AAD provides authentication and authorization in Azure. Along with RBAC, it allows you to control who can do what and where. These tools are your first line of defense when managing and securing your cloud resources.

Now, we will concentrate on what else we need to secure in Azure and how can we protect our data and other resources. Securing Azure is different from securing our on-premises infrastructure and requires a different mindset. In Chapter 9, Azure Security and Administration, we will discuss how to harden Azure security and what is available to protect us.