You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/includes/azure-security-governance-ai-workloads.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,11 +5,11 @@ AI workloads rely on more than one service for security, governance, and access
5
5
AI workloads in Azure benefit from a connected ecosystem of security and governance tools:
6
6
7
7
-**Microsoft Defender for Cloud** provides posture management and workload protection. It identifies configuration gaps, applies policies, and detects threats across the services that support AI applications.
8
-
-**Azure AI Foundry** introduces model-level guardrails and observability. It lets you apply controls like **Prompt Shields** and **Content Safety**, then track usage, prompt activity, and system behavior to maintain safe model operations.
8
+
-**Microsoft Foundry** introduces model-level guardrails and observability. It lets you apply controls like **Prompt Shields** and **Content Safety**, then track usage, prompt activity, and system behavior to maintain safe model operations.
9
9
-**Microsoft Purview** supports data protection and governance. It discovers and classifies sensitive data used for training, retrieval, or evaluation. This process ensures that regulated or confidential content is properly managed throughout the AI lifecycle.
10
10
-**Microsoft Entra ID** secures identity and access. It provides role-based access control (RBAC), conditional access, and identity protection for users, apps, and services that interact with AI workloads.
11
11
12
-
Together, these tools not only secure infrastructure and data but also reinforce **responsible AI principles** like transparency and accountability. **Microsoft Purview** provides lineage, classification, and access controls that document how sensitive data is used, while **Azure AI Foundry** adds guardrails and observability that make model operations traceable and reviewable. This combination helps teams demonstrate that model behavior is both governed and auditable.
12
+
Together, these tools not only secure infrastructure and data but also reinforce **responsible AI principles** like transparency and accountability. **Microsoft Purview** provides lineage, classification, and access controls that document how sensitive data is used, while **Microsoft Foundry** adds guardrails and observability that make model operations traceable and reviewable. This combination helps teams demonstrate that model behavior is both governed and auditable.
13
13
14
14
Each tool serves a distinct purpose, and together they form a comprehensive security framework for AI solutions.
15
15
@@ -20,11 +20,11 @@ These tools align naturally across the layers of an AI workload:
20
20
-**Microsoft Defender for Cloud** monitors and protects the cloud infrastructure where AI services run.
21
21
-**Microsoft Purview** safeguards the data those services use.
22
22
-**Microsoft Entra ID** controls who and what can access them.
23
-
-**Azure AI Foundry** enforces model-specific protections at the application level.
23
+
-**Microsoft Foundry** enforces model-specific protections at the application level.
24
24
25
25
When used together, they create a defense-in-depth approach where posture, data, identity, and model behavior are all protected under a unified strategy.
26
26
27
-
For example, an AI application that uses **Azure OpenAI** for generation and **Azure AI Search** for retrieval might rely on **Microsoft Purview** to govern sensitive content, **Microsoft Entra ID** to enforce role-based access, **Azure AI Foundry** to apply guardrails, and **Microsoft Defender for Cloud** to detect infrastructure threats. This combination ensures that protections remain consistent across every layer, from data to model output.
27
+
For example, an AI application that uses **Azure OpenAI** for generation and **Azure AI Search** for retrieval might rely on **Microsoft Purview** to govern sensitive content, **Microsoft Entra ID** to enforce role-based access, **Microsoft Foundry** to apply guardrails, and **Microsoft Defender for Cloud** to detect infrastructure threats. This combination ensures that protections remain consistent across every layer, from data to model output.
Copy file name to clipboardExpand all lines: learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/includes/summary.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,15 +5,15 @@ You learned to:
5
5
- Identify the five layers of an AI workload and how data moves through them
6
6
- Recognize three categories of AI-specific security risks
7
7
- Explain how Prompt Shields and Content Safety act as guardrails for model behavior
8
-
- Describe how Microsoft Defender for Cloud, Microsoft Purview, Microsoft Entra ID, and Azure AI Foundry form a connected security and governance framework
8
+
- Describe how Microsoft Defender for Cloud, Microsoft Purview, Microsoft Entra ID, and Microsoft Foundry form a connected security and governance framework
9
9
10
10
The challenge of applying established cloud security practices to AI workloads required a broader approach to protection. By combining posture management, data governance, model guardrails, and identity protection, Azure delivers a defense-in-depth strategy that secures AI systems across the entire lifecycle.
11
11
12
12
## Resources
13
13
14
-
-[What is Azure AI Foundry?](/azure/ai-foundry/what-is-azure-ai-foundry?azure-portal=true)
14
+
-[What is Microsoft Foundry?](/azure/ai-foundry/what-is-azure-ai-foundry?azure-portal=true)
15
15
-[Enable threat protection for AI services](/azure/defender-for-cloud/ai-threat-protection?azure-portal=true)
16
-
-[Prompt Shields in Azure AI Content Safety](/azure/ai-services/content-safety/concepts/jailbreak-detection?azure-portal=true)
Copy file name to clipboardExpand all lines: learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/index.yml
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -12,13 +12,13 @@ metadata:
12
12
title: Understand how Microsoft Defender for Cloud supports AI security and governance in Azure
13
13
14
14
summary: |
15
-
Microsoft Defender for Cloud plays a central role in securing AI workloads across Azure. Learn how Microsoft Defender for Cloud supports AI security across Azure. Explore the layers of an AI workload, the unique risks AI systems introduce, and the guardrails that protect model inputs and outputs. See how Microsoft Purview, Microsoft Entra ID, and Azure AI Foundry work together to support a unified security and governance strategy.
15
+
Microsoft Defender for Cloud plays a central role in securing AI workloads across Azure. Learn how Microsoft Defender for Cloud supports AI security across Azure. Explore the layers of an AI workload, the unique risks AI systems introduce, and the guardrails that protect model inputs and outputs. See how Microsoft Purview, Microsoft Entra ID, and Microsoft Foundry work together to support a unified security and governance strategy.
16
16
17
17
abstract: |
18
18
In this module, you learn to:
19
19
- Identify the layers that make up AI workloads in Azure
20
20
- Recognize security risks unique to AI, including prompt injection, data leakage, and model misuse
21
-
- Explain how Azure AI Foundry provides guardrails and observability for AI models
21
+
- Explain how Microsoft Foundry provides guardrails and observability for AI models
22
22
- Describe how Microsoft Defender for Cloud, Microsoft Purview, and Microsoft Entra ID work together to secure and govern AI workloads
23
23
- Summarize how these services align to create a unified, defense-in-depth strategy for AI security in Azure
Copy file name to clipboardExpand all lines: learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/knowledge-check.yml
+5-5Lines changed: 5 additions & 5 deletions
Original file line number
Diff line number
Diff line change
@@ -70,24 +70,24 @@ quiz:
70
70
- content: "Microsoft Defender for Cloud"
71
71
isCorrect: true
72
72
explanation: "Correct: Microsoft Defender for Cloud provides cloud security posture management (CSPM) and workload protection. It helps engineers assess AI infrastructure, detect threats, and align configurations with best practices."
73
-
- content: "Azure AI Foundry"
73
+
- content: "Microsoft Foundry"
74
74
isCorrect: false
75
-
explanation: "Incorrect: Azure AI Foundry provides guardrails and observability for model operations, not infrastructure posture management."
75
+
explanation: "Incorrect: Microsoft Foundry provides guardrails and observability for model operations, not infrastructure posture management."
76
76
- content: "Microsoft Purview"
77
77
isCorrect: false
78
78
explanation: "Incorrect: Microsoft Purview focuses on data discovery and classification, not workload posture or threat detection."
79
79
80
80
- content: "To achieve a complete protection strategy for Contoso's AI assistant, which combination of tools should the engineer use?"
81
81
choices:
82
-
- content: "Azure AI Foundry and Microsoft Defender for Cloud"
82
+
- content: "Microsoft Foundry and Microsoft Defender for Cloud"
83
83
isCorrect: false
84
84
explanation: "Incorrect: These tools protect model behavior and infrastructure but not data governance or access."
85
85
- content: "Microsoft Purview and Microsoft Entra ID"
86
86
isCorrect: false
87
87
explanation: "Incorrect: These services address data governance and access control but not workload or model protection."
88
-
- content: "Azure AI Foundry and Azure AI Search"
88
+
- content: "Microsoft Foundry and Azure AI Search"
89
89
isCorrect: false
90
90
explanation: "Incorrect: Azure AI Search provides retrieval for contextual responses but not security or governance controls."
91
-
- content: "Microsoft Purview, Azure AI Foundry, Microsoft Defender for Cloud, and Microsoft Entra ID"
91
+
- content: "Microsoft Purview, Microsoft Foundry, Microsoft Defender for Cloud, and Microsoft Entra ID"
92
92
isCorrect: true
93
93
explanation: "Correct: Together, these tools provide unified coverage across data governance, model guardrails, workload posture, and identity protection. Microsoft Entra ID enforces access through RBAC and conditional access, while Defender for Cloud extends CSPM to AI workloads."
0 commit comments