Defense in Depth in Azure: layered security across the stack

Identity and access

Control who can do what—then keep it minimal. Identity equals who you are (users, apps, services). Access equals what you can do (permissions). Stolen credentials are a common attack path. Least privilege reduces impact.