Include Image Builder's staging resource group in the image trust boundary
Why does access to an Image Builder staging group matter even when the final gallery image is restricted?
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 23 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Review isolation retirement separately from whether an Azure VM size still runs
Can a VM size remain available after its dedicated isolation property is retired?
Read the guide
Keep MSP key-reset counters increasing across recovery automation
What must repeated MSP key-reset requests preserve when more than one recovery attempt updates the VM?
Read the guide
Separate workload identity from the attestation decision that releases an asset key
Does a valid cross-tenant identity token establish that a VM may receive the publisher's asset key?
Read the guide
Include temporary ACI resources in an isolated Image Builder readiness review
Can subscription policy or quota block an image build even when the image template is unchanged?
Read the checklist
Include image and publisher-tenant identifiers in an RBAC gallery handoff
Why can a recipient have gallery access yet still lack the information needed to deploy an image?
Read the checklist
Do not treat a gallery image's end-of-life date as a deployment block
Will setting an Azure Compute Gallery image end-of-life date prevent new VMs from using it?
Read the guide
Verify the security type produced by Trusted Launch defaults
Can a successful Gen2 deployment still lack Trusted Launch when default behavior is expected?
Read the guide
Plan Trusted Launch rollback as a one-way security transition
Can an existing Azure Gen2 VM be freely toggled between Trusted Launch and Standard security?
Read the guide
Choose UEFI key replacement or extension deliberately in a gallery image
Will a custom Azure image replace the default Secure Boot databases or add to their trust?
Read the guide