TechNet Flash, Volume 13, Issue 4 - February 23, 2011
TechNet Flash Editor's Note from Mitch Irsfeld

Get Past the Security Crossroads in Your Cloud Migration

Windows Azure implements an array of security controls that customers can use to achieve their unique level of security. The Windows Azure Security Overview white paper describes these controls. Then see how Microsoft provides a trustworthy environment for its own cloud services in the executive strategy brief Securing the Cloud Infrastructure. The document describes Microsoft's risk-based information security and privacy controls, and the compliance framework used.

For recommended approaches to security management for applications and services hosted on the Windows Azure platform, Joshua Hoffman's Understanding Security Account Management in Windows Azure in TechNet Magazine covers best practices for creating and managing administrative accounts, how to use certificates for authentication, and how to handle transitions when employees enter or leave an organization.

And it's not necessary to implement new tools to securely access cloud services. In the TechNet Magazine article Secure Access to Your Cloud Services, Yuri Diogenes explains how Forefront Threat Management Gateway 2010 can assist your business to securely access cloud services while providing high availability services to on-premises users.

Windows Azure Security Resources
Microsoft has produced a wealth of new content in recent months to help both IT decision-makers and security administrators understand how to reduce risk, meet compliance requirements and implement security controls around their cloud environments. Get started with the Windows Azure Platform Security Essentials video series, part of the Security Talk series. These videos include episodes for technical decision makers and business decision makers.

Make sure to catch the Security Talk video Delivering and Implementing a Secure Cloud Infrastructure for a look at how Microsoft delivers a secure cloud computing infrastructure by implementing a special framework of processes and technologies.

Speaking of videos, TechNet Edge is hosting a two-part series titled Data Security in Azure. Part 1 covers the methods for securing of your Azure Storage accounts and data while moving it to the cloud. Part 2 focuses on making your Azure Storage container and blob items URL-addressable in a secure fashion.

For porting the UI of an existing application to Windows Azure, the TechNet Wiki has an article on lessons learned when Securing Silverlight Applications with Claims-based Authentication in Windows Azure.

And finally, for a rollup of new Windows Azure security content, check out Security Resources for Windows Azure on in the MSDN Library for lists of papers, articles, blogs, videos, and webcasts on the topic.

Thanks for reading,

Mitch Irsfeld
Editor, TechNet Flash

Subscribe to the TechNet Flash Feed blog for news updates as they happen, often several times a day.