Separate Machine Configuration service access from custom package access
Review the service path and package location separately when restricting Machine Configuration network access.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 40 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Place NAT Gateway behind Azure Firewall without bypassing spoke inspection
Keep the spoke route, firewall policy, and NAT association aligned when expanding outbound connectivity.
Read the guide
Return the right state-change result from Service Fabric data-loss recovery
What should a Service Fabric OnDataLossAsync implementation return after examining or restoring surviving state?
Read the guide
Register a manually installed Mobility agent without discovery credentials
How should a modernized Site Recovery agent be registered when machine and virtualization discovery credentials cannot be supplied?
Read the guide
Separate new-child inheritance from existing Data Lake ACL remediation
Test old and newly created children separately after changing a Data Lake Storage directory's default ACL.
Read the guide
Choose the key identity before creating an encrypted Elastic SAN volume group
Distinguish customer-managed-key setup during volume-group creation from configuration of an existing group.
Read the guide
Include File Sync's paired-region destinations in a GRS firewall review
Review File Sync regional and discovery destinations against the storage redundancy choice.
Read the guide
Review Queue Storage message updates before chaining another work queue
Consider message-state and invisibility updates for multi-step workers, then test interruption and retry behavior explicitly.
Read the guide
Finish Azure Table queries by following continuation tokens
Test completion against continuation state, not merely the number of entities returned in one response.
Read the guide
Prepare scale-set workloads for automatic OS disk replacement
What must be reproducible before an Azure scale set receives automatic OS image upgrades?
Read the guide