Defense in Depth in Azure: layered security across the stack

Compute + Application layers

Secure how code runs, and secure the code itself. Compute: secure configuration and patching of runtimes. Application: secure code and safe app configuration. Provider secures the platform; you secure the workload. Misconfigurations can bypass 'strong' outer controls.