مجموعات الأمان وجدران الحماية وWAF

في هذا الدرس

know what each control does and where it sits.

الموضوعات المخطط لها

• Security groups / network security groups (NSGs): stateful allow rules per resource or subnet; the first line of in-network control.
• Network firewalls: central inspection for egress filtering and east-west rules; costs money and is a choke point.
• Web application firewall (WAF): inspects HTTP for common attacks and abusive clients; sits in front of public endpoints.
• Reference security groups by other groups rather than raw IPs where supported.
• Egress control: limit outbound traffic to what is needed to reduce data exfiltration paths.