Welcome to my AZ-500 lab documentation. This repository contains a collection of hands-on labs I completed while studying for the Microsoft Azure Security Technologies (AZ-500) certification.
Each lab folder includes guided and advanced configurations designed to simulate real-world cloud security scenarios using Microsoft Azure services.
These labs cover a wide range of Azure security topics, including:
- 🔐 Key Vaults, Access Control, Locks
- ☁️ Azure Defender, SQL Auditing, VM Hardening
- 🔎 Security Monitoring with Azure Monitor and Sentinel
- 🔄 Identity and Role Management (RBAC, PIM)
- ⚙️ Networking Security Groups (NSG), Peering, App Security
- 📦 Secure Application Deployment and Logging
- 🧠 Advanced Scenarios using ARM Templates and Multi-Scope Permissions
| Category | Labs Included |
|---|---|
| Identity & Access Management | - Manage Shared Access Signature Keys - Configure Azure Role Based Access Control - Configure Azure Lock - Configure Application Security Group - Configure Multi-Scope Resource Permissions - Configure Multi-Scope Network Security |
| Database & App Security | - Enable Azure Defender for SQL - Enable Database Auditing - Enable Security for Azure SQL - Configure Azure Cosmos DB Security |
| Monitoring & Logging | - Configure Application Insights - Configure App Service Logs - Configure Azure Monitor |
| Infrastructure Hardening | - Configure Security for Azure VM - Harden Virtual Machines - Configure Disk Encryption |
| Networking Security | - Configure NSG for App Traffic - Configure Virtual Network Peering - Configure AKS Security |
| Advanced & Expert Labs | - Use Templates to Manage Key Vault - Implement Cosmos DB + Storage Security - Advanced VM, SQL, Network Configurations |
Each lab includes:
- ✅ Step-by-step implementation instructions
- 🧾 Key learnings and reflections
- 🛠️ Real configuration via Azure Portal, CLI, or Templates
- 🔐 Practical insight into securing workloads on Azure
These labs were a crucial part of my preparation for the AZ-500 certification and helped solidify my understanding of Azure-native security controls.
Feel free to reach out if you're also learning AZ-500 or want to collaborate on cloud security projects!
🌟 Star this repo if you found it helpful or if you're also studying for AZ-500!