🔒 Azure Security

No secrets in code. No standing credentials. Zero Trust, verified.

The Contoso app on Azure — secured by five building blocks
Microsoft Entra IDIdentity provider
issues short-lived tokens to
3 Managed IdentityAuthenticate without a secret 4 Service PrincipalLet automation in safely
5 Zero Trust private VNet · private endpoints
🖥️
BrowserUser
App ServiceWeb tier
Function AppAPI tier
SQL Database
Storage
Private Endpoint 1 Key VaultGet secrets out of your code 2 App ConfigurationCentral config & feature flags

New here? Follow the numbered badges 1 → 5 to take the journey in order — or tap any service to jump straight in.

5 interactive explainers ~24 animated steps Grounded in Microsoft Learn
Go deeper on Microsoft Learn

Official hands-on learning paths

Build the real thing with Microsoft’s guided, exercise-based training for Key Vault, managed identities, and the Zero Trust security model.

Key Vault module ↗ Managed identities module ↗ Zero Trust path ↗
Prove it — get certified

Which certification fits your role?

The skills in this journey map to four Microsoft security certifications — pick the one that matches your role.

Microsoft Certified Associate badge
SC-500·Associate
Cloud & AI Security Engineer
🛡️ For security engineers

Secure cloud & AI workloads end to end — Key Vault, private endpoints, Entra ID & Defender.

View certification ↗ Microsoft Certified Associate badge
SC-300·Associate
Identity & Access Administrator
🪪 For identity admins

Run Microsoft Entra ID — managed identities, service principals & Zero Trust access.

View certification ↗ Microsoft Certified Associate badge
SC-401·Associate
Information Security Administrator
🔐 For information-protection admins

Protect the data itself — classification, DLP, insider risk & retention with Microsoft Purview.

View certification ↗ Microsoft Certified Expert badge
SC-100·Expert
Cybersecurity Architect
🏛️ For security architects

Design the Zero Trust strategy end to end — build on an associate cert first.

View certification ↗