +10 points."

### 4. NSG (Network Security Group)
The equivalent of AWS Security Groups. Content firewall rules.

### 5. Log Analytics Workspace
The central bucket where all logs (VMs, Firewalls, Entra ID) are dumped for querying (using KQL).