Deploy your favorite VM that Supports login using Azure Active Directory credentials, selecting the option Login with Azure AD, and then Enable system assigned managed identity will be selected automatically. In the IAM of the Virtual Machine (or Resource Group, Subscription, and finally Management Group), add one of the options: Virtual Machine Administrator Login Virtual […]
The initiative: [Preview]: Configure machines to create the user-defined Microsoft Defender for Cloud pipeline using Azure Monitor Agent mentioned in part 1 contains from the following policies: [Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines Configure Linux virtual machines to run Azure Monitor Agent with user-assigned managed identity-based authentication Configure Windows virtual machines to […]
Everyone is usually aware of CNI in Azure Kubernetes Service; it allows you to expose the POD IP address in Virtual Network directly. So simply, every pod has an IP address from Virtual Network. This functionality can also be reached if you install docker in Virtual Machine. It can be helpful if you would like […]
Let’s see how Azure Monitor Agents looks under Linux VM: As previously mentioned, boot Legacy Log Analytics Agent and new Azure Monitor Agent can report to the single Log Analytics Workspace. What it looks like: One of the differences between Log Analytics Agent for Windows and Linux was that only Windows one can report to […]
One point of security, covered also by Defender For Cloud is install Log Analytics (LA) on all workloads that uses Virtual Machines (e.g. starting from Cloud Services to the ending to normal VM). It was clear as far we have one Agent, but currently we have two chooses: Azure Monitor Agent (AMA) – some features […]