Skip to content

Commit d089bec

Browse files
msmbaldwinmsmbaldwin
committed
Reassigned ownership of security control articles
1 parent 0ca16ac commit d089bec

File tree

4 files changed

+86
-88
lines changed

4 files changed

+86
-88
lines changed

‎articles/event-hubs/event-hubs-security-controls.md

Lines changed: 28 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -3,13 +3,11 @@ title: Security controls for Azure Event Hubs
33
description: A checklist of security controls for evaluating Azure Event Hubs
44
services: event-hubs
55
ms.service: event-hubs
6-
documentationcenter: ''
7-
author: msmbaldwin
8-
manager: barbkess
6+
author: spelluru
97

108
ms.topic: conceptual
11-
ms.date: 09/04/2019
12-
ms.author: mbaldwin
9+
ms.date: 09/23/2019
10+
ms.author: spelluru
1311

1412
---
1513
# Security controls for Azure Event Hubs
@@ -20,43 +18,43 @@ This article documents the security controls built into Azure Event Hubs.
2018

2119
## Network
2220

23-
| Security control | Yes/No | Notes |
24-
|---|---|--|
25-
| Service endpoint support| Yes | |
26-
| VNet injection support| No | |
27-
| Network isolation and firewalling support| Yes | |
28-
| Forced tunneling support| No | |
21+
| Security control | Yes/No | Notes | Documentation |
22+
|---|---|--|--|
23+
| Service endpoint support| Yes | | |
24+
| VNet injection support| No | | |
25+
| Network isolation and firewalling support| Yes | | |
26+
| Forced tunneling support| No | | |
2927

3028
## Monitoring & logging
3129

32-
| Security control | Yes/No | Notes|
33-
|---|---|--|
34-
| Azure monitoring support (Log analytics, App insights, etc.)| Yes | |
35-
| Control and management plane logging and audit| Yes | |
36-
| Data plane logging and audit| Yes | |
30+
| Security control | Yes/No | Notes| Documentation |
31+
|---|---|--|--|
32+
| Azure monitoring support (Log analytics, App insights, etc.)| Yes | | |
33+
| Control and management plane logging and audit| Yes | | |
34+
| Data plane logging and audit| Yes | | |
3735

3836
## Identity
3937

40-
| Security control | Yes/No | Notes|
41-
|---|---|--|
42-
| Authentication| Yes | |
43-
| Authorization| Yes | |
38+
| Security control | Yes/No | Notes| Documentation |
39+
|---|---|--|--|
40+
| Authentication| Yes | | [Authorize access to Azure Event Hubs](authorize-access-event-hubs.md), [Authorize access to Event Hubs resources using Azure Active Directory](authorize-access-azure-active-directory.md), [Authorizing access to Event Hubs resources using Shared Access Signatures](authorize-access-shared-access-signature.md) |
41+
| Authorization| Yes | | [Authenticate a managed identity with Azure Active Directory to access Event Hubs Resources](authenticate-managed-identity.md), [Authenticate an application with Azure Active Directory to access Event Hubs resources](authenticate-application.md), [Authenticate access to Event Hubs resources using shared access signatures (SAS)](authenticate-shared-access-signature.md) |
4442

4543
## Data protection
4644

47-
| Security control | Yes/No | Notes |
48-
|---|---|--|
49-
| Server-side encryption at rest: Microsoft-managed keys | Yes | |
50-
| Server-side encryption at rest: customer-managed keys (BYOK) | No | |
51-
| Column level encryption (Azure Data Services)| N/A | |
52-
| Encryption in transit (such as ExpressRoute encryption, in VNet encryption, and VNet-VNet encryption)| Yes | |
53-
| API calls encrypted| Yes | |
45+
| Security control | Yes/No | Notes | Documentation |
46+
|---|---|--|--|
47+
| Server-side encryption at rest: Microsoft-managed keys | Yes | | |
48+
| Server-side encryption at rest: customer-managed keys (BYOK) | No | | |
49+
| Column level encryption (Azure Data Services)| N/A | | |
50+
| Encryption in transit (such as ExpressRoute encryption, in VNet encryption, and VNet-VNet encryption)| Yes | | |
51+
| API calls encrypted| Yes | | |
5452

5553
## Configuration management
5654

57-
| Security control | Yes/No | Notes|
58-
|---|---|--|
59-
| Configuration management support (versioning of configuration, etc.)| Yes | |
55+
| Security control | Yes/No | Notes| Documentation |
56+
|---|---|--|--|
57+
| Configuration management support (versioning of configuration, etc.)| Yes | | |
6058

6159
## Next steps
6260

‎articles/service-bus-messaging/service-bus-messaging-security-controls.md

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@ title: Security controls for Azure Service Bus Messaging
33
description: A checklist of security controls for evaluating Azure Service Bus Messaging
44
services: service-bus-messaging
55
ms.service: service-bus-messaging
6-
author: axisc
6+
author: spelluru
77

88
ms.topic: conceptual
9-
ms.date: 09/04/2019
10-
ms.author: aschhab
9+
ms.date: 09/23/2019
10+
ms.author: spelluru
1111

1212
---
1313
# Security controls for Azure Service Bus Messaging
@@ -18,43 +18,43 @@ This article documents the security controls built into Azure Service Bus Messag
1818

1919
## Network
2020

21-
| Security control | Yes/No | Notes |
22-
|---|---|--|
23-
| Service endpoint support| Yes (Premium tier only) | VNet service endpoints are supported for [Service Bus Premium tier](service-bus-premium-messaging.md) only. |
24-
| VNet injection support| No | |
25-
| Network isolation and firewalling support| Yes (Premium tier only) | |
26-
| Forced tunneling support| No | |
21+
| Security control | Yes/No | Notes | Documentation |
22+
|---|---|--|--|
23+
| Service endpoint support| Yes (Premium tier only) | VNet service endpoints are supported for [Service Bus Premium tier](service-bus-premium-messaging.md) only. | |
24+
| VNet injection support| No | | |
25+
| Network isolation and firewalling support| Yes (Premium tier only) | | |
26+
| Forced tunneling support| No | | |
2727

2828
## Monitoring & logging
2929

30-
| Security control | Yes/No | Notes|
31-
|---|---|--|
32-
| Azure monitoring support (Log analytics, App insights, etc.)| Yes | Supported via [Azure Monitor and Alerts](service-bus-metrics-azure-monitor.md). |
33-
| Control and management plane logging and audit| Yes | Operations logs are available; see [Service Bus diagnostic logs](service-bus-diagnostic-logs.md). |
30+
| Security control | Yes/No | Notes| Documentation |
31+
|---|---|--|--|
32+
| Azure monitoring support (Log analytics, App insights, etc.)| Yes | Supported via [Azure Monitor and Alerts](service-bus-metrics-azure-monitor.md). | |
33+
| Control and management plane logging and audit| Yes | Operations logs are available. | [Service Bus diagnostic logs](service-bus-diagnostic-logs.md) |
3434
| Data plane logging and audit| No | |
3535

3636
## Identity
3737

38-
| Security control | Yes/No | Notes|
39-
|---|---|--|
40-
| Authentication| Yes | Managed through [Azure Active Directory Managed Service Identity](service-bus-managed-service-identity.md); see [Service Bus authentication and authorization](service-bus-authentication-and-authorization.md).|
41-
| Authorization| Yes | Supports authorization via [RBAC](authenticate-application.md) and SAS token; see [Service Bus authentication and authorization](service-bus-authentication-and-authorization.md). |
38+
| Security control | Yes/No | Notes| Documentation |
39+
|---|---|--|--|
40+
| Authentication| Yes | Managed through [Azure Active Directory Managed Service Identity](service-bus-managed-service-identity.md).| [Service Bus authentication and authorization](service-bus-authentication-and-authorization.md). |
41+
| Authorization| Yes | Supports authorization via [RBAC](authenticate-application.md) and SAS token. | [Service Bus authentication and authorization](service-bus-authentication-and-authorization.md). |
4242

4343
## Data protection
4444

45-
| Security control | Yes/No | Notes |
46-
|---|---|--|
45+
| Security control | Yes/No | Notes | Documentation |
46+
|---|---|--|--|
4747
| Server-side encryption at rest: Microsoft-managed keys | Yes for server-side encryption-at-rest by default. | Customer managed keys and BYOK are not yet supported. Client side encryption is the client's responsibility |
48-
| Server-side encryption at rest: customer-managed keys (BYOK) | No | |
49-
| Column level encryption (Azure Data Services)| N/A | |
50-
| Encryption in transit (such as ExpressRoute encryption, in VNet encryption, and VNet-VNet encryption)| Yes | Supports standard HTTPS/TLS mechanism. |
51-
| API calls encrypted| Yes | API calls are made through [Azure Resource Manager](../azure-resource-manager/index.yml) and HTTPS. |
48+
| Server-side encryption at rest: customer-managed keys (BYOK) | No | | |
49+
| Column level encryption (Azure Data Services)| N/A | | |
50+
| Encryption in transit (such as ExpressRoute encryption, in VNet encryption, and VNet-VNet encryption)| Yes | Supports standard HTTPS/TLS mechanism. | |
51+
| API calls encrypted| Yes | API calls are made through [Azure Resource Manager](../azure-resource-manager/index.yml) and HTTPS. | |
5252

5353
## Configuration management
5454

55-
| Security control | Yes/No | Notes|
56-
|---|---|--|
57-
| Configuration management support (versioning of configuration, etc.)| Yes | Supports resource provider versioning through the [Azure Resource Manager API](/rest/api/resources/).|
55+
| Security control | Yes/No | Notes| Documentation |
56+
|---|---|--|--|
57+
| Configuration management support (versioning of configuration, etc.)| Yes | Supports resource provider versioning through the [Azure Resource Manager API](/rest/api/resources/).| |
5858

5959
## Next steps
6060

‎articles/service-bus-relay/TOC.yml

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,12 +32,14 @@
3232
href: https://github.com/Azure/azure-relay/tree/master/samples/wcf-relay
3333
- name: Concepts
3434
items:
35-
- name: Authentication and authorization
36-
href: relay-authentication-and-authorization.md
35+
- name: Security
36+
items:
37+
- name: Authentication and authorization
38+
href: relay-authentication-and-authorization.md
39+
- name: Built-in security controls
40+
href: service-bus-relay-security-controls.md
3741
- name: Hybrid Connections protocol
3842
href: relay-hybrid-connections-protocol.md
39-
- name: Built-in security controls
40-
href: service-bus-relay-security-controls.md
4143
- name: How To
4244
items:
4345
- name: Plan and design

‎articles/service-bus-relay/service-bus-relay-security-controls.md

Lines changed: 26 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -3,13 +3,11 @@ title: Security controls for Azure Service Bus Relay
33
description: A checklist of security controls for evaluating Azure Service Bus Relay
44
services: service-bus-relay
55
ms.service: service-bus-relay
6-
documentationcenter: ''
7-
author: msmbaldwin
8-
manager: barbkess
6+
author: spelluru
97

108
ms.topic: conceptual
11-
ms.date: 09/04/2019
12-
ms.author: mbaldwin
9+
ms.date: 09/23/2019
10+
ms.author: spelluru
1311

1412
---
1513
# Security controls for Azure Service Bus Relay
@@ -20,43 +18,43 @@ This article documents the security controls built into Azure Service Bus Relay.
2018

2119
## Network
2220

23-
| Security control | Yes/No | Notes |
24-
|---|---|--|
25-
| Service endpoint support| No | |
26-
| Network isolation and firewalling support| No | |
27-
| Forced tunneling support| N/A | Relay is the TLS tunnel |
21+
| Security control | Yes/No | Notes | Documentation |
22+
|---|---|--|--|
23+
| Service endpoint support| No | | |
24+
| Network isolation and firewalling support| No | | |
25+
| Forced tunneling support| N/A | Relay is the TLS tunnel | |
2826

2927
## Monitoring & logging
3028

31-
| Security control | Yes/No | Notes|
32-
|---|---|--|
33-
| Azure monitoring support (Log analytics, App insights, etc.)| Yes | |
34-
| Control and management plane logging and audit| Yes | Through [Azure Resource Manager](../azure-resource-manager/index.yml). |
35-
| Data plane logging and audit| Yes | Connection success / failure and errors and logged. |
29+
| Security control | Yes/No | Notes| Documentation |
30+
|---|---|--|--|
31+
| Azure monitoring support (Log analytics, App insights, etc.)| Yes | | |
32+
| Control and management plane logging and audit| Yes | Through [Azure Resource Manager](../azure-resource-manager/index.yml). | |
33+
| Data plane logging and audit| Yes | Connection success / failure and errors and logged. | |
3634

3735
## Identity
3836

39-
| Security control | Yes/No | Notes|
40-
|---|---|--|
41-
| Authentication| Yes | Via SAS. |
42-
| Authorization| Yes | Via SAS. |
37+
| Security control | Yes/No | Notes| Documentation |
38+
|---|---|--|--|
39+
| Authentication| Yes | Via SAS. | [Azure Relay authentication and authorization](relay-authentication-and-authorization.md) |
40+
| Authorization| Yes | Via SAS. | [Azure Relay authentication and authorization](relay-authentication-and-authorization.md) |
4341

4442
## Data protection
4543

46-
| Security control | Yes/No | Notes |
47-
|---|---|--|
48-
| Server-side encryption at rest: Microsoft-managed keys | N/A | Relay is a web socket and does not persist data. |
49-
| Server-side encryption at rest: customer-managed keys (BYOK) | No | Uses Microsoft TLS certs only. |
50-
| Column level encryption (Azure Data Services)| N/A | |
51-
| Encryption in transit (such as ExpressRoute encryption, in VNet encryption, and VNet-VNet encryption)| Yes | Service requires TLS. |
44+
| Security control | Yes/No | Notes | Documentation |
45+
|---|---|--|--|
46+
| Server-side encryption at rest: Microsoft-managed keys | N/A | Relay is a web socket and does not persist data. | |
47+
| Server-side encryption at rest: customer-managed keys (BYOK) | No | Uses Microsoft TLS certs only. | |
48+
| Column level encryption (Azure Data Services)| N/A | | |
49+
| Encryption in transit (such as ExpressRoute encryption, in VNet encryption, and VNet-VNet encryption)| Yes | Service requires TLS. | |
5250
| API calls encrypted| Yes | HTTPS. |
5351

5452

5553
## Configuration management
5654

57-
| Security control | Yes/No | Notes|
58-
|---|---|--|
59-
| Configuration management support (versioning of configuration, etc.)| Yes | Through [Azure Resource Manager](../azure-resource-manager/index.yml).|
55+
| Security control | Yes/No | Notes| Documentation |
56+
|---|---|--|--|
57+
| Configuration management support (versioning of configuration, etc.)| Yes | Through [Azure Resource Manager](../azure-resource-manager/index.yml).| |
6058

6159
## Next steps
6260

0 commit comments

Comments
 (0)