Microsoft Azure Security Technologies
 Certification and Beyond by David Okeyode

Author:David Okeyode
Language: eng
Format: epub
Publisher: Packt Publishing Limited
Published: 2021-09-08T00:00:00+00:00

As shown in the following diagram, the Monitoring Agent collects information about missing updates and sends them to a Log Analytics workspace. The updates are then installed by runbooks in Azure Automation:

Figure 8.16 – System update management for Azure VMs

When an update deployment is created, the deployment creates a schedule that starts a master update runbook at the specified time for the included computers.

The master runbook then starts a child runbook on each agent to install the required updates. To reduce this attack surface, the recommendation is to keep management ports such as RDP and SSH closed, and only open them when needed for administrative tasks. This is exactly what just-in-time (JIT) VM access allows us to do, without the management overhead of closing and opening these ports manually.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.