Developer Support

Advocacy and Innovation

Security - Developer Support

Compliance, Auditors, and Documentation Oh My!

April 7, 2019 Apr 7, 2019 04/7/19
Developer Support
Azure Trust Center should be your first destination for our compliance offerings. Did you know independent audit reports along with Azure compliance offerings can be found there? This documentation is a free, but protected resource for those that utilize Microsoft cloud services (Azure, Office 365, Dynamics 365, etc.). Compliance documentation for HITrust, HIPPA/HITECH, FedRAMP, CSA CCM and many others are stored here.

Physical Data Center Security

April 8, 2018 Apr 8, 2018 04/8/18
Developer Support
Senior Consultant Omar Amin recently posted this article on securing a physical data center.  In this post, he highlights roles and responsibility on security across various hosting options.I don't spend a lot of time talking to customers about physical data center security.As a developer using mostly PaaS or IaaS compute platforms, I ...

Accelerate Your GDPR compliance with Microsoft Cloud

March 22, 2018 Mar 22, 2018 03/22/18
Developer Support
This post is provided by App Dev Managers Latha Natarajan and Sujith Nair who explore the critical aspect of protecting personal information and the impact of data security failures. This post also discusses the rich set Azure services that Microsoft customers and organizations can use to protect personal data in compliance with GDPR and other...

Alternative way to protect your Application Insights “Instrumentation Key” in JavaScript

December 14, 2017 Dec 14, 2017 12/14/17
Pam Lahoud
This post on Application Insights and protecting your instrumentation key comes to us from Premier Developer consultant Adel Ghabboun. Application Insights instrumentation key can be used in both Server and client side. Using the instrumentation key in the server side is secured and no one can see it. The opposite happens on the client ...

Homomorphic Encryption 101

November 15, 2017 Nov 15, 2017 11/15/17
Pam Lahoud
In this article from his blog, Premier Developer consultant Razi Rais covers some of the basics of a powerful security & privacy tool – homomorphic encryption.I was recently exploring methods for improved privacy using various encryption schemes and stumbled upon Homomorphic Encryption that has a huge potential  in that area. I do ...

Role Based Access Control in ASP.NET MVC

September 5, 2017 Sep 5, 2017 09/5/17
Monu Bambroo
In this post, Premier Developer consultant Lizet Pena De Sola explains Role Based Access Control in ASP.NET MVC. Role Based Access Control in MVC is pretty straight forward. There is also a way to do claims access control, but the most common way is based on roles. To show or hide action links in a view depending on the user role we can ...

HTTP Secure, Part II. Is Diffie-Hellman always used in the HTTPS key exchange?

August 23, 2017 Aug 23, 2017 08/23/17
Monu Bambroo
In this post, Premier Developer consultant Lizet Pena De Sola explains Diffie-Hellman in the HTTPS key exchange. I got a question right after I had spent a week in training classes for the COMPTIA Security+ exam: to describe how HTTP Secure (HTTPS) modifies the HTTP traffic between a client browser and the server.  At the end of my ...