Author Thomas Janetscheck

This repository is currently in preview. PowerShell scripts and ARM templates are still in development, do not use them in production!

This repository contains PowerShell scripts and ARM templates that are used to automatically deploy an Azure hands-on lab environment.

1. Prerequisites
2. Background information
3. Initial lab deployment

To be able to attend the workshop and complete all hands-on demos, a valid Azure subscription is required. If you don't currently own a subscription or don't have access to one, you can sign up for a free trial here.

In this one-day workshop you will learn how to securely deploy Azure infrastructure solutions. We will cover the following topics:

• Azure Security Center
• Virtual Machines
• Azure Networking
• JIT
• Azure Storage
• Azure SQL
• RBAC
• Governance

All user names and password for the environment are set to labuser / Secur1tyR0cks.

1. Login to Azure Portal with an account that has administrative permissions on an active Azure subscription.

2. Start an elevated Microsoft PowerShell session and make sure you have installed the latest Azure PowerShell module. To find out which module version is installed, run the following command in the PowerShell session:

Get-Module AzureRM -listavailable

If you have not installed an AzureRM PowerShell module please run

Install-Module AzureRM

To update a formerly installed version you can run

Update-Module AzureRM

3. Connect PowerShell to your Azure subscription using the following command. You are prompted to enter your credentials. Interactive logon with multi-factor authentication (MFA) is supported.

Connect-AzureRMAccount

If you own more than own Azure subscriptions and want to connect to a dedicated one, you can use the following command to login:

Connect-AzureRMAccount -SubscriptionID <yourSubscriptionID>

4. To create the lab ressources copy the code below into your PowerShell session and execute it.

$script = Invoke-WebRequest https://raw.githubusercontent.com/azureandbeyond/AzureSecLab/master/PowerShell/deployLab.ps1 -UseBasicParsing
Invoke-Expression $($script.Content)

The deployment takes up to 30 minutes. After the deployment has finished you will be informed in the PowerShell windows.