Azure fundamental Flashcards
VM
emulated PC, running a guest OS
Virtual processors, memory, storage, and networking resources
Hosts an OS
Controlled via remote desktop client
containers
execution environment for applications,
no guest OS,
ex. Docker
- Virtualization environment for running applications
- Run on top of a host OS, but don’t include an OS for the app running inside a container; it bundles the libraries and components needed to run the app
- Ex. 5 containers running on a server with 1 Linux kernel; all containers and the apps within them share the same Linux kernel
- Kernel = lowest level of software that interfaces with hardware in a computer; it interfaces all applications that run in “user mode” down to the physical hardware
- Linux kernel = a free and open-source, monolithic, Unix-like operating system kernel
Serverless computing
application code without server,
processing time by function
Cloud-hosted execution environment that runs code separately from underlying host environment
Create an instance of the service, add code, but requires/allows no infrastructure configuration or maintenance
managing the server infrastructure and allocation/de-allocation of resources based on demand.
- Infrastructure isn’t your responsibility
- you deploy your code and it automatically runs with high availability.
- Scaling and performance are handled automatically
- Application continue working under any workload
- No configuration needed for scaling
- billed only for the exact resources you use
- Event driven = resource are only allocated from a direct action, ex. time that takes to run your code
- no need to reserve capacity.
focus on the logic you need to execute and the trigger that is used to run your code.
configure serverless apps to respond to events and only triggered by an event. Event could be:
- a REST endpoint
- a periodic timer
- a message received from another Azure service.
storage
store data on disk or cloud
“Lift and shift”
gradually moves infrastructure and admin cost to cloud
Consumption-based pricing model
pay-as-you-go, No upfront costs, no need to buy infrastructure, pay resources when needed, stop paying when no longer needed
Vertical scaling (scaling up)
add resources to increase power of an existing server,
ex. add more CPUs, RAM, etc.
Horizontal scaling (scaling out)
add more servers that functions together as 1 unit.
cloud computing - Elastic
Automatically adding or removing resources,
accommodate for spikes or sacks in traffic
cloud computing - Current
environment maintains software patches, hardware setup, upgrades, etc,
Hardware upgrades and maintenance are done by provider
cloud computing - Reliable
Data backup,
disaster recovery
data replication services,
cloud computing - Global
data centers all over the globe
this allows better response time, redundancy and locality
cloud computing - Secure
Physical security:
entry to a datacenter,
access to server racks, walls, cameras, gates, security personnel.
Digital security:
connection to systems,
to access data over the network, etc.
fault tolerance
redundancy in the cloud services architecture that a backup component takes place when a component fails.
Criminal Justice Information Services (CJIS)
FBI database
Cloud Security Alliance (CSA) STAR Certification
achieving ISO/IEC 27001 certification,
meet Cloud Controls Matrix (CCM), cloud security
General Data Protection Regulation (GDPR)
european privacy law
EU model clauses
guarantees around transfers of personal data outside of the EU,
freely move data from Europe to rest of world
Health Insurance Portability and Accountability Act (HIPAA)
Protected Health Information (PHI),
Health Information Technology for Economic and Clinical Health Act (HITECH) Act
International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) 27018
code of practice,
cover handling of personal information by cloud service provider
Multi-Tier Cloud Security (MTCS) Singapore
security certifications for cloud providers
Service Organization Controls (SOC)
cloud service audit for data security, availability, processing integrity, and confidentiality
National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)
framework consists of standards, guidelines, and best practices to manage cybersecurity-related risks,
audits by third-party Federal Risk and Authorization Management Program (FedRAMP),
validated by Health Information Trust Alliance (HITRUST)
UK Government G-Cloud
cloud computing certification in UK
Capital Expenditure (CapEx)
CapEx is the spending of money on physical infrastructure up front, and then deducting that expense from your tax bill over time.
ex. server, storage, network, backup and archive, org continuity and disaster recovery, datacenter infrastructure, technical personnel
Benefit:
fixed cost, planned expenses
Operational Expenditure (OpEx)
OpEx is spending money on services or products now and being billed for them now.
You can deduct this expense from your tax bill in the same year.
There’s no upfront cost.
You pay for a service or product as you use it.
ex. lease cloud-based server, lease software and customized features, scaling based on usage/demand
Benefit:
no need to invest in equipment and pay as much as needed
Cloud agility
ability to rapidly change IT infrastructure to adapt needs of business
Cloud deployment models
Public
Private
Hybrid
Public Cloud
No local hardware or upkeep;
everything runs on cloud provider’s hardware.
Advantage:
High scalability/agility,
Pay-as-you-go pricing,
easy setup and use;
Disadvantage:
security requirement not met (ex. gov/industry/legal standards),
can’t manage hardware that’s not your own,
may not work for legacy applications
Private Cloud
Create cloud environment in your own datacenter and provide self-service access,
Advantages:
complete control over the resources,
support legacy application,
security/compliance/legal requirements.
Disadvantages:
upfront CapEx costs,
limitations to agility/scaling:
ex. buy, install, and setup new hardware.
Require IT skills and expertise that’s hard to come by
Hybrid Cloud
Allow public or private cloud.
Ex. website runs in public cloud but database is hosted on private cloud.
Advantages:
allow use of out-of-date hardware or an out-of-date OS,
flexibility of local or cloud,
use cloud or private equipment based on cost.
better control of the environment (security/compliance/legacy) than cloud only.
Disadvantages:
more expensive since it involves some CapEx cost up front,
more complicated to set up and manage
Types of cloud services
IaaS
PaaS
SaaS
IaaS, Infrastructure as a service
You:
gives up complete control of hardware running your application
need correct configuration,
perform update and ensure availability.
Used for migrating workloads, test and development, website hosting, storage, backup, and recovery,
You manage:
Applications, Data, Runtime, Middleware, OS
Provider manages:
Virtualization, Servers, Storage, Networking
In Azure, customer responsible for everything beyond VMs and virtual networks provided by Microsoft.
PaaS, Platform as a service
You:
build, test and deploy software applications,
no need to manage underlying infrastructure.
You manage:
Applications, Data
Provider manages:
Runtime, Middleware, OS, Virtualization, Servers, Storage, Networking
Azure maintains OS and foundational software like database management systems; meaning latest security patches and integration with Azure Active Directory for access control.
can “point and click” within the Azure portal or run automated scripts to bring complex, secured systems up and down, and scale them as needed. Instead of building whole infrastructures and subnets by hand
Development framework
PaaS provides this framework for develop and customize cloud-based applications
create apps using built-in software, scalability, high-availability, and multi-tenant,
reducing the amount of coding
Analytics or business intelligence
analyze and mine data,
find insights and patterns,
predict outcomes to improve business decisions such as
forecasting, product design, and investment returns.
SaaS, Software as a service
You:
environment is hosted and managed for end customer,
licensed via monthly/annual subscription,
ex. O365, Skype, Dynamics CRM.
You manage:
N/A
Provider manages:
Applications, Data, Runtime, Middleware, OS, Virtualization, Servers, Storage, Networking
managed completely by Azure; customer configures the environment for its needs only
Azure Compute services
VMs and containers that can run your applications
Azure Database services
provide both relational and NoSQL choices
Azure Identity services
authenticate and protect your users
Azure Networking services
connect your datacenter to the cloud,
provide high availability or host your DNS domain
Azure Storage services
accommodate massive amounts of both structured and unstructured data
Azure AI and machine-learning services
can analyze data, text, images, comprehend speech, and make predictions using data
Hypervisor
an abstraction layer that separates hardware and OS from VMs (virtual machines).
Emulates functions of a real computer.
Can run multiple VMs (that runs different OS’),
optimize hardware.
***One hypervisor per server rack.
fabric controller
special software per server rack, connecting to an Orchestrator
Orchestrator
manages everything that happens in Azure,
respond to user requests,
package and picks server rack,
send package to appropriate Fabric Controller
Azure VM scale sets
Scaling for Windows or Linux VMs hosted in Azure
Azure Kubernetes services
Enables management of a cluster of VMs that run containerized services
Azure Service Fabric
Distributed systems platform.
Runs in Azure or on-premises
Azure Batch
Managed service for parallel and high-performance computing applications
Azure Container Instances
Run containerized apps on Azure without provisioning servers or VMs
Azure Functions
An event-driven, serverless compute service
Azure Virtual Network
Connects VMs to incoming Virtual Private Network (VPN) connections
Azure Load Balancer
Balances inbound and outbound connections to applications or service endpoints
Azure Application Gateway
Optimizes app server farm delivery while increasing application security
Azure VPN Gateway
Accesses Azure Virtual Networks through high-performance VPN gateways
Azure DNS
Provides ultra-fast DNS responses and ultra-high domain availability
Azure Content Delivery Network
Delivers high-bandwidth content to customers globally
Azure DDoS Protection
Protects Azure-hosted applications from distributed denial of service (DDOS) attacks
Azure Traffic Manager
Distributes network traffic across Azure regions worldwide
Azure ExpressRoute
Connects to Azure over high-bandwidth dedicated secure connections
Azure Network Watcher
Monitors and diagnoses network issues using scenario-based analysis
Azure Firewall
Implements high-security, high-availability firewall with unlimited scalability
Azure Virtual WAN
Creates a unified wide area network (WAN), connecting local and remote sites
Azure Storage
Durable and highly available with redundancy and replication.
Secure through automatic encryption and role-based access control.
Scalable with virtually unlimited storage.
Managed, handling maintenance and any critical problems for you.
Accessible from anywhere in the world over HTTP or HTTPS.
Azure Blob storage
Storage service for very large objects, such as video files or bitmaps
Azure File storage
File shares that you can access and manage like a file server
Azure Queue storage
A data store for queuing and reliably delivering messages between applications
Azure Table storage
A NoSQL store that hosts unstructured data independent of any schema
Azure Mobile
Azure creates backend services for iOS, Android and Windows apps;
features like corporate sign-in
on-prem sources such as SAP, Oracle, SQL server and SharePoint
Features include:
- Offline data synchronization. - Connectivity to on-premises data. - Broadcasting push notifications. - Autoscaling to match business needs.
Azure Cosmos DB
Globally distributed database that supports NoSQL options
Azure SQL Database
Fully managed relational database with auto-scale,
integral intelligence,
robust security
Azure Database for MySQL
Fully managed and scalable MySQL relational database with high availability and security
Azure Database for PostgreSQL
Fully managed and scalable PostgreSQL relational database with high availability and security
SQL Server on VMs
Host enterprise SQL Server apps in the cloud
Azure SQL Data Warehouse
Fully managed data warehouse with integral security at every level of scale at no extra cost
Azure Database Migration Service
Migrates your databases to the cloud with no application code changes
Azure Cache for Redis
Caches frequently used and static data to reduce data and application latency
Azure Database for MariaDB
Fully managed and scalable MariaDB relational database with high availability and security
Azure Database
Azure provides multiple database services to store a wide variety of data types and volumes
Azure Web
Azure builds and hosts web apps and HTTP-based web services
Azure App Service (PaaS)
Quickly create powerful cloud web-based apps
PaaS (in Azure) that can host enterprise-grade web-oriented applications
Meet rigorous performance, scalability, security and compliance requirements while using a fully managed platform to perform infrastructure maintenance
build and host web apps, background jobs, mobile backends, and RESTful APIs in the programming language of your choice without managing infrastructure.
- auto-scaling
- high availability
- supports both Windows and Linux
enables automated deployments from GitHub, Azure DevOps, or any Git repo to support a continuous deployment model.
Azure Notification Hubs
Send push notifications to any platform from any back end.
Azure API Management
Publish APIs to developers, partners, and employees securely and at scale.
Azure Search
Fully managed search as a service.
Web Apps feature of Azure App Service
Create and deploy mission-critical web apps at scale.
Azure SignalR Service
Add real-time web functionalities easily.
Internet of Things
Ex. smart devices (phone, appliances, etc.)
IoT Central
Fully-managed global IoT software as a service (SaaS) solution that makes it easy to connect, monitor, and manage your IoT assets at scale
Azure IoT Hub
Messaging hub that provides secure communications and monitoring between millions of IoT devices
IoT Edge
Push your data analysis onto your IoT devices instead of in the cloud allowing them to react more quickly to state changes.
Big Data
Large volumes of data. ex. weather systems, communication systems, etc.
Open source cluster technologies have been developed to deal with these large data sets.
Azure SQL Data Warehouse
Run analytics at a massive scale using a cloud-based Enterprise Data Warehouse (EDW) that leverages massive parallel processing (MPP) to run complex queries quickly across petabytes of data
Azure HDInsight
Process massive amounts of data with managed clusters of Hadoop clusters in the cloud
Azure Databricks (preview)
Collaborative Apache Spark–based analytics service that can be integrated with other Big Data services in Azure.
Artificial Intelligence (related to Cloud Computing)
Range of services for Machine Learning.
Machine Learning is a data science technique that allows computers to use existing data to forecast future behaviors, outcomes, and trends.
Using machine learning, computers learn without being explicitly programmed.
Forecasts or predictions from machine learning can make apps and devices smarter.
Azure Machine Learning Service
Cloud-based environment you can use to develop, train, test, deploy, manage, and track machine learning models.
It can auto-generate a model and auto-tune it for you.
It will let you start training on your local machine, and then scale out to the cloud
Azure Machine Learning Studio
Collaborative, drag-and-drop visual workspace where you can build, test, and deploy machine learning solutions using pre-built machine learning algorithms and data-handling modules
Cognitive services
pre-built APIs you can leverage in your applications to solve complex problems.
Vision
Image-processing algorithms to smartly identify, caption, index, and moderate your pictures and videos.
Speech
Convert spoken audio into text, use voice for verification, or add speaker recognition to your app.
Knowledge mapping
Map complex information and data in order to solve tasks such as intelligent recommendations and semantic search.
Bing Search
Add Bing Search APIs to your apps and harness the ability to comb billions of webpages, images, videos, and news with a single API call.
Natural Language processing
Allow your apps to process natural language with pre-built scripts, evaluate sentiment and learn how to recognize what users want.
DevOps, Development and Operations
Azure DevOps Services builds and release pipelines that provide continuous integration, delivery, and deployment for your applications.
You can integrate repositories and application tests, perform application monitoring, and work with build artifacts.
You can also work with and backlog items for tracking, automate infrastructure deployment and integrate a range of third-party tools and services such as Jenkins and Chef.
Azure DevOps
Azure DevOps Services (formerly known as Visual Studio Team Services, or VSTS),
provides development collaboration tools including high-performance pipelines,
free private Git repositories,
configurable Kanban boards,
and extensive automated and cloud-based load testing
Azure DevTest Labs
Quickly create on-demand Windows and Linux environments you can use to test or demo your applications directly from your deployment pipelines
region
geographical area on the planet containing 1 or more datacenters with a low-latency network
bring applications closer to users
scalability, redundancy and preservation of data residency
Americas
Europe
Asia Pacific
Middle East and Africa
Geographies
Discrete market typically containing two or more regions that preserve data residency and compliance boundaries.
Keep their data and applications close.
Honor data residency, sovereignty, compliance, and resiliency requirements within geographical boundaries.
Fault-tolerant to withstand complete region failure through their connection to dedicated high-capacity networking infrastructure.
Data residency
physical or geographic location of an organization’s data or information
the legal or regulatory requirements imposed on data based on the country
region in which it resides and is an important consideration when planning out your application data storage.
Available zones/isolation boundary
physically separate datacenters within an Azure region
each datacenter contains independent power, cooling and networking
Supported regions
3+ zones per supported region
Zonal services
you pin the resource to a specific zone (for example, virtual machines, managed disks, IP addresses)
Zone-redundant services
platform replicates automatically across zones (for example, zone-redundant storage, SQL Database).
Region Pairs
Each Azure region is always paired with another region within the same geography (such as US, Europe, or Asia) at least 300 miles away.
Provides replication (redundancy) of resources in case of natural disasters, civil unrest, power outages and physical network outages.
If there’s an extensive Azure outage, one region out of every pair is prioritized to help reduce the time it takes to restore them for applications.
Planned Azure updates are rolled out to paired regions one region at a time to minimize downtime and risk of application outage.
Data continues to reside within the same geography as its pair (except for Brazil South) for tax and law enforcement jurisdiction purposes.
Service-Level Agreements (SLAs)
adhering to comprehensive operational policies, standards, and practices.
Capture specific terms that define performance standards that apply to Azure
SLAs describe Microsoft’s commitment to providing Azure customers with specific performance standards.
There are SLAs for individual Azure products and services.
SLAs also specify what happens if a service or product fails to perform to a governing SLA’s specification.
Doesn’t apply to free or shared tiers. Ex. Azure Advisor
Azure SLA
Performance Targets:
An SLA defines performance targets for an Azure product or service, ex. uptime guarantees, connectivity rates.
Uptime (response time) and Connectivity Guarantees (3 nines to 5 nines)
Service credits
Compensations when SLA isn’t met
Composing SLAs across services, or Composite SLA
Web app = 99.95%
SQL DB = 99.99%
Composite SLA for application = 99.95% x 99.99% = 99.94% (combined probability of failure)
Web app = 99.95%
SQL DB = 99.99%
Queue = 99.9%
Composite SLA for database or queue = 1.0 - (0.0001 x 0.001) = 99.99999%
Composite SLA for application = 99.95% x 99.99999% = 99.95%
Application SLA
set your own SLA based on performance targets that suit business requirements and specific Azure application
Resiliency
ability of system recovery from failures. Goal is to respond to failures that avoids downtime or data loss
High availability
Disaster recover
FMA (Failure Mode Analysis)
identify possible points of failure and define how applications will respond to those failures.
Availability
system is functional and working
Complexity
services depending on each other, and multiple points of failures
Workload requiring 99.99% uptime shouldn’t depend upon a service with 99.9% SLA
More availability could lead to higher cost and more complexity
More complex solutions can leader bigger challenge, because downtime is cumulative across SLA levels
Azure account
globally unique entity that gives you access to your Azure subscriptions and services.
tied to a specific identity and holds info:
- Name, email, and contact preferences
- Billing information such as a credit card
signed into
- the Azure website
- Administer
- Deploy services
associated with 1 or more subscriptions
Azure Subscriptions
logical container used to provision resources in Microsoft Azure. It holds the details of all your resources like virtual machines, databases, etc.
Subscription Types:
- Free
- Pay-As-You-Go
- Enterprise Agreement
- Student
Azure free subscription
$200 credit to spend on any service for the first 30 days
popular Azure products for 12 months
25+ products
requires a phone number, a credit card, and a Microsoft account.
Azure Pay-As-You-Go subscription
charges you monthly for the services you used in that billing period.
for individuals, small and large businesses
Azure Enterprise Agreement
flexibility to buy cloud services and software licenses under one agreement,
discounts for new licenses and Software Assurance.
for enterprise-scale organizations.
Azure for Students subscription
$100 in Azure credits to be used within the first 12 months
free services without requiring a credit card at sign-up.
Validate email address.
Multiple Azure Subscriptions (under a single Azure account)
Access control and billing occur at the subscription level, not the account level
Access management:
Separate subscriptions to reflect organizational structures to help manage and control access to resources during user provisioning
NOTE: there are hard limits; there’s max number of resources per subscription (ex. max # of Express Route circuits per subscription is 10)
Billing
Single bill is generated per subscription per month.
Charged 10 days after billing period ends
Credit card statement would say “MSFT Azure”
Account owner is responsible for all subscriptions tied to the account credit card
Can set spending limits
Can generate reports
Azure AD
Azure account is authenticated via Azure AD
Web-based authentication standards like OpenID or OAuth. (not Windows AD)
Partitioned into tenants
each application is a subscription
Owner is the original account for billing; but can have additional users, even guests
Azure AD - Tenants
dedicated, isolated instance of Azure AD service, owned and managed by an organization.
Tenants are associated to an organization, which could individuals, teams, companies or any group of people
Email address associated with an organization help tie everything together
Ex. email can be associated with Microsoft Azure, Microsoft Intune, O365 etc all for one company (organization),
Azure Support Options
Azure Support Options
Each subscription includes free supports below:
- Billing and subscription support
- Azure products and services documentation
- Online self-help documentation
- Whitepapers
- Community support forums
Paid Azure support plans
- Developer
- Standard
- Professional Direct
- Premier
Support plan availability
Type of customer
Type of subscription
Billed for support as part of the Enterprise Agreement (EA)
Azure Knowledge Center
TheAzure Knowledge Centeris a searchable database that contains answers to common support questions, from a community of Azure experts, developers, customers, and users. You can browse through all responses within the Azure Knowledge Center. Find specific solutions by entering keyword search terms into the text-entry field and further refine your search results by selecting products or tags from the lists provided by two dropdown lists.
Microsoft Developer Network (MSDN) Forums
Get support by reading responses to Azure technical questions from Microsoft’s developers and testers on theMSDN Azure discussion forums.
Stack Overflow
You can review answers to questions from the development community onStackOverflow.
ServerFault
Review community responses to questions about System and Network Administration in Azure onServerFault.
Azure Feedback Forums
Read ideas and suggestions for improving Azure made by Azure users and customers on theAzure feedback forums.
Azure management options
Command line
Language-specific Software Development Kits (SDKs)
Developer tools
Migration tools
Azure portal
interacting with Azure via a Graphical User Interface (GUI)
Login with Azure account
Create, manage and monitor Azure services
Get help links
Deploy, manage and delete resources
Wizards and tooltips for complex administrative tasks
Dashboard is customizable
Not automated for repetitive tasks (ex. make 1 VM at a time, instead of in bulk)
Azure PowerShell
a module that you can install for Windows PowerShell, or PowerShell Core, which is a cross-platform version of PowerShell that runs on Windows, Linux or macOS. Services include shell window and command parsing
connect-AzureRMAccount (azure powershell)
sign into Azure with powershell
new-AzureRmVM (azure powershell)
create a VM
Example:
New-AzVM `
-ResourceGroupName "MyResourceGroup" `
-Name "TestVm" `
-Image "UbuntuLTS"
...
Azure CLI
cross-platform command-line program
az login (azure CLI)
sign into Azure with CLI
az vm create (azure CLI)
create a VM
Example az vm create \ --resource-group MyResourceGroup \ --name TestVm \ --image UbuntuLTS --generate-ssh-keys ...
Azure Cloud Shell
web-based command-line interface
2 shell environments (Bash for Linux and PowerShell for Windows)
az is default Linux, pwsh switches to PowerShell while in Linux
Azure Storage Account when accessing Azure Cloud Shell
any scripts or data you place here is kept across sessions
each subscription has a unique storage account
Azure Mobile App
monitoring and managing your resources from your mobile device
- Check the current status and important metrics of your services
- Stay informed with notifications and alerts about important health issues
- Quickly diagnose and fix issues anytime, anywhere
- Review the latest Azure alerts
- Start, stop, and restart virtual machines or web apps
- Connect to your virtual machines
- Manage permissions with role-based access control (RBAC)
- Use the Azure Cloud Shell to run saved scripts or perform ad hoc administrative tasks
Azure SDKs
a range of languages and frameworks
Azure portal - Resource panel
List of resource types
Can customize favorites
Hide panel via “<
Azure portal - Dashboard
default Azure main page
Azure portal - Blade
slide-out panel containing UI for a single level in a navigation sequence. Each below is a blade.
Ex. Virtual machines > Compute > Ubuntu Server
Blade contains info and configurable options
Certain options generate another blade to the right of existing blade
Adds more blades to the right as more options and info are available
Scrollbar at the bottom helps navigate backward
Can close blade individually
The “New” section is a blade
Azure portal - Marketplace
Is a blade
Create new resources in Azure
Find, try, purchase, and provision applications and services
Provision end to end solutions quickly and reliably
Azure portal - Notifications (bell icon)
lists the last actions that have been carried out, along with their status.
Azure portal - Cloud Shell (>_ icon)
create a new Azure Cloud Shell session.
Azure portal - Settings (gear icon)
change the Azure portal settings, including: Sign out time Color and contrast themes Toast notifications (to a mobile device) Language and regional format
Azure portal - Feedback blade (smiley face icon)
opens the Send us feedback blade.
send feedback to Microsoft about Azure.
Azure portal - Help blade (question mark icon)
Help + Support What's new Azure roadmap Launch guided tour Keyboard shortcuts Show diagnostics Privacy + terms
Azure portal - Help + Support options
the main support area for the Azure portal and includes documentation options for a variety of common questions.
New support request link can open a support ticket with the Azure team.
All Azure customers can access billing, quota and subscription-management support
Support ticket sections:
- Problem: dropdown lists and text-entry fields
- Title: test-entry field
- Details: test-entry field
- Preferred contact method: contact details form
- Create: submit the support request
All support requests: status and details of support request
Azure Portal - Directory and Subscription (Book and Filter icon)
Can change between subscriptions or change directory
Azure portal - profile settings
Sign in with another account, or sign out entirely
View your account profile, where you can change your password
Check your permissions
View your bill (click the “…” button on the right-hand side), takes you to Cost Management + Billing invoices page
Update your contact information (click the “…” button on the right-hand side)
Can:
Get proactive, actionable, and personalized best practices recommendations.
Improve the performance, security, and high availability of your resources as you identify opportunities to reduce your overall Azure costs.
Get recommendations with proposed actions inline.
Azure portal - blades - Services
can search for services through the filter box.
Azure portal - blades - Settings (cog) icon
opens the Portal settings pane
Azure portal - blades - Feedback (smiley face)
open the Send us feedback blade.
Azure portal - blades - Help (?)
show the Help blade
To create a new support request, you would fill in the information in each of the following sections, and then click Create to lodge the issue.
- Basics: the issue type
- Problem: severity of the problem, a summary and description, and any additional information
- Contact information: preferred contact method and the information associated with this contact method
Azure portal - blades - Directory and subscription (book and filter)
show the Directory + subscription blade
can switch between multiple subscriptions or directories
Tile Gallery
filter Tiles by category and resource type
Can drag to work area, resize and change the data.
Can ping elements on child blades by “…” tile edit menu
Edit a dashboard by changing the JSON file
edit a dashboard by changing the JSON file
Edit colSpan and rowSpan variables
General Availability (GA)
A feature that’s evaluated and tested successfully, and released to customers as part of Azure’s default product set.
Feature preview
Private Preview = feature available to specific Azure customers for evaluation purposes; invite only, issued directly by product team
Public Preview = feature available to all Azure customers for evaluation purposes.
Azure compute
On-demand computing for running cloud-based applications VM Containers Azure App Service Serverless computer
VM (in detail)
Provide IaaS, ex. virtualized server
Total control over the operating system (OS)
The ability to run custom software, or
To use custom hosting configurations
Moving physical server to the cloud with VMs (lift and shift)
Host existing image of the physical server with little to no change
Scaling VMs in Azure
Can support single or multiple VMs
Includes the following 3 features
Availability sets
Logical grouping of 2+ VMs that help keep application available during planned or unplanned maintenance
Availability sets have no cost, and can help avoid a single point of failure in the VM architecture
Planned maintenance events
The underlying Azure fabric that hosts VMs is updated by Microsoft.
to patch security vulnerabilities, improve performance, and add or update features.
When the VM is part of an availability set, the Azure fabric updates are sequenced so not all of the associated VMs are rebooted at the same time. VMs are put into different update domains.
Update domains
Update domains = indicate groups of VMs and underlying physical hardware that can be rebooted at the same time.
Update domains are a logical part of each data center and are implemented with software and logic.
Unplanned maintenance events
hardware failure in the data center, such as a power outage or disk failure.
VMs that are part of an availability set automatically switch to a working physical server so the VM continues to run. The group of virtual machines that share common hardware are in the same fault domain.
Fault domain
Fault domain = rack of servers that provide the physical separation of your workload across different power, cooling, and network hardware that support the physical servers in the data center.
Only server rack(s) of that fault domain are affected by the outage.
VM Scale Sets
Create, manage, configure and update a group of individual, load balanced VMs
Help configure additional service to route requests between multiple instances of a website
Provide highly available applications
Build large-scale services for computer, big data and container workloads
Azure Batch (for raw compute power or supercomputer level compute power)
enables large-scale job scheduling and compute management with the ability to scale to tens, hundreds, or thousands of VMs. Starts a pool of compute VMs for you Installs applications and staging data Runs jobs with as many tasks as you have Identifies failures Requeues work Scales down the pool as work completes
Containers
Allow multiple lightweight containers to run on a single host/VM
Each container has an OS and an app.
Virtualizes the OS instead of the physical machine
Container Orchestrator
start, stop and scale out application instances as needed; it’s done dynamically.
Ex. Docker
Secured and isolated
Wait on app to launch instead of (in VM) OS then app to launch
Containerize app size is typically smaller
Development price is simplified, because development runtime environment can look identical to production runtime environment
Container cluster orchestration = deploy and manage multiple containerized applications without worrying about which server will host each container; this is for a large number of containers
Azure Container Instances (ACI)
Fast and simple, no need to manage any virtual machines or configure any additional services.
A PaaS that allows you to upload your containers and execute them directly.
Azure Kubernetes Service (AKS)
a complete orchestration service for containers with distributed architectures with multiple containers.
Can rollback to previous version
Can manage storage:
- For storage, Kubernetes allows read/write application data and persist this data across many pod instances.
- Application running in Kubernetes can use cloud based storage and data systems like Azure Storage or Azure Cosmos DB
Can manage networking: Kubernetes network plugins - exposes pods to the internet - Load balance traffic across multiple replicas of a pod - Network isolation - Policy-driven network security - Manage communications - Manage name resolution between pods in the cluster
Extending Kubernetes functionality
- Variety of methods for extending the Kubernetes API
- Create operators to perform custom actions, examples:
- producing cloud events on pod creation
- providing custom pod scheduling logic
- On-demand provisioning of managed cloud services
- Capable of making platform on which to build SaaS services
Kubernetes
manages the placement of “pod” inside “node”
When a node crashes, pod can be moved to another node in the cluster
