Skip to content

Commit 9798396

Browse files
v-dirichardsv-dirichards
authored
Merge pull request #53815 from ceperezb/CEPEREZB-sc100-security-iaas-paas-saas
new unit and minor updates
2 parents cbf814a + f7bcce8 commit 9798396

17 files changed

Lines changed: 321 additions & 77 deletions

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/1-introduction-security-saas-paas-iaas.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ title: Introduction
44
metadata:
55
title: Introduction
66
description: "Introduction to security for SaaS PaaS and IaaS."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit
11-
durationInMinutes: 2
11+
durationInMinutes: 3
1212
content: |
1313
[!include[](includes/1-introduction-security-saas-paas-iaas.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/2-specify-security-baselines-saas-paas-iaas-services.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ title: Specify security baselines for SaaS, PaaS, and IaaS services
44
metadata:
55
title: Specify security baselines for SaaS, PaaS, and IaaS services
66
description: "SC-100 preparatory unit on the topic: specify security baselines for SaaS PaaS and IaaS services."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit
11-
durationInMinutes: 8
11+
durationInMinutes: 11
1212
content: |
1313
[!include[](includes/2-specify-security-baselines-saas-paas-iaas-services.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/3-specify-security-requirements-iot-workloads.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ title: Specify security requirements for IoT workloads
44
metadata:
55
title: Specify security requirements for IoT workloads
66
description: "SC-100 preparatory unit on the topic: Specify security requirements for IoT workloads."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit
11-
durationInMinutes: 7
11+
durationInMinutes: 8
1212
content: |
1313
[!include[](includes/3-specify-security-requirements-iot-workloads.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/4-specify-security-requirements-web-workloads.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ title: Specify security requirements for web workloads
44
metadata:
55
title: Specify security requirements for web workloads
66
description: "SC-100 preparatory unit on the topic: specify security requirements for web workloads."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit
11-
durationInMinutes: 8
11+
durationInMinutes: 9
1212
content: |
1313
[!include[](includes/4-specify-security-requirements-web-workloads.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/5-specify-security-requirements-containers-container-orchestration.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ title: Specify security requirements for containers and container orchestration
44
metadata:
55
title: Specify security requirements for containers and container orchestration
66
description: "SC-100 preparatory unit on the topic: specify security requirements for containers and container orchestration."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit
11-
durationInMinutes: 6
11+
durationInMinutes: 9
1212
content: |
1313
[!include[](includes/5-specify-security-requirements-containers-container-orchestration.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/6-evaluate-ai-services-security.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ title: Specify security requirements for AI workloads
44
metadata:
55
title: Specify security requirements for AI workloads
66
description: "SC-100 preparatory unit on the topic: Specify security requirements for AI workloads."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit
11-
durationInMinutes: 12
11+
durationInMinutes: 14
1212
content: |
1313
[!include[](includes/6-evaluate-ai-services-security.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/6a-evaluate-foundry-platform-security.yml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.specify-requirements-secure-saas-paas-iaas-services.evaluate-foundry-platform-security
3+
title: Evaluate security for Microsoft Foundry workloads
4+
metadata:
5+
title: Evaluate security for Microsoft Foundry workloads
6+
description: "SC-100 preparatory unit on the topic: Evaluate security for Microsoft Foundry workloads from the perspective of the security architect."
7+
ms.date: 03/12/2026
8+
author: ceperezb
9+
ms.author: ceperezb
10+
ms.topic: unit
11+
durationInMinutes: 11
12+
content: |
13+
[!include[](includes/6a-evaluate-foundry-platform-security.md)]

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/7-knowledge-check.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ title: Module assessment
44
metadata:
55
title: Module assessment
66
description: "Knowledge check for module on the topic: specify requirements for securing SaaS, PaaS, and IaaS services."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/8-summary.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ title: Summary
44
metadata:
55
title: Summary
66
description: "Summary for the module: Specify requirements for securing SaaS, PaaS, and IaaS services."
7-
ms.date: 02/06/2026
7+
ms.date: 03/12/2026
88
author: ceperezb
99
ms.author: ceperezb
1010
ms.topic: unit

‎learn-pr/wwl-sci/specify-requirements-securing-saas-paas-iaas-services/includes/1-introduction-security-saas-paas-iaas.md‎

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,25 @@
11
As a security architect, you design security requirements for cloud workloads across Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS) deployment models. Each model shifts different responsibilities between your organization and the cloud provider, requiring you to specify appropriate security controls for the components you manage.
22

3-
This module prepares you to specify security requirements for common Azure workloads including IoT devices, web applications, containers, and AI services. You learn how to apply the Microsoft Cloud Security Benchmark (MCSB) to establish security baselines and evaluate solutions against security best practices.
3+
This module prepares you to specify security requirements for common Azure workloads including IoT devices, web applications, containers, AI services, and Microsoft Foundry deployments. You learn how to apply the Microsoft Cloud Security Benchmark (MCSB) to establish security baselines and evaluate solutions against security best practices.
44

55
## Scenario
66

7-
Your organization operates a diverse Azure environment with IoT devices collecting manufacturing data, web applications serving customers, containerized microservices, and AI-powered applications using Azure OpenAI. As the security architect, you must specify security requirements that protect each workload type while enabling business operations. You need to understand how the shared responsibility model affects your security obligations and how to apply security baselines consistently across different service types.
7+
Your organization operates a diverse Azure environment with IoT devices collecting manufacturing data, web applications serving customers, containerized microservices, and AI-powered applications built on Microsoft Foundry. As the security architect, you must specify security requirements that protect each workload type while enabling business operations. You need to understand how the shared responsibility model affects your security obligations and how to apply security baselines consistently across different service types.
88

99
## Learning objectives
1010

1111
By the end of this module, you're able to:
1212

13-
- Specify security baselines for SaaS, PaaS, and IaaS services using the Microsoft Cloud Security Benchmark
14-
- Specify security requirements for IoT workloads including device authentication, network isolation, and threat detection
15-
- Specify security requirements for web workloads including WAF protection, identity controls, and secure deployment
16-
- Specify security requirements for containers and container orchestration including AKS cluster security, image security, and pod security standards
17-
- Evaluate solutions that include Azure AI services security using MCSB v2 AI-specific controls
13+
- Specify security baselines for SaaS, PaaS, and IaaS services
14+
- Specify security requirements for IoT workloads
15+
- Specify security requirements for web workloads
16+
- Specify security requirements for containers and container orchestration
17+
- Specify security requirements for AI workloads
18+
- Evaluate security for Microsoft Foundry workloads
1819

1920
## Prerequisites
2021

21-
- Advanced experience and knowledge in identity and access, platform protection, security operations, securing data, and securing applications
22+
- Experience and knowledge in identity and access, platform protection, security operations, securing data, and securing applications
2223
- Experience with hybrid and cloud implementations
23-
- Familiarity with Azure services including Azure Kubernetes Service, App Service, IoT Hub, and Azure OpenAI
24+
- Familiarity with Azure services including Azure Kubernetes Service, App Service, IoT Hub, and Microsoft Foundry
2425

0 commit comments

Comments
 (0)