Locking Down Azure Synapse Analytics
ABSTRACT
Azure Synapse Analytics is a complex system, combining dedicated SQL pools, serverless SQL pools, Spark pools, and more. With such a broad scope, it can be difficult to understand what you need to secure and how you can lock it down. In this talk, we will first review the Azure Synapse Analytics surface area. Then, we will introduce settings and procedures to protect data at rest, in transit, and during processing. Finally, we will review several tools you can use to increase your security posture and reduce the risk of data exfiltration.ADDITIONAL MEDIA
No recordings or additional media are available for this talk.SLIDES
Click here to access the slides for this presentation.
The slides are licensed under Creative Commons Attribution-ShareAlike.
DEMO CODE
No demos are available for this presentation.LINKS & FURTHER INFO
Full-Length Training
I offer a full-length training of this hosted on the EC-Council's CodeRed platform. It includes almost 8 hours of video content and goes into much more depth on each topic.
Helpful Resources
- Microsoft has a white paper on Synapse security which is worth reading.
- A security baseline for your dedicated SQL pool.
- I have a post on creating a Synapse workspace with managed virtual network and data exfiltration protection.
- A concern about data exfiltration protection and pip.
- Using the TokenLibrary with Spark clusters.
- Migrating data from Cosmos DB to a dedicated SQL pool.
- Built-in Azure Policies for Azure Synapse Analytics.