Скачать с ютуб How to secure Azure Data Lake Gen1 Security в хорошем качестве

How to secure Azure Data Lake Gen1 Security

azure data lake gen1 security Security in Azure Data Lake Storage Gen1 Best practices for using Azure Data Lake Storage Gen2 Overview of security in Azure Data Lake Storage Gen Many enterprises are taking advantage of big data analytics for business insights to help them make smart decisions. An organization might have a complex and regulated environment, with an increasing number of diverse users. It is vital for an enterprise to make sure that critical business data is stored more securely, with the correct level of access granted to individual users. Azure Data Lake Storage Gen1 is designed to help meet these security requirements. In this article, learn about the security capabilities of Data Lake Storage Gen1, including: Authentication Authorization Network isolation Data protection Auditing Authentication and identity management Authentication is the process by which a user's identity is verified when the user interacts with Data Lake Storage Gen1 or with any service that connects to Data Lake Storage Gen1. For identity management and authentication, Data Lake Storage Gen1 uses Azure Active Directory, a comprehensive identity and access management cloud solution that simplifies the management of users and groups. Each Azure subscription can be associated with an instance of Azure Active Directory. Only users and service identities that are defined in your Azure Active Directory service can access your Data Lake Storage Gen1 account, by using the Azure portal, command-line tools, or through client applications your organization builds by using the Data Lake Storage Gen1 SDK. Key advantages of using Azure Active Directory as a centralized access control mechanism are: Simplified identity lifecycle management. The identity of a user or a service (a service principal identity) can be quickly created and quickly revoked by simply deleting or disabling the account in the directory. Multi-factor authentication. Multi-factor authentication provides an additional layer of security for user sign-ins and transactions. Authentication from any client through a standard open protocol, such as OAuth or OpenID. Federation with enterprise directory services and cloud identity providers. Security considerations Azure Data Lake Storage Gen2 offers POSIX access controls for Azure Active Directory (Azure AD) users, groups, and service principals. These access controls can be set to existing files and directories. The access controls can also be used to create default permissions that can be automatically applied to new files or directories