Locking Down Azure Synapse Analytics
WARNING!
This presentation is now obsolete. The information in this talk has not been updated in a while and could be outdated. Use the information in this presentation at your own risk and be sure to double-check things to ensure that any information you use is accurate.ABSTRACT
Azure Synapse Analytics is a complex system, combining dedicated SQL pools, serverless SQL pools, Spark pools, and more. With such a broad scope, it can be difficult to understand what you need to secure and how you can lock it down. In this talk, we will first review the Azure Synapse Analytics surface area. Then, we will introduce settings and procedures to protect data at rest, in transit, and during processing. Finally, we will review several tools you can use to increase your security posture and reduce the risk of data exfiltration.
ADDITIONAL MEDIA
No recordings or additional media are available for this talk.SLIDES
Click here to access the slides for this presentation.
The slides are licensed under Creative Commons Attribution-ShareAlike.
DEMO CODE
No demos are available for this presentation.LINKS & FURTHER INFO
Full-Length Training
I offer a full-length training of this hosted on the EC-Council's CodeRed platform. It includes almost 8 hours of video content and goes into much more depth on each topic.
Helpful Resources
- Microsoft has a white paper on Synapse security which is worth reading.
- A security baseline for your dedicated SQL pool.
- I have a post on creating a Synapse workspace with managed virtual network and data exfiltration protection.
- A concern about data exfiltration protection and pip.
- Using the TokenLibrary with Spark clusters.
- Migrating data from Cosmos DB to a dedicated SQL pool.
- Built-in Azure Policies for Azure Synapse Analytics.