Rowan Lea
Rowan Lea
  • 24
  • 30 772
How I Would Run a Threat Modelling Session For an Azure Architecture
Today I'm going to run through how I would run a threat modelling session for a software architecture, to make sure as many potentially vulnerabilities can be caught as soon as possible. We rely heavily here on Microsoft's STRIDE model, and the OWASP top 10.
-------------------------------------
Miro Board Tool:
miro.com/
STRIDE Threat Model:
allabouttesting.org/stride-acronym-of-threat-modeling-system/
OWASP Top 10:
owasp.org/www-project-top-ten/
Azure Icons Download:
learn.microsoft.com/en-us/azure/architecture/icons/
-------------------------------------
If you need any help with Azure feel free to contact me through UA-cam or any of the links below.
My Links:
► Website: rowanlea.co.uk/
► GitHub: github.com/rowanlea
► LinkedIn: www.linkedin.com/in/rowan-lea/
► Twitter: RowanLea1
You can also message me personally at: mail@rowanlea.co.uk
-------------------------------------
Join in and don't miss out by subscribing and returning weekly for the freshest and most exciting videos around!
#azure #cloud #threatmodelling
Переглядів: 1 070

Відео

Quickly Add New Fields To Azure DevOps Work Items
Переглядів 1,9 тис.Рік тому
If you enjoyed this "speedrun" style content for Azure/Azure DevOps, leave a comment for anything similar you would like to see. If you need any help with Azure feel free to contact me through UA-cam or any of the links below. My Links: ► Website: rowanlea.co.uk/ ► GitHub: github.com/rowanlea ► LinkedIn: www.linkedin.com/in/rowan-lea/ ► Twitter: RowanLea1 You can also message me per...
Are You Paying Enough Attention to Your Azure Costs?
Переглядів 73Рік тому
It's really important to keep track of how much your Azure resources are costing, as the amount can increase very suddenly if you're not 100% sure of what you're doing. Here we take a quick look at Azure Cost Analysis and Infracost, and how they can be used to check our costs at different times. What's on the agenda for today? 00:00 Introduction 00:39 Azure Const Analysis 03:25 Infracost 06:45 ...
Have Your Azure Functions Start Your Container Instances For You
Переглядів 1,3 тис.Рік тому
In today's tutorial, I'm going to show you how you can get your Azure Functions to start your Azure Container Instances automatically for you via code, giving you another avenue for managing your container lifetime. This can be particularly useful if you don't want to do it upon deployment, or using the CLI, and want to instead manage your container runtime with more fine tuned control. This do...
Can You Create Azure Powershell Functions Without Leaving The Portal?
Переглядів 239Рік тому
In this video, we're going to learn how you can create Azure Functions from Powershell scripts, looking at a couple of different trigger types, and we're not going to even leave the Azure Portal! What's on the agenda for today? 00:00 Introduction 00:08 Creating a function app 00:31 Creating our first function 01:30 What other settings can we change? 01:55 Powershell based functionality 02:33 Cr...
Keep Your Azure Function App Secrets Safe!
Переглядів 433Рік тому
In a slightly longer video than usual, I go through 7 different ways you can securely pass secrets to your Azure Function apps. We go from absolute basic, to what some might call a little bit "niche", but either way, I'm sure you'll find something here to suit your needs. What's on the agenda for today? 00:00 Introduction 00:26 Project overview 01:04 1. Local secrets with local.settings.json 02...
Learn How To Debug Your Python Container In Minutes!
Переглядів 350Рік тому
In this quick tutorial, i'll teach you how you can use debugpy to remotely debug Python applications, and show you how to do this to debug an Azure Container App, deployed in the cloud. What's on the agenda for today? 00:00 Introduction 00:23 Making sure the base app works 00:38 Adding debugpy to our project 02:49 Creating a new container instance 04:01 Remote debugging in VS Code 05:16 Thanks ...
Effortlessly Implement Service Bus Queue Triggers!
Переглядів 1,5 тис.Рік тому
It's so easy to jump into Azure Functions and start scaling out your app, or preparing for a cloud migration, and one of my favourite ways to do that is by using Azure Service Bus queues, in conjunction with Azure Functions. Today I'm going to show you how you can get started with this in no time at all! What's on the agenda for today? 00:00 Introduction 00:05 Creating the Service Bus 01:04 Cre...
You Can Give a Static IP to Azure Containers?
Переглядів 2,6 тис.Рік тому
Today I'm going to show you how you can give an Azure Container a static IP address. We're going to achieve this through the use of an Azure Virtual Network, which sounds a bit complicated, but using this video will help you get there in no time! What's on the agenda for today? 00:00 Introduction 00:26 Checking out our container app 00:46 Dynamic IP by default 01:07 Creating a Virtual Network 0...
Deploy a Bicep Template From an Azure Pipeline
Переглядів 718Рік тому
Deploying your Infrastructure as Code with Bicep on Azure doesn't need to be hard. Today we'll look at how to deploy your cloud services using Bicep templates, and how to call them in your Azure DevOps pipelines, using Azure Container Registry as our example service. What's on the agenda for today? 00:00 Introduction 01:01 Adding the Docker template 01:27 Adding the Bicep template 02:13 Setting...
Publish Your Web API to Azure App Services (With Logging)
Переглядів 557Рік тому
Publishing an API to Azure App Services and turning on the logging seems straight forward, but unless you know where you're looking it can be a bit confusing and fiddly. In today's video we're going to learn how to do just that, in next to no time at all. You can get your first API up and running in Azure faster than you thought! What's on the agenda for today? 00:00 Introduction 00:15 Looking ...
A Quick Overview of Branching and Pull Requests in GitHub
Переглядів 49Рік тому
In today's bonus video, we'll explore the simple process of creating branches in GitHub, configuring your Azure DevOps pipeline to trigger from your new branch, and then how to create and review a pull request for your new branch. Everything you need to get started on your source management journey! What's on the agenda for today? 00:00 Introduction 00:11 Why branching? 00:39 Creating a branch ...
Integration Test Your Azure Functions!
Переглядів 1,6 тис.Рік тому
Just because your code is serverless, doesn't mean it deserves any less testing treatment! Today, learn how to run integration tests on your Azure Functions using SpecFlow. What's on the agenda for today? 00:00 Introduction 00:09 Looking through the function code 00:54 Looking at the test project 01:22 Scenario context injection 01:47 Implementing our step definitions 02:40 Retrieving connectio...
How to Setup the Visual Studio SpecFlow Extension
Переглядів 264Рік тому
How to Setup the Visual Studio SpecFlow Extension
Azure Tips: Post to an Azure Function using Swagger
Переглядів 2 тис.Рік тому
Azure Tips: Post to an Azure Function using Swagger
Create and Deploy Azure Functions Without Leaving Visual Studio!
Переглядів 620Рік тому
Create and Deploy Azure Functions Without Leaving Visual Studio!
How to Launch a FastAPI Service in Azure Containers in Less Than 10 Minutes!
Переглядів 12 тис.Рік тому
How to Launch a FastAPI Service in Azure Containers in Less Than 10 Minutes!
Peace of Mind With .NET Regression Tests Using WebApplicationFactory
Переглядів 302Рік тому
Peace of Mind With .NET Regression Tests Using WebApplicationFactory
Bonus #1 - Azure Pipelines Slack Notifications
Переглядів 539Рік тому
Bonus #1 - Azure Pipelines Slack Notifications
Creating an Azure DevOps Pipeline
Переглядів 138Рік тому
Creating an Azure DevOps Pipeline
Azure Migration Series Overview
Переглядів 124Рік тому
Azure Migration Series Overview
Channel Intro
Переглядів 173Рік тому
Channel Intro

КОМЕНТАРІ

  • @sachin01663
    @sachin01663 17 днів тому

    Thank you. Very useful. Does the IP change if we re-build the docker?

  • @SatishSingh-ni8bu
    @SatishSingh-ni8bu 27 днів тому

    Much appreciated!

  • @reddymvanirudh167
    @reddymvanirudh167 28 днів тому

    dude u just saved my life........ thanks and respect from INDIA...

  • @skyouternet
    @skyouternet 29 днів тому

    Great video! very detailed explainations! I have a quick question. The container published to Azure container registry will be public assessible as well? thx

  • @GauravSharma-cg2iv
    @GauravSharma-cg2iv Місяць тому

    That's what i'm looking for last 2 days.. Thank you for explain 😊

  • @reddykrishna4398
    @reddykrishna4398 Місяць тому

    I have created aci with public IP,now i need to add static ip with existing aci public IP,is it possible?

  • @claytonvanderhaar3772
    @claytonvanderhaar3772 Місяць тому

    Hi yes great and very easy to understand, although wanted to check if it is possible to change the IP to a more readable URL

  • @charlessandholm757
    @charlessandholm757 Місяць тому

    Fast and to the point! Many thanks.

  • @AcapellaNutella6
    @AcapellaNutella6 Місяць тому

    can't get a file upload button to show on my swagger ui.

    • @AcapellaNutella6
      @AcapellaNutella6 Місяць тому

      //tried this [HttpPost("UploadFile2")] public async Task<IActionResult> UploadFile2( [HttpTrigger(AuthorizationLevel.Anonymous, "post", Route = null)] IFormFile file) { // var file = req.Form.Files["File"]; var myBlob = file.OpenReadStream(); await _blobService.UploadFileAsync(myBlob, _containerName, file.FileName, file.ContentType); return new OkObjectResult("file uploaded successfylly"); }

  • @AcapellaNutella6
    @AcapellaNutella6 Місяць тому

    Hey, that's my son's name, Rowan lol.

  • @___dyego
    @___dyego Місяць тому

    Thanks!!!

  • @sreedharsharma9082
    @sreedharsharma9082 2 місяці тому

    what if Docker desktop is not available? wsl2 is not being installed on my machine to run docker. can someone help me please?

  • @shijusamuelm
    @shijusamuelm 3 місяці тому

    Thanks Rowan, what is the best way to source the connection string from keyvault instead of local.settings?

  • @andresilva9140
    @andresilva9140 3 місяці тому

    You saved me!

  • @jano.5485
    @jano.5485 3 місяці тому

    In my own tenant, can I create multiple Enterprise Applications from the same App Registration?

  • @CodahWasTaken
    @CodahWasTaken 3 місяці тому

    Thanks!

  • @johnwright1152
    @johnwright1152 3 місяці тому

    Why did you go with a container vs Azure function? Containers look to be more expensive. What am I missing?

    • @rowan-lea
      @rowan-lea 3 місяці тому

      Hey John, both have completely different use cases really. Functions are for short lived processes, and are very specific in how they are programmed. Containers are typically longer lived, can have much more compute power, and are less tied to any particular technology (i.e. you could make an app in any language and easily move it to something like AWS if you wanted to). This video isn't to determine which is best, that depends entirely on your use case :)

    • @rowan-lea
      @rowan-lea 3 місяці тому

      To add to that, typically you're right in terms of cost, running something native to a platform is nearly always cheaper from my experience, but that's not really a good reason to choose one technology over the other, unless you can completely ignore any other factors.

  • @rousseausennett4668
    @rousseausennett4668 3 місяці тому

    Great video 2 mins later and my project is ready to go !

  • @LinusRG
    @LinusRG 3 місяці тому

    Thank you for this video! Was exactly was I needed. I have one problem though: the IP of my container does not automatically change from the private to the in the gateway configured public one. Any ideas what could provoke this behaviour?

  • @bn_ln
    @bn_ln 3 місяці тому

    Rowan - your series on container instances in Azure has been great!

  • @NK-ju6ns
    @NK-ju6ns 4 місяці тому

    Thanks. Enterprise application is not great naming for what it intended for and hence it confuses people in general. But good explanation.

  • @fb2io383
    @fb2io383 4 місяці тому

    Thanks for the explanation, it's very precise, sort and easy. The problem for me is simply that is not running, the container is stopped by Azure for no reason apparently every time that i try to run it. In the overview of the container I got a warning message: "One or more of the containers in 'fastapitest' are in a 'Waiting' state and may not be running'. I've tried with my own fastapi container and also with your exact same code from github. I wonder if Microsoft has change something. Thanks a lot!

    • @samirwalji7613
      @samirwalji7613 3 місяці тому

      Having the same issue - did you ever figure this out?

  • @brink668
    @brink668 4 місяці тому

    Excellent! Thank you!

  • @hellamah
    @hellamah 4 місяці тому

    thanks man, you saved me

  • @cristophercampos3671
    @cristophercampos3671 4 місяці тому

    thanks for the video, question...¿how publish a web api with application gw in this format ip:port? thks again

  • @juandavidpenaranda6136
    @juandavidpenaranda6136 4 місяці тому

    Great tutorial. Thanks!

  • @ggs6475
    @ggs6475 4 місяці тому

    very good video a service to the community :) i was going to use the threat analysis tool by Microsoft do you think that is good for mapping out Azure? thnx.

  • @ricardorolin7791
    @ricardorolin7791 4 місяці тому

    Damn, i not use to comment videos, but you deserve it. I send you a firm, solid and dry, 3 seconds hand shake sir.

    • @rowan-lea
      @rowan-lea 4 місяці тому

      Thank you so much! Glad you liked it 😊

  • @bn_ln
    @bn_ln 4 місяці тому

    Thanks Rowan, just what I was looking for!

    • @rowan-lea
      @rowan-lea 4 місяці тому

      Thanks! Glad it helped :)

  • @cosorxndrw
    @cosorxndrw 5 місяців тому

    How would you configure this to run the app before running the tests and tear down the app after running them? I visited the GitHub link, but there are no hooks there.

  • @rounaksinghbuttar9083
    @rounaksinghbuttar9083 5 місяців тому

    Thank you so much 🙏

    • @rowan-lea
      @rowan-lea 5 місяців тому

      Glad you liked it!

  • @emrahe468
    @emrahe468 5 місяців тому

    If you're looking to leverage GPU capabilities within your containerized applications on Azure, it's important to be aware that accessing GPU resources for Azure Container Instances requires applying for a quota. However, there's a possibility that your request might not be approved due to current limitations and high demand for GPU resources. (my application wasn't approved) As a result, an alternative and more reliable approach would be to provision a Virtual Machine (VM) equipped with a GPU. You can then deploy your Docker containers on this VM. Additionally, it would be greatly beneficial for users like myself if you could provide a detailed tutorial on this process.

  • @fannyguthmann7566
    @fannyguthmann7566 5 місяців тому

    Hey, thank you so much for this amazing tutorial. I did everything you did step by step. I created the container instance. I'm getting an error on Azure, "One or more of the containers in 'aci-fast-api' are in a 'Waiting' state and may not be running. Click here to view container statuses." I waited, restarted but still getting the same error. Should I have done something in Azure before doing your tutorial. It's my first time using Azure and I'm really confuse on how to fix this error

    • @rowan-lea
      @rowan-lea 5 місяців тому

      Hey! Glad you liked it :) Sometimes you get weird errors like that for all kinds of reasons. From my experience usually deleting the resource and creating it again can help solve the problem.

    • @fannyguthmann7566
      @fannyguthmann7566 5 місяців тому

      @@rowan-lea Thank you very much, I'm going to try again :)

  • @21Million
    @21Million 5 місяців тому

    Would love to know how to do this in Java, but I understand that would be quite a bit more complicated.

  • @RickettsJonathan
    @RickettsJonathan 5 місяців тому

    thank you very informative

  • @mikedowns1842
    @mikedowns1842 5 місяців тому

    wonderfully stripped down to essentials -- the MS documentation for the same need (deploy a FastAPI Python Server using docker in Azure) adds a lot of unnecessary steps if you just want a pure API server as you have shown, thanks!

    • @rowan-lea
      @rowan-lea 5 місяців тому

      Thank so much, glad you liked it!!

  • @CodingWithLewis
    @CodingWithLewis 5 місяців тому

    Instant sub. Extremely fast, thorough and easy explanation.

    • @rowan-lea
      @rowan-lea 5 місяців тому

      Really appreciate it, thank you!!

  • @RohitKumar-fr4cm
    @RohitKumar-fr4cm 6 місяців тому

    Thanks I was able to get the public ip address but the problem is I need a https for integrating it with with frontend how can I do so ?

    • @rowan-lea
      @rowan-lea 6 місяців тому

      In the dockerfile you should be able to change the 80 on the last line to 443, this should do it for you, Azure Containers will have the port open by default for you.

  • @hammatrad
    @hammatrad 6 місяців тому

    Thank you Rowan. However, I do have an issue with the private IP address that keeps on changing each time the container is being pulled, killed and restarted? I could not find how to make THAT IP static? any ideas? is it not supported? Thanks.

    • @rowan-lea
      @rowan-lea 6 місяців тому

      Hey! I'm not 100% sure to be honest sorry, when I tried this it was ok, but I've heard other people having the same issue. What do your private IPs look like? From what I can remember mine was something like 10.0.0.1, which I would expect to stay static.

  • @luchaojin4030
    @luchaojin4030 6 місяців тому

    I your video! To the point and helpful! I followed your video deployed a fastapi to Azure. Everything is fine when I do docker test locally. But the container instance I created cannot be started (kept being killed and start). If you have any insights?

    • @rowan-lea
      @rowan-lea 6 місяців тому

      Hey, glad you liked it! Do you mean it starts up initially and then ends straight away? I'm assuming this is consistent? Or it only starts some of the time?

  • @potusboy
    @potusboy 7 місяців тому

    keep going !

    • @potusboy
      @potusboy 7 місяців тому

      theres no good content on azure vm Nvidia gpu acceleration with FastAPI -- ie the configs etc()

  • @user-cn9sb4qi8t
    @user-cn9sb4qi8t 8 місяців тому

    I really hate the way you chose to talk , but thanks for the video

  • @scrtempire8122
    @scrtempire8122 8 місяців тому

    Very well made. I was struggling for a few hours until I came across your video. Concise and straight to the point!

    • @rowan-lea
      @rowan-lea 8 місяців тому

      Thanks so much! Glad it helped you :)

  • @DavidManouchehri
    @DavidManouchehri 8 місяців тому

    How can you add HTTP authentication to a Container App? I know we could add it at the application layer, but then we'd get billed for even unauthorized attempts..

    • @rowan-lea
      @rowan-lea 8 місяців тому

      This should solve your problem as it uses middleware before it gets to your app: learn.microsoft.com/en-us/azure/container-apps/authentication

    • @DavidManouchehri
      @DavidManouchehri 8 місяців тому

      @@rowan-lea From the diagram, won't I still be billed for any requests to the authentication middleware container? The box around both containers makes it seem like they're both running in my account.

    • @rowan-lea
      @rowan-lea 8 місяців тому

      @@DavidManouchehri I'm not sure if they do charge for that. Ultimately you're going to need some kind of control in the way to block the request, it could even be a firewall. Most of these things I would imagine will be a 1 off monthly cost rather than something you pay for per request. There may be another way but it's not something I have much information about sorry.

    • @DavidManouchehri
      @DavidManouchehri 8 місяців тому

      @@rowan-lea I did find out that APIM is Azure's solution, but it costs hundreds per year. 😅 We ended up using Google Cloud Run instead, since authenticating service-to-service requests is free. (AWS Lambdas can also authenticate service-to-service requests, but it's a bit of a pain to deploy Lambda containers compared to Clod Run.)

  • @sistemasfbm1617
    @sistemasfbm1617 8 місяців тому

    Hi Rowan, i have a question: its possible to attach a public ip address to a container instance without delete it or create a new one? thx for the video, its excellent!

    • @rowan-lea
      @rowan-lea 8 місяців тому

      Hey! Thanks very much :) From what I saw when making this video I couldn't find a way to do that, but it shouldn't (in theory) be much of an issue. Containers are supposed to be somewhat brittle in nature, and you should expect them to go down sometimes and have a plan to recover in that scenario. Of course if your containers aren't built like that you may have a little trouble 😅 If you do find a way let me know, I'd be very interested to hear about it!

  • @ptk6909
    @ptk6909 8 місяців тому

    step on Azure that free or not sir ? and necessary to use with Dockerfile ?

    • @rowan-lea
      @rowan-lea 8 місяців тому

      You don't need to do the Azure parts, you can run it locally or find another host. As for the dockerfile I'm not entire sure, I don't do much docker development that doesn't use it. Perhaps a docker compose file could work, but I'm not sure if that's a direct replacement or something you need on top of a dockerfile.

  • @AlexisReyess00a
    @AlexisReyess00a 8 місяців тому

    Very useful video. I have a question, how could I add the option to have a file upload button?

  • @nicolahu1692
    @nicolahu1692 8 місяців тому

    Really Helpful, thank you very much and clear

    • @rowan-lea
      @rowan-lea 8 місяців тому

      Thank you, glad you enjoyed it!

  • @0suresh
    @0suresh 8 місяців тому

    Thank so much please upload more more ...

  • @MyHor
    @MyHor 9 місяців тому

    Great job. Thank you.

    • @rowan-lea
      @rowan-lea 9 місяців тому

      You're welcome! Glad you liked it :D