<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cloud on maxtsec</title><link>https://maxtsec.com/tags/cloud/</link><description>Recent content in Cloud on maxtsec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 01 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://maxtsec.com/tags/cloud/index.xml" rel="self" type="application/rss+xml"/><item><title>SC-500 Project Phase 2: Conditional Access - Named Locations and Risk-Based Policies</title><link>https://maxtsec.com/sc500-project-phase2/</link><pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate><guid>https://maxtsec.com/sc500-project-phase2/</guid><description>Phase 2 of my SC-500 project: building Named Locations, then layering five report-only Conditional Access policies on top of the JIT model from Phase 1 — admin MFA, country blocking, sign-in risk, user risk, and legacy authentication.</description></item><item><title>SC-500 Project Phase 1: PIM &amp; Eliminating Standing Privilege</title><link>https://maxtsec.com/sc500-project-phase1/</link><pubDate>Mon, 31 Aug 2026 00:00:00 +0000</pubDate><guid>https://maxtsec.com/sc500-project-phase1/</guid><description>Phase 1 of my SC-500 project: converting a privileged Entra ID role from a permanent active assignment into an eligible, just-in-time assignment with Privileged Identity Management — activation requirements, approval workflow, and access reviews.</description></item><item><title>SC-500 Project Phase 0: Azure Environment Setup, Trial, and Break-Glass Design</title><link>https://maxtsec.com/sc500-project-phase0/</link><pubDate>Fri, 28 Aug 2026 00:00:00 +0000</pubDate><guid>https://maxtsec.com/sc500-project-phase0/</guid><description>Phase 0 of my SC-500 project: setting up a throwaway Azure tenant, standing up a dedicated Global Administrator, designing a break-glass emergency access account, creating test users and groups, enabling MFA, and activating the Microsoft Entra ID P2 trial.</description></item></channel></rss>