Skip to content

Commit 0566c26

Browse files
committed
udpate azure ai to microsoft foundry
1 parent bac5904 commit 0566c26

6 files changed

Lines changed: 16 additions & 16 deletions

File tree

learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/includes/azure-security-governance-ai-workloads.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,11 +5,11 @@ AI workloads rely on more than one service for security, governance, and access
55
AI workloads in Azure benefit from a connected ecosystem of security and governance tools:
66

77
- **Microsoft Defender for Cloud** provides posture management and workload protection. It identifies configuration gaps, applies policies, and detects threats across the services that support AI applications.
8-
- **Azure AI Foundry** introduces model-level guardrails and observability. It lets you apply controls like **Prompt Shields** and **Content Safety**, then track usage, prompt activity, and system behavior to maintain safe model operations.
8+
- **Microsoft Foundry** introduces model-level guardrails and observability. It lets you apply controls like **Prompt Shields** and **Content Safety**, then track usage, prompt activity, and system behavior to maintain safe model operations.
99
- **Microsoft Purview** supports data protection and governance. It discovers and classifies sensitive data used for training, retrieval, or evaluation. This process ensures that regulated or confidential content is properly managed throughout the AI lifecycle.
1010
- **Microsoft Entra ID** secures identity and access. It provides role-based access control (RBAC), conditional access, and identity protection for users, apps, and services that interact with AI workloads.
1111

12-
Together, these tools not only secure infrastructure and data but also reinforce **responsible AI principles** like transparency and accountability. **Microsoft Purview** provides lineage, classification, and access controls that document how sensitive data is used, while **Azure AI Foundry** adds guardrails and observability that make model operations traceable and reviewable. This combination helps teams demonstrate that model behavior is both governed and auditable.
12+
Together, these tools not only secure infrastructure and data but also reinforce **responsible AI principles** like transparency and accountability. **Microsoft Purview** provides lineage, classification, and access controls that document how sensitive data is used, while **Microsoft Foundry** adds guardrails and observability that make model operations traceable and reviewable. This combination helps teams demonstrate that model behavior is both governed and auditable.
1313

1414
Each tool serves a distinct purpose, and together they form a comprehensive security framework for AI solutions.
1515

@@ -20,11 +20,11 @@ These tools align naturally across the layers of an AI workload:
2020
- **Microsoft Defender for Cloud** monitors and protects the cloud infrastructure where AI services run.
2121
- **Microsoft Purview** safeguards the data those services use.
2222
- **Microsoft Entra ID** controls who and what can access them.
23-
- **Azure AI Foundry** enforces model-specific protections at the application level.
23+
- **Microsoft Foundry** enforces model-specific protections at the application level.
2424

2525
When used together, they create a defense-in-depth approach where posture, data, identity, and model behavior are all protected under a unified strategy.
2626

27-
For example, an AI application that uses **Azure OpenAI** for generation and **Azure AI Search** for retrieval might rely on **Microsoft Purview** to govern sensitive content, **Microsoft Entra ID** to enforce role-based access, **Azure AI Foundry** to apply guardrails, and **Microsoft Defender for Cloud** to detect infrastructure threats. This combination ensures that protections remain consistent across every layer, from data to model output.
27+
For example, an AI application that uses **Azure OpenAI** for generation and **Azure AI Search** for retrieval might rely on **Microsoft Purview** to govern sensitive content, **Microsoft Entra ID** to enforce role-based access, **Microsoft Foundry** to apply guardrails, and **Microsoft Defender for Cloud** to detect infrastructure threats. This combination ensures that protections remain consistent across every layer, from data to model output.
2828

2929
## Implications for security practice
3030

learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/includes/introduction.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ In this module, you learn to:
88

99
- Identify the layers that make up AI workloads in Azure
1010
- Recognize security risks unique to AI, including prompt injection, data leakage, and model misuse
11-
- Explain how Azure AI Foundry provides guardrails and observability for AI models
11+
- Explain how Microsoft Foundry provides guardrails and observability for AI models
1212
- Describe how Microsoft Defender for Cloud, Microsoft Purview, and Microsoft Entra ID support AI security and governance
1313

1414
## Prerequisites

learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/includes/summary.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,15 +5,15 @@ You learned to:
55
- Identify the five layers of an AI workload and how data moves through them
66
- Recognize three categories of AI-specific security risks
77
- Explain how Prompt Shields and Content Safety act as guardrails for model behavior
8-
- Describe how Microsoft Defender for Cloud, Microsoft Purview, Microsoft Entra ID, and Azure AI Foundry form a connected security and governance framework
8+
- Describe how Microsoft Defender for Cloud, Microsoft Purview, Microsoft Entra ID, and Microsoft Foundry form a connected security and governance framework
99

1010
The challenge of applying established cloud security practices to AI workloads required a broader approach to protection. By combining posture management, data governance, model guardrails, and identity protection, Azure delivers a defense-in-depth strategy that secures AI systems across the entire lifecycle.
1111

1212
## Resources
1313

14-
- [What is Azure AI Foundry?](/azure/ai-foundry/what-is-azure-ai-foundry?azure-portal=true)
14+
- [What is Microsoft Foundry?](/azure/ai-foundry/what-is-azure-ai-foundry?azure-portal=true)
1515
- [Enable threat protection for AI services](/azure/defender-for-cloud/ai-threat-protection?azure-portal=true)
16-
- [Prompt Shields in Azure AI Content Safety](/azure/ai-services/content-safety/concepts/jailbreak-detection?azure-portal=true)
16+
- [Prompt Shields](/azure/ai-services/content-safety/concepts/jailbreak-detection?azure-portal=true)
1717
- [Azure AI Content Safety documentation](/azure/ai-services/content-safety?azure-portal=true)
1818
- [Microsoft Purview documentation](/purview?azure-portal=true)
1919
- [Microsoft Entra ID documentation](/entra/identity?azure-portal=true)

learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/includes/understand-ai-services-azure.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ AI applications in Azure typically combine five layers of services:
88
- **Retrieval services**: Azure AI Search or vector indexes are used to supply context and keep responses grounded in organizational data.
99
- **Application layer**: Web apps, APIs, or copilots connect user input to models and return results.
1010
- **Data layer**: Storage accounts and databases hold prompts, cached responses, logs, and training or evaluation datasets.
11-
- **Orchestration and management**: Azure AI Foundry provides tools for building, testing, and operationalizing AI solutions.
11+
- **Orchestration and management**: Microsoft Foundry provides tools for building, testing, and operationalizing AI solutions.
1212

1313
These components resemble other workloads in Azure. What changes is how sensitive data flows through them and how users interact with the system.
1414

learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/index.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,13 +12,13 @@ metadata:
1212
title: Understand how Microsoft Defender for Cloud supports AI security and governance in Azure
1313

1414
summary: |
15-
Microsoft Defender for Cloud plays a central role in securing AI workloads across Azure. Learn how Microsoft Defender for Cloud supports AI security across Azure. Explore the layers of an AI workload, the unique risks AI systems introduce, and the guardrails that protect model inputs and outputs. See how Microsoft Purview, Microsoft Entra ID, and Azure AI Foundry work together to support a unified security and governance strategy.
15+
Microsoft Defender for Cloud plays a central role in securing AI workloads across Azure. Learn how Microsoft Defender for Cloud supports AI security across Azure. Explore the layers of an AI workload, the unique risks AI systems introduce, and the guardrails that protect model inputs and outputs. See how Microsoft Purview, Microsoft Entra ID, and Microsoft Foundry work together to support a unified security and governance strategy.
1616
1717
abstract: |
1818
In this module, you learn to:
1919
- Identify the layers that make up AI workloads in Azure
2020
- Recognize security risks unique to AI, including prompt injection, data leakage, and model misuse
21-
- Explain how Azure AI Foundry provides guardrails and observability for AI models
21+
- Explain how Microsoft Foundry provides guardrails and observability for AI models
2222
- Describe how Microsoft Defender for Cloud, Microsoft Purview, and Microsoft Entra ID work together to secure and govern AI workloads
2323
- Summarize how these services align to create a unified, defense-in-depth strategy for AI security in Azure
2424

learn-pr/wwl-sci/defender-for-cloud-ai-understand-protections/knowledge-check.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -70,24 +70,24 @@ quiz:
7070
- content: "Microsoft Defender for Cloud"
7171
isCorrect: true
7272
explanation: "Correct: Microsoft Defender for Cloud provides cloud security posture management (CSPM) and workload protection. It helps engineers assess AI infrastructure, detect threats, and align configurations with best practices."
73-
- content: "Azure AI Foundry"
73+
- content: "Microsoft Foundry"
7474
isCorrect: false
75-
explanation: "Incorrect: Azure AI Foundry provides guardrails and observability for model operations, not infrastructure posture management."
75+
explanation: "Incorrect: Microsoft Foundry provides guardrails and observability for model operations, not infrastructure posture management."
7676
- content: "Microsoft Purview"
7777
isCorrect: false
7878
explanation: "Incorrect: Microsoft Purview focuses on data discovery and classification, not workload posture or threat detection."
7979

8080
- content: "To achieve a complete protection strategy for Contoso's AI assistant, which combination of tools should the engineer use?"
8181
choices:
82-
- content: "Azure AI Foundry and Microsoft Defender for Cloud"
82+
- content: "Microsoft Foundry and Microsoft Defender for Cloud"
8383
isCorrect: false
8484
explanation: "Incorrect: These tools protect model behavior and infrastructure but not data governance or access."
8585
- content: "Microsoft Purview and Microsoft Entra ID"
8686
isCorrect: false
8787
explanation: "Incorrect: These services address data governance and access control but not workload or model protection."
88-
- content: "Azure AI Foundry and Azure AI Search"
88+
- content: "Microsoft Foundry and Azure AI Search"
8989
isCorrect: false
9090
explanation: "Incorrect: Azure AI Search provides retrieval for contextual responses but not security or governance controls."
91-
- content: "Microsoft Purview, Azure AI Foundry, Microsoft Defender for Cloud, and Microsoft Entra ID"
91+
- content: "Microsoft Purview, Microsoft Foundry, Microsoft Defender for Cloud, and Microsoft Entra ID"
9292
isCorrect: true
9393
explanation: "Correct: Together, these tools provide unified coverage across data governance, model guardrails, workload posture, and identity protection. Microsoft Entra ID enforces access through RBAC and conditional access, while Defender for Cloud extends CSPM to AI workloads."

0 commit comments

Comments
 (0)