Alright.
What have we learned in this module?
Well as a running theme,
I want you to keep least privilege authorization at the top of your mind.
Recall that in information security we talk about the three A's,
authentication, that's credential validation.
Is this calling user or process who they claim to be?
And then once that security principle has been authenticated,
that's where authorization comes in.
In other words,
what is the scope of permission for that successfully authenticated identity?
And least privilege means that we're giving permissions to those
identities only to the extent that they need those permissions.
That's always our goal.
Another running theme is that we can see Microsoft Defender for
Identity being another example of bringing the power of the
cloud and also artificial intelligence into your on‑premises
Active Directory environment.
I would submit to you that if you've got team members who
are resistant to move into the cloud,
this is a nice way to create a soft landing zone where you can selectively
wire in these cloud‑based services without necessarily doing any lifting and
shifting in on‑premises and just demonstrate the power that these cloud
services can give your on‑premises services.
Our next module, as a matter of fact,
lights up or illustrates that very last point I made.
We're going to be going deeper into remediating Windows Server
security issues by using Azure Services.
Thanks as always for your participation and attention. I'll see you then.