Explore digital courses

Learn how to secure resources using policy, role-based access control, and other Azure services

Modules in this learning path:

• Control and Organize with Resource Manager
• Secure Azure Resources with Rbac

Products: Azure, Azure Clis, Azure Portal, Azure Resource Manager, Azure Blueprints, Azure Policy, Azure Rbac

Roles: Solution Architect, Administrator, Security Engineer

Level: Beginner, Intermediate

Subjects: Security

Duration: 83 minutes

Manage data lifecycle, records management, eDiscovery, and communication compliance with Microsoft Purview. (SC-5007)

Modules in this learning path:

• Purview Implement Manage Retention
• Purview Manage Records
• Purview Ediscovery Understand
• Purview Ediscovery Create Case
• Purview Ediscovery Manage Data Sources Holds
• Purview Ediscovery Search
• Purview Ediscovery Review Set
• M365 Compliance Insider Prepare Communication Compliance
• Purview Exercise Implement Retention Ediscovery Communication Compliance

Products: Microsoft Purview

Roles: Auditor

Level: Intermediate

Subjects: Compliance

Duration: 470 minutes

This module guides you through implementing data compliance and governance using Microsoft Purview, ensuring your organization meets regulatory requirements and manages data effectively.

Units in this learning path:

• Introduction
• Create Retention Policy
• Create Retention Label
• Search Ediscovery
• Create Communication Compliance Policy
• Summary

Products: M365, Microsoft Purview

Roles: Administrator, Auditor

Level: Intermediate

Subjects: Data Management, Threat Protection

Duration: 64 minutes

Finance and operations apps use role-based security to assign access to components in the system. A user who is assigned to a security role has access to the set of privileges that is associated with that role.

Units in this learning path:

• 1 Introduction
• 2 Duties Privileges
• 3 Perm Policy
• 4 Xds
• 5 Security
• 6 Exercise
• Entra Id Oauth
• 7 Check
• 8 Summary

Products: Dynamics 365, Dynamics Finance, Dynamics Scm

Roles: Developer, Solution Architect

Level: Intermediate

Subjects: Identity Access

Duration: 75 minutes

Learn how to implement scaling for virtual machine scale sets and load-balanced VMs. Also learn how to implement Azure Site Recovery.

Units in this learning path:

• Introduction
• Describe Virtual Machine Scale Sets
• Implement Scaling
• Implement Load Balancing Vms
• Create Vm Scale Set Azure Portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery
• Knowledge Check
• Summary

Products: Azure, Azure Cloud Shell, Azure Portal, Azure Virtual Machines

Roles: Administrator, Solution Architect, Technology Manager

Level: Intermediate

Subjects: Virtual Machine

Duration: 58 minutes

This course explains how to design secure AI platforms using Microsoft Foundry, applying centralized governance, managed identities, private networking, Azure OpenAI security controls, and container image protection to ensure compliant, production‑ready AI workloads across enterprise environments.

Units in this learning path:

• Introduction
• Understand Microsoft Foundry Security Architecture
• Secure Azure Openai Cognitive Services
• Secure AI Container Images Azure Container
• Exercise Configure Secure AI Infrastructure
• Knowledge Check
• Summary

Products: Azure, Azure Openai, Azure Container Registry, Microsoft Foundry, Azure Machine Learning

Roles: Security Engineer, Administrator, Database Administrator, Data Scientist, Security Operations Analyst

Level: Intermediate

Subjects: Security, Cloud Security, Infrastructure, Information Protection Governance, Artificial Intelligence

Duration: 61 minutes

Learn how to more securely deploy apps in Azure by using Azure Key Vault, managed identities, and Azure App Configuration.

Modules in this learning path:

• Implement Azure Key Vault
• Implement Managed Identities
• Implement Azure App Configuration

Products: Azure, Azure App Configuration, Azure Key Vault, Azure Rbac

Roles: Developer

Level: Intermediate

Subjects: Cloud Security

Duration: 107 minutes

Implement account-level security controls and access governance for Azure Storage. Configure secure transfer settings, choose appropriate authorization models, apply stored access policies for SAS lifecycle management, and enforce Shared Key disable using Azure Policy.

Units in this learning path:

• Introduction
• Configure Storage Account Security
• Select Authorization Model
• Manage Stored Access Policies
• Disable Shared Key Enforce Policy
• Knowledge Check
• Summary

Products: Azure, Azure Storage, Azure Blob Storage

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 21 minutes

This module equips you to configure Azure's foundational security controls for AI workloads. You'll start by configuring Microsoft Entra ID security principals that define *who* and *what* can access your AI resources—from data scientists needing interactive workspace access to managed identities enabling secure service-to-service communication.

Units in this learning path:

• Introduction
• Configure Microsoft Entra Id Security Principals
• Implement Azure Governance Scopes AI Resources
• Apply Azure Policy Primary Governance
• Exercise Configure Secure AI Infrastructure
• Knowledge Check
• Summary

Products: Azure, Azure Machine Learning, Azure Machine Learning Studio, Azure Machine Learning Designer, Azure Data Science Vm

Roles: Data Scientist, Database Administrator, Business Owner, Administrator, Developer

Level: Intermediate

Subjects: Security, Cloud Security, Infrastructure, Information Protection Governance, Devops

Duration: 63 minutes

Implement security controls for Azure App Services and Web Application Firewall. Configure authentication, managed identities, VNet integration, and private endpoints for App Service, and deploy WAF policies on Azure Application Gateway to protect web workloads at the network edge.

Units in this learning path:

• Introduction
• Implement Security Controls Azure App Service
• Configure Web Application Firewall Policies
• Protect App Service Web Application Firewall
• Knowledge Check
• Summary

Products: Azure, Azure App Service, Azure Web Application Firewall, Azure Application Gateway

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 30 minutes

Implement security controls across Azure Container Registry, Azure Container Instances, and Azure Container Apps. Configure RBAC, private endpoints, and content trust for ACR; apply managed identities and virtual network integration for Container Instances; and enforce ingress controls, managed identities, and secrets management for Container Apps environments.

Units in this learning path:

• Introduction
• Secure Azure Container Registry
• Implement Security Controls Azure Container Instances
• Implement Security Controls Azure Container Apps
• Knowledge Check
• Summary

Products: Azure, Azure Container Registry, Azure Container Instances, Azure Container Apps, Defender For Cloud

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security, Containers

Duration: 28 minutes

Implement security controls for Azure Function apps and Logic apps. Configure authentication and authorization, managed identities, virtual network integration, and private endpoints for Function apps, and apply managed identity, connector security, and network isolation for Logic apps.

Units in this learning path:

• Introduction
• Configure Authentication Authorization Function Apps
• Secure Network Access Function Apps
• Implement Security Controls Logic Apps
• Knowledge Check
• Summary

Products: Azure, Azure Functions, Azure Logic Apps, Azure Key Vault

Roles: Security Engineer

Level: Intermediate

Subjects: Security, Cloud Security

Duration: 28 minutes