Page Comparison

...

Network Security Groups

• Tightening to control the traffic flow between internal services

• Setting inbound and outbound rules and restricting ports

Image Added

Multi Factor Authentication

• Two-Factor Authentication for Azure portal, Grafana,

...

• Kibana and Superset
• Two factor authentication for Jenkins

SSH Key Management using

...

HashiCorp Vault

• The flexible secrets engines allow Vault to handle

  Vault handles any type of secret data, including database credentials, API keys, PKI keys, and encryption keys.

• Vault also supports dynamic secrets, generating credentials on-demand for fine-grained security controls

  , auditing.

  .

• Vault can authenticate and authorize SSH keys and audit every request

• Allowing Blob storage access only from internal network and specific VM's instead of using keys

• Kibana, superset and yarn dashboard are accessibly only via VPN 

• Grafana is accessible from public internet. Only viewer credentials are shared with users