Page 4 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
Key Vault soft delete makes deleted vaults and objects recoverable for a retention period, while purge protection prevents permanent purge during that period and cannot be disabled after enablement.
Read the guide
Azure resource locks can block deletion or modification at management scope and inherit to child resources, but authorized users can remove locks and data-plane operations may not be affected.
Read the explainer
Disallowing Shared Key rejects account-key and dependent SAS authorization while allowing supported Microsoft Entra authorization, so caller discovery and migration must precede enforcement.
Read the playbook
Azure Backup soft delete delays permanent deletion for a configured retention period, but workload and vault support, regional state, recovery-point limits, and restore procedure still require verification.
Read the playbook
Azure Update Manager scheduled patching uses maintenance configurations and requires compatible machine orchestration; a visible schedule can fail to patch a machine whose orchestration state does not match.
Read the checklist
Azure Bastion Premium can record graphical RDP and SSH sessions to Blob storage, but it records all sessions through an enabled host and has storage, identity, client, and immutability constraints.
Read the guide
Azure Monitor data collection rules define sources, schemas, transformations, and destinations, while associations decide which resources use them; either can change the telemetry available to operations and security.
Read the guide
Configure targeted Azure Service Health alerts and deliver them through channels that do not share the workload's main failure path.
Read the playbook
Trace workload components across Availability Zones, Regions, and control or data planes before making resilience claims.
Read the guide
Use Azure Backup multi-user authorization and Resource Guard to separate routine backup administration from approval of protected operations.
Read the playbook