SSH

In the Ultra Transcenders books

AZ-305AZ-104SC-5002V0-17.25AZ-900AI-200DP-750SC-900SC-200AZ-400AZ-802MD-102ALZ

Each book explains SSH in context, with comparison tables and the common traps.

Terms in this definition

• LAMP

  Short for Linux, Apache, MySQL and PHP (Perl and Python also fill the P): a widely used open-source stack for web applications whose database is frequently Azure Database for MySQL.

• TCP

  A transport protocol that is connection-oriented.

Related terms

• az network bastion

  Group of Azure CLI commands (rdp, ssh and tunnel) for reaching VMs through Bastion; for example, az network bastion rdp starts mstsc against a machine that has no public IP address.

• Azure Bastion

  Managed service that lets you open RDP and SSH sessions from the portal over TLS on port 443, so VMs need no public IP. Just-in-time VM access differs in that it opens ports 3389 and 22.

• DCUI

  Text console on an ESX host or the vCenter appliance, used to set up networking initially, troubleshoot, and turn on SSH or the ESX Shell.

• Git LFS

  Git Large File Storage, an extension that keeps small pointer files in the repository while big binaries live elsewhere, and offers locking for files that cannot be diffed. Azure Repos supports it at no charge, but not over SSH.

• Machine secrets scanning

  Defender for Cloud check, done without agents, that searches VM disk snapshots for secrets in plain text such as tokens, SSH private keys and connection strings. It requires Defender for Servers Plan 2 or Defender CSPM.

• ML Behavior Analytics

  A preview Microsoft Sentinel analytics rule type, which cannot be customised, that applies Microsoft's own machine learning models to user history, geolocation and IP data to spot unusual RDP and SSH sign-ins.

• Native client support

  Azure Bastion option, on Standard tier and above, that allows az network bastion rdp and ssh to connect using a client installed locally, mstsc for example.

• Secure files

  Kept encrypted in the Azure Pipelines library, these hold things like SSH keys, keystores, signing certificates or provisioning profiles, at most 10 MB apiece, and a pipeline retrieves them via the Download Secure File task. They count as protected resources.