Skip to main content

Security & Identity

These labs cover how to secure App Service apps and connect to other Azure services without storing credentials - using managed identity, Key Vault references, and Microsoft Entra ID.

Labs in this section​

  • Reference Key Vault secrets from App Service

    • Store a secret in Azure Key Vault, point an app setting at it with a Key Vault reference, and let App Service resolve it at runtime using the app's managed identity - so there are no secrets in your code or configuration.

  • Protect App Service with Microsoft Defender

    • Inspect and deliberately enable the subscription-wide Defender for App Service plan, review recommendations and alerts safely, route App Service diagnostics to Log Analytics, and restore the original pricing tier.

More labs are on the way, including:

  • Authentication and authorization with Microsoft Entra ID
  • Connect to more Azure services with managed identity

For reference, see the App Service security documentation.