Can Azure Bicep Assign Reservation Reader and Savings Plan Reader Roles?
I need to use an Azure Bicep template to assign the Reservation Reader and Savings Plan Reader roles. I'm not trying to purchase a reservation or savings plan;…
CSP
What advantage do Trusted Types provide over CSP nonces, hashes, and DOMPurify?
Could someone briefly explain the practical advantage of Trusted Types in Content Security Policy compared with script hashes, nonces, and DOMPurify? Are Trusted Types mainly an additional security…
What advantage do Trusted Types provide compared with CSP nonces, hashes, and DOMPurify?
Could someone briefly explain the practical advantage of Trusted Types in Content Security Policy compared with script hashes, nonces, and DOMPurify? Are Trusted Types mainly an additional security…
Why don’t browsers enforce safer security defaults by now?
I've been reviewing CSRF and CSP and noticed that many web security protections are still opt-in. They often exist to patch weaknesses or unsafe assumptions built into older…
Why don’t browsers enforce safer defaults more aggressively?
I've been reviewing CSRF and Content Security Policy guidance and noticed that many important protections are still opt-in. Often, newer security features are added to patch weaknesses in…
Understanding Azure Reservations and Partner Access
Hey everyone! I'm looking for some insights regarding Microsoft partners and their involvement with Azure reservations. My customer is interested in obtaining reservations to reduce their VM costs,…
How to Transition from Microsoft CSP Without Losing Access to Emails and Teams?
Hi everyone, I'm reaching out because I've found myself in a tricky situation with my Microsoft 365 licenses. For a long time, I've been purchasing them through TDSynnex,…
Best Ways to Get Microsoft Entra ID and Intune Licenses for a Mid-Sized Organization Pilot Program?
Hey everyone! I've been tasked with my first big project, which involves setting up Entra ID and Intune for central authentication and mobile device management. Since we're currently…
Looking for M365 Licensing Cost Reporting
I'm trying to find a way to report on our licensing costs for our M365 tenant over the year. The costs fluctuate each month because of our ongoing…
How can I implement a secure CSP directive that includes the Stripe script without using 'unsafe-inline'?
I'm looking for help on how to create a secure Content Security Policy (CSP) directive that allows specifically for Stripe's scripts while eliminating the use of 'unsafe-inline'. My…
How Can I Simplify CSP Implementation with Docker Images?
Hey everyone! I'm working on enhancing the security for my public-facing sites and am looking to implement Content Security Policy (CSP) headers alongside SSO, Let's Encrypt certificates, crowdsec,…
Why is migrating from PAYG to CSP such a hassle?
I'm really frustrated with Azure's subscription migration process. I just want to change how I pay, but it feels like I'm stuck in some complicated subscription-to-subscription mess! They…
Looking for Recommendations on a Local CSP
I'm managing a decent M365 setup and I'm curious if anyone has suggestions for a reliable Cloud Solution Provider (CSP) in the eastern United States. Any recommendations would…
What can I do if my client isn't paying their CSP bills?
I'm an Azure CSP provider and I've got a few clients who are having trouble making their payments. I'm looking for ways to restrict or disable their services…
What steps can I take if my client isn't paying their Azure CSP bills?
Hey everyone, I'm an Azure CSP provider and I've got some clients who are having trouble making their payments. I'm curious about what options I have for restricting…
What steps can I take to collect payments from clients who aren't paying for Azure services?
Hey everyone, I'm an Azure CSP provider and I've got a few clients who have fallen behind on their payments. I'm looking for advice on what measures I…
How can I protect my project from script injection?
I'm working on my first serious project and I need some guidance on protecting it from script injection attacks. Any tips or best practices would be greatly appreciated!