* Data Characteristics: The hospital's database system contains rarely-accessed, sensitive medical records, including high-resolution images, which require secure and cost-effective long-term storage1.
* Azure Archive Storage: Azure Archive Storage is designed for data that is rarely accessed and has flexible latency requirements. It offers a cost-effective solution for storing large volumes of data that does not need to be accessed frequently1.
* Security and Compliance: Azure Archive Storage provides secure storage for sensitive medical data, ensuring compliance with healthcare regulations such as HIPAA and GDPR1.
* Cost Efficiency: By using Azure Archive Storage, the hospital can significantly reduce storage costs compared to storing data on higher-performance tiers that are intended for frequently accessed data1.
* Exclusion of Other Options: Azure Backup and Azure Recovery Services Vault are primarily used for backup and disaster recovery, not for archiving. Azure File Sync is used for syncing files across multiple locations and is not optimized for archival purposes1.
References:
* Microsoft Azure's official page on Azure Archive Storage1.

When Shannon Elizabeth enables Just-In-Time (JIT) VM access on the myprodvm virtual machine from the Azure Security Center dashboard, the following happens:
* Inbound Traffic Control: JIT VM access locks down the inbound traffic to the virtual machine.
* Azure Firewall Rule: It creates a rule in the Azure firewall to control this inbound traffic, allowing access only when required and for a specified duration.
* Enhanced Security: This approach minimizes exposure to potential attacks by reducing the time that the VM ports are open.
References:
* Azure Security Center Documentation: Just-In-Time VM Access
* Microsoft Learn: Configure Just-In-Time VM Access in Azure

AWS Certificate Manager (ACM) is the service that enables an AWS security expert to manage SSL/TLS certificates provided by AWS or an external certificate authority. It allows the deployment of the certificate on AWS services such as an Application Load Balancer (ALB) and also handles the renewal and rotation of certificates.
Here's how ACM would be used for the web application:
* Certificate Provisioning: The security expert can import an SSL/TLS certificate issued by an external certificate authority into ACM.
* Integration with ALB: ACM integrates with ALB, allowing the certificate to be easily deployed to encrypt the application at the edge.
* Automatic Renewal: ACM can be configured to automatically renew certificates provided by AWS.
For certificates from external authorities, the expert can manually import a new certificate before the old one expires.
* Yearly Rotation: While ACM does not automatically rotate externally provided certificates, it simplifies the process of replacing them by allowing the expert to import new certificates as needed.
References:
* AWS documentation on ACM, which explains how to import certificates and use them with ALB1.
* AWS blog post discussing the importance of rotating SSL/TLS certificates and how ACM facilitates this process2.

To manage multiple subscriptions under a single Azure AD tenant with identical role assignments, Azure AD Privileged Identity Management (PIM) is the service that provides the necessary capabilities.
Link Subscriptions to Azure AD Tenant: John can link all the different subscriptions to the single Azure AD tenant to centralize identity management across the organization1.
Manage Role Assignments: With Azure AD PIM, John can manage, control, and monitor access within Azure AD, Azure, and other Microsoft Online Services like Office 365 or Microsoft 3652.
Identical Role Assignments: Azure AD PIM allows John to configure role assignments that are consistent across all subscriptions. He can assign roles to users, groups, service principals, or managed identities at a particular scope3.
Role Activation and Review: John can require approval to activate privileged roles, enforce just-in-time privileged access, require reason for activating any role, and review access rights2.
Reference:
Azure AD PIM is a feature of Azure AD that helps organizations manage, control, and monitor access within their Azure environment. It is particularly useful for scenarios where there are multiple subscriptions and a need to maintain consistent role assignments across them23.