Centralized DNS Resolvers, Privileged Access Workstations, AKS Clusters, Secure Virtual WAN, and Custom Claims in Microsoft Entra

Jiadong Chen
2 min readMay 12, 2024
source: Microsoft

Learn to establish centralized private resolver architectures with Azure Private DNS Resolver, enforce PAWs for admins with Conditional Access policies, deploy robust AKS clusters, optimize single-region deployments with Secure Virtual WAN Hub, and understand Microsoft Entra custom claims providers. Elevate your Azure game now!

✅ Centralized private resolver architecture using Azure private DNS resolver

The steps outlined here detail setting up a centralized architecture to resolve DNS names across Azure networks and on-premises DNS using an Azure DNS private Resolver in a hub and spoke VNet topology, with key components including the creation of VNets, DNS resolver, forwarding ruleset, virtual network links, conditional forwarder, and peering connections
https://lnkd.in/g2Ex6s6i

✅ How to enforce usage of Privileged Access Workstations for Admins

Utilizing Conditional Access policies, Microsoft Graph, and PowerShell to restrict logons from non-PAW devices, providing step-by-step guidance on setting up PAW devices, configuring…

--

--

Jiadong Chen

Microsoft MVP, MCT | Azure Certified Solutions Architect & Cybersecurity Architect Expert | Member of .NET Foundation | Packt Author