Azure core architectural components Flashcards
(35 cards)
What are the four levels of the organizing structure for resources in Azure?
Management groups > Subscriptions > Resource groups > Resources
What are Resources?
Resources are instances of services that you create, like virtual machines, storage, or SQL databases
What are Resource groups?
Resources are combined into resource groups, which act as a logical container into which Azure resources like web apps, databases, and storage accounts are deployed and managed
What is a Subscription?
A subscription groups together user accounts and the resources that have been created by those user accounts. For each subscription, there are limits or quotas on the amount of resources that you can create and use. Organizations can use subscriptions to manage costs and the resources that are created by users, teams, or projects
What are Management groups?
These groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group
Are all services and VM features available in all regions?
No
Do you always have to select a particular region?
No, some Azure services (such as Azure Active Directory, Azure Traffic Manager, and Azure DNS) do not require you to select a particular region
For what kind of reasons could you choose to build in a specialized region?
For compliance or legal purposes
How to set up your own redundancy?
Create duplicate hardware environments
What is an isolation boundary?
The way availability zones are built. If one goes down, the other continues working.
What are availability zones primarily for?
VMs, managed disks, load balancers, and SQL databases
In which three categories do Azure services that support availability zones fall?
Zonal services, Zone-redundant services, and Non-regional services
What are zonal services?
When resources are pined to a specific zone (for example, VMs, managed disks, IP addresses)
What are Zone-redundant services?
When the platform automatically replicates across zones (for example, zone-redundant storage, SQL Database)
What are non-regional services?
Services are always available from Azure geographies and are resilient to zone-wide outages as well as region-wide outages.
What does the hierarchy of azure geographies look like?
geography > Region Pair > Azure Region > Availability Zone > Datacenters (one or more)
At what minimum distance are region pairs situated?
300 miles
What is data redundancy?
When the same piece of data exists in multiple places
What are the advantages of region pairs?
If an extensive Azure outage occurs, one region out of every pair is prioritized to make sure at least one is restored as quickly as possible for applications hosted in that region pair.
Planned Azure updates are rolled out to paired regions one region at a time to minimize downtime and risk of application outage.
Data continues to reside within the same geography as its pair (except for Brazil South) for tax- and law-enforcement jurisdiction purposes.
What is a resource?
A manageable item that’s available through Azure. Virtual machines (VMs), storage accounts, web apps, databases, and virtual networks are examples of resources
What is a resource group?
A container that holds related resources for an Azure solution. The resource group includes resources that you want to manage as a group. You decide which resources belong in a resource group based on what makes the most sense for your organization
All resources must be in a resource group, and a resource can only be a member of a single resource group. Many resources can be moved between resource groups with some services having specific limitations or requirements to move. Resource groups can’t be nested. Before any resource can be provisioned, you need a resource group for it to be placed in.
What is RBAC?
Role-based access control. By applying RBAC permissions to a resource group, you can ease administration and limit access to allow only what’s needed.
What is Azure Resource Manager?
Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure account. You use management features like access control, locks, and tags to secure and organize your resources after deployment.
When a user sends a request from any of the Azure tools, APIs, or SDKs, Resource Manager receives the request. It authenticates and authorizes the request. Resource Manager sends the request to the Azure service, which takes the requested action. Because all requests are handled through the same API, you see consistent results and capabilities in all the different tools.
What is Azure Resource Manager?
Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure account. You use management features like access control, locks, and tags to secure and organize your resources after deployment.
When a user sends a request from any of the Azure tools, APIs, or SDKs, Resource Manager receives the request. It authenticates and authorizes the request. Resource Manager sends the request to the Azure service, which takes the requested action. Because all requests are handled through the same API, you see consistent results and capabilities in all the different tools.
