Security overview - Azure Arc
Security gaps often emerge when managing infrastructure across public cloud, private cloud, and on-prem environments. Azure Arc helps bridge those gaps by extending Azure security tools to Arc-enabled servers running anywhere. Read this Microsoft Learn article to see how it works and how your organization can benefit. Contact iTech DMV Solutions for a complimentary security assessment of your hybrid environment.
What is the shared responsibility model for Azure Arc-enabled servers?
The security of Azure Arc-enabled servers is a shared responsibility. Microsoft is responsible for securing the cloud service that stores system metadata, protecting privacy, documenting optional security features, publishing regular agent updates, managing RBAC access, and securing the server infrastructure. Users are responsible for securing the server itself, managing credentials, determining the application of security features, and ensuring compliance with legal and internal policies.
How does the Azure Connected Machine agent function?
The Azure Connected Machine agent acts as an enablement platform that connects your machine to Azure. It establishes a relationship with your Azure subscription, provides a managed identity for authentication, enables additional capabilities through extensions, and enforces settings on your server. The agent is essential for relaying data and actions between your managed server and Azure.
What security measures should be taken for Tier 0 assets?
For Tier 0 assets, it is recommended to use a dedicated Azure subscription to minimize access and closely monitor permissions. You should also disable unnecessary management features, such as remote access capabilities and the extension manager, unless they are needed. Implementing an extension allowlist can help restrict the use of extensions to only those that meet your security requirements.

Security overview - Azure Arc
published by iTech DMV Solutions
About Us
iTech: Your Trusted Technology Partner
At iTech, we bring over 30 years of experience as an exclusive Microsoft Partner. Our mission is to empower value-added resellers (VARs) like you to thrive and succeed while maintaining control of your projects. Here’s how we do it:
- Requirement Gathering: Our streamlined process ensures efficient requirement gathering with expert consultants.
- Development: We leverage Microsoft methodologies for faster time-to-market.
- Proactive Support: Expect Dynamics 365 upgrades and business continuity support.
- Global Reach: Our services extend across borders with country-specific expertise.
- Quality Upgrades: Timely project delivery and quality work.
- Comprehensive Testing: Rigorous testing processes.
- Standard Documentation: We adhere to Microsoft standards for documentation.
Technology Reseller Integrator: Seamless Solutions Integration
As your trusted technology solutions integrator, we seamlessly blend SaaS products, hardware, and software into your existing ecosystem. Here’s what sets us apart:
- Understanding Your Ecosystem: We analyze your infrastructure, data, and platforms.
- Customization and Configuration: Tailoring solutions to meet your unique needs.
- Technical Expertise: Our team of 5,700+ experts ensures successful implementation.
- Long-Term Partnership: Trust us to address your ambitions and insecurities.
- Modernization: Stay competitive in ever-changing markets.
- Data-Driven Decisions: Leverage data effectively within your systems.
Whether you’re navigating Microsoft 365 or integrating cutting-edge solutions, we’re here to support your digital journey. Welcome to the future of technology!