Map both identities in the managed-application storage encryption recipe
Which grant connects a managed application's identity to the separate identity that can use its storage encryption key?
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 60 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Include the resource group's region in an Azure change-availability plan
Can resources keep running while their resource group's region prevents updates?
Read the guide
Verify the exclusion list after changing a VMware backup disk selection
Why can the MABS disk-exclusion script report success without actually changing the protected disk list?
Read the guide
Plan for an ACI restart when changing managed identities
Treat a running container group's identity update as a workload change, not just an identity setting.
Read the guide
Do not use Azure Firewall connection logs as Azure Files operation records
Recognize the persistent-connection logging boundary when inspecting private-endpoint file access through a secured virtual hub.
Read the guide
Inspect every evaluated security-rule layer before opening Bastion access
Use NSG diagnostics to locate the rule that denies the tested connection rather than stopping at a subnet allow rule.
Read the guide
Do not treat Azure role exclusions as explicit denials
Review other role grants before relying on NotActions or NotDataActions to prevent an operation.
Read the guide
Keep managed Service Fabric NSG overrides inside the supported priority band
Which automatically created Service Fabric network rules can a custom NSG rule override?
Read the guide
Refresh Site Recovery target checks after repairing a readiness warning
How should an operator distinguish a stale target-configuration warning from a fresh replication error in the Site Recovery dashboard?
Read the guide
Validate Blob inventory output before accepting its completion event
Distinguish an inventory event from a usable report and account for all files named in the manifest.
Read the guide