Azure Security Fundamentals

https://learn.microsoft.com/en-us/azure/security/fundamentals/

Admin

Learn how to secure your cloud solutions on Azure with best practices and guidance covering various...

Tokens:175,815

Snippets:1,681

Trust Score:10

Update:9 months ago

Show doc for...

Tokens:

Raw

### Install Azure Linux Agent Manually

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/azure-marketplace-images

This snippet demonstrates the manual installation process for the Azure Linux Agent from its GitHub repository. It involves copying the agent file to a specific directory and executing the installation command. The agent configuration file is typically located at /etc/waagent.conf.

```bash
# chmod 755 /usr/sbin/waagent
# /usr/sbin/waagent -install
```

--------------------------------

### Get Kubernetes Job Logs (Bash)

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/trusted-hardware-identity-management

This command retrieves the logs from the 'curl' job pod. Successful execution will display the requested AMD collateral, including `vcekCert`, `tcbm`, and `certificateChain`, confirming the process worked correctly.

```Bash
kubectl logs job/curl
```

--------------------------------

### Request AMD Collateral in CVM Guest (Bash)

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/trusted-hardware-identity-management

This snippet demonstrates how to request AMD collateral, including the VCEK certificate and chain, directly from a confidential virtual machine (CVM) guest using a GET request. It targets the metadata endpoint for AMD certification.

```Bash
GET "http://169.254.169.254/metadata/THIM/amd/certification"
```

```Bash
curl GET "http://169.254.169.254/metadata/THIM/amd/certification" -H "Metadata: true"
```

Tokens:

Raw