Deployment & Scaling · Advanced
Securing Azure AI: Entra Identity, RBAC, Private Networking and AI Landing Zones
How to make an Azure AI workload survive a security review - managed identity instead of keys, RBAC scoped properly, private endpoints, and the landing zone pattern that packages it all.
- 55 min lesson
- advanced level
- Azure AI Track
- Narrated presentation
What you’ll learn
- Managed identity and Entra ID instead of API keys; on-behalf-of flows for user identity
- RBAC separation: model deployment, data and trace access, content filter modification
- Private endpoints plus disabled public network access, and the private DNS zone step people forget
- Controlled outbound egress from agent compute as an exfiltration control
- AI landing zones: platform decisions made once, inherited by application teams
- Diagnostic settings to Log Analytics and AI threat protection in Defender for Cloud
Inside this lesson
A narrated, slide-by-slide presentation with 1 prediction exercise, 1 knowledge check, 3 videos. You answer as you go, and the platform checks your work.