설명

참조:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-mfa

설명:
1단계: New-AzureRmNetworkSecurityRuleConfig
2단계: New-AzureRmNetworkSecurityGroup
3단계: New-AzureRmVirtualNetworkSubnetConfig
4단계: New-AzureRmVirtualNetwork
예: 네트워크 보안 그룹을 참조하는 서브넷이 있는 가상 네트워크 만들기
New-AzureRmResourceGroup -이름 TestResourceGroup -위치 중심
$rdpRule = New-AzureRmNetworkSecurityRuleConfig -이름 rdp-rule -설명 "RDP 허용" -액세스 허용 -프로토콜 Tcp -방향 인바운드 -우선순위 100 -SourceAddressPrefix 인터넷 -SourcePortRange * -DestinationAddressPrefix * -DestinationPortRange 3389
$networkSecurityGroup = New-AzureRmNetworkSecurityGroup -ResourceGroupName TestResourceGroup -Location centralus -Name "NSG-FrontEnd" -SecurityRules $rdpRule
$frontendSubnet = New-AzureRmVirtualNetworkSubnetConfig -이름 frontendSubnet -AddressPrefix "10.0.1.0/24" -NetworkSecurityGroup $networkSecurityGroup
$backendSubnet = New-AzureRmVirtualNetworkSubnetConfig -이름 backendSubnet -AddressPrefix "10.0.2.0/24" -NetworkSecurityGroup $networkSecurityGroup
New-AzureRmVirtualNetwork -이름 MyVirtualNetwork -ResourceGroupName TestResourceGroup -Location centralus -AddressPrefix "10.0.0.0/16" -Subnet $frontendSubnet,$backendSubnet
참조:
https://docs.microsoft.com/en-us/powershell/module/azurerm.network/new-azurermvirtualnetwork?view=azurermps-6.7.0

참조:
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview

참조:
https://docs.microsoft.com/en-us/azure/storage/common/storage-private-endpoints
https://azure.microsoft.com/en-us/blog/azure-backup-now-supports-storage-accounts-secured-with-azuretorage-firewalls-and-virtual-networks/

참조:
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview