Z\u00e1lohovanie Azure Key Vault je odpor\u00fa\u010dan\u00e9 na zabezpe\u010denie obnovy \u00fadajov v pr\u00edpade neo\u010dak\u00e1van\u00fdch udalost\u00ed, zabezpe\u010duj\u00fac neust\u00e1lu dostupnos\u0165 a integritu citliv\u00fdch inform\u00e1ci\u00ed vo cloude. Azure Key Vault automaticky zabezpe\u010duje redundanciu a odolnos\u0165 vo\u010di v\u00fdpadkom vo svojej infra\u0161trukt\u00fare s cie\u013eom zaru\u010di\u0165 dostupnos\u0165 ulo\u017een\u00fdch k\u013e\u00fa\u010dov a tajn\u00fdch hodn\u00f4t. Av\u0161ak je d\u00f4le\u017eit\u00e9 zv\u00e1\u017ei\u0165 nieko\u013eko \u010fal\u0161\u00edch faktorov t\u00fdkaj\u00facich sa z\u00e1lohovania a obnovy:<\/p>\n\n\n\n
- \n
- Z\u00e1lohovanie k\u013e\u00fa\u010dov a tajn\u00fdch hodn\u00f4t:<\/strong> Aj ke\u010f je Azure Key Vault navrhnut\u00fd tak, aby bol odoln\u00fd vo\u010di v\u00fdpadkom, organiz\u00e1cie by mali zva\u017eova\u0165 pravideln\u00e9 z\u00e1lohovanie k\u013e\u00fa\u010dov a tajn\u00fdch hodn\u00f4t. T\u00fdmto sp\u00f4sobom m\u00f4\u017eete predch\u00e1dza\u0165 ne\u017eiaducim strat\u00e1m \u00fadajov v pr\u00edpade neo\u010dak\u00e1van\u00fdch udalost\u00ed.<\/li>\n\n\n\n
- Obnova a testovanie obnovy:<\/strong> Organiz\u00e1cie by mali pravidelne vykon\u00e1va\u0165 testy obnovy z\u00e1loh na overenie, \u017ee s\u00fa schopn\u00e9 obnovi\u0165 \u00fadaje v pr\u00edpade potreby. Toto je d\u00f4le\u017eit\u00e9 pre zabezpe\u010denie bezpe\u010dnosti a spo\u013eahlivosti syst\u00e9mu.<\/li>\n\n\n\n
- Strat\u00e9gia z\u00e1lohovania:<\/strong> Je d\u00f4le\u017eit\u00e9 ma\u0165 jasn\u00fa strat\u00e9giu z\u00e1lohovania a obnovy, ktor\u00e1 zoh\u013ead\u0148uje potreby organiz\u00e1cie a \u0161tandardy bezpe\u010dnosti. To m\u00f4\u017ee zah\u0155\u0148a\u0165 ur\u010denie frekvencie z\u00e1lohovania, ukladanie z\u00e1loh na odli\u0161n\u00e9 geografick\u00e9 umiestnenia at\u010f.<\/li>\n\n\n\n
- Archiv\u00e1cia z\u00e1loh:<\/strong> Organiz\u00e1cie by mali zv\u00e1\u017ei\u0165 aj archiv\u00e1ciu z\u00e1loh na dlh\u0161ie obdobie, najm\u00e4 ak to vy\u017eaduj\u00fa regul\u00e1cie alebo politiky organiz\u00e1cie.<\/li>\n<\/ol>\n\n\n\n
Je d\u00f4le\u017eit\u00e9 ma\u0165 na pam\u00e4ti, \u017ee bezpe\u010dnos\u0165 a spo\u013eahlivos\u0165 Azure Key Vault z\u00e1visia od spr\u00e1vneho nastavenia pr\u00edstupov\u00fdch pr\u00e1v, sledovania udalost\u00ed a dodr\u017eiavania bezpe\u010dnostn\u00fdch postupov. Z\u00e1lohovanie je jednou z vrstiev ochrany, ktor\u00fa organiz\u00e1cie m\u00f4\u017eu implementova\u0165 na ochranu svojich citliv\u00fdch \u00fadajov v Azure Key Vault.<\/p>\n\n\n\n
In\u0161tal\u00e1cia potrebn\u00fdch bal\u00edkov pre ubuntu server:<\/strong><\/p>\n\n\n\n
\nhttps:\/\/learn.microsoft.com\/en-us\/cli\/azure\/install-azure-cli-linux?pivots=apt\n<\/div><\/figure>\n\n\n\ncurl -sL https:\/\/aka.ms\/InstallAzureCLIDeb | sudo bash<\/code><\/pre>\n\n\n\nPrihl\u00e1senie sa do AZ<\/strong><\/p>\n\n\n\n
az login --use-device-code\naz account list --refresh<\/code><\/pre>\n\n\n\nZobrazenie detailov po prihl\u00e1sen\u00ed:<\/p>\n\n\n
\n![\"Azure](\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/01\/obrazek.png\")
<\/figure>\n<\/div>\n\n\nZ\u00e1lohovanie Azure keyvault pomocou bash scriptu:<\/strong><\/p>\n\n\n\n
Azure-Key-Vault-Backup-Restore<\/a>Stiahnu\u0165<\/a><\/div>\n\n\n\nZ\u00e1loha je mo\u017en\u00e1 s vyuzit\u00edm scriptu:<\/p>\n\n\n\n
mkdir \/root\/backup-vault\/\n.\/backup.sh -k mhitekeyvault<\/code><\/pre>\n\n\n\n![\"Azure](\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/01\/obrazek-1.png\")
<\/figure>\n<\/div>\n\n\nObnov\u00e1 Keyvault je mo\u017en\u00e1:<\/p>\n\n\n\n
.\/restore.sh -k keyvault2 -z \/root\/backup-vault\/mhitekeyvault-2024-01-05.zip<\/code><\/pre>\n\n\n\n![\"Azure](\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/01\/obrazek-2-1024x409.png\")
<\/figure>\n\n\n\nObnova Key Vault je mo\u017en\u00e1 iba v rovnakom subription. Nieje mo\u017en\u00e9 tieto \u00fadaje obnovit v cudyom subcription. <\/p>\n\n\n\n
Ochrana key vault:<\/p>\n\n\n\n
![\"Azure](\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/01\/obrazek-3-1024x198.png\")
<\/figure>\n\n\n\n1 – zmazan\u00e9 \u00fadaje s\u00fa ponechan\u00e9 po dobu 90 dn\u00ed v sekci\u00ed zmazan\u00e9 <\/p>\n\n\n\n
2 – Je mo\u017en\u00e9 zak\u00e1za\u0165 mazanie zmazan\u00fdch k\u00f3dov ktor\u00e9 s\u00fa v ochrannej lehote. Toto nastavenie je nezvratn\u00e9. <\/p>\n\n\n
\n![\"Azure](\"https:\/\/virtualall.sk\/wp-content\/uploads\/2024\/01\/obrazek-4.png\")
<\/figure>\n<\/div>\n\n\n
\n\n\n\nS\u00favisiace n\u00e1vody<\/h2>\n\n\n\n
- \n\n
- Azure Cloud z\u00e1lohovanie<\/a><\/li>\n\n\n
- Backup Azure Fileshare Duplicati<\/a><\/li>\n\n\n
- Azure Fileshare pripojenie Ubuntu<\/a><\/li>\n\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
Azure Key Vault je slu\u017eba v Microsoft Azure umo\u017e\u0148uj\u00faca bezpe\u010dn\u00e9 ukladanie a riadenie pr\u00edstupu k citliv\u00fdm inform\u00e1ci\u00e1m, ako s\u00fa hesl\u00e1 a k\u013e\u00fa\u010de. Z\u00e1lohovanie je d\u00f4le\u017eit\u00e9 pre obnovu \u00fadajov v pr\u00edpade v\u00fdpadku alebo straty, zabezpe\u010duj\u00fac tak bezpe\u010dnos\u0165 a dostupnos\u0165 kritick\u00fdch inform\u00e1ci\u00ed v cloude.<\/p>\n","protected":false},"author":1,"featured_media":607,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[86],"tags":[87,128,126,127],"class_list":["post-606","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","tag-azure","tag-azure-backup","tag-azure-key","tag-azure-key-vault"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=606"}],"version-history":[{"count":13,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/606\/revisions"}],"predecessor-version":[{"id":2451,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/606\/revisions\/2451"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media\/607"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- Backup Azure Fileshare Duplicati<\/a><\/li>\n\n\n
- Obnova a testovanie obnovy:<\/strong> Organiz\u00e1cie by mali pravidelne vykon\u00e1va\u0165 testy obnovy z\u00e1loh na overenie, \u017ee s\u00fa schopn\u00e9 obnovi\u0165 \u00fadaje v pr\u00edpade potreby. Toto je d\u00f4le\u017eit\u00e9 pre zabezpe\u010denie bezpe\u010dnosti a spo\u013eahlivosti syst\u00e9mu.<\/li>\n\n\n\n