Concepts Flashcards
All service interaction goes through this centralized management layer
Azure Resource Manager (ARM)
A single organization instance of Azure AD is associated with this level of the Azure resource hierarcy
Tenant
These optional group components of the Azure hierarchy can be used to group multiple subscriptions
Management Groups
This billing an access isolation boundary also has it’s own billing agreement
Subscription
This component of the Azure management hierarchy is used to collate resources that have the same purpose or lifecycle
Resource Groups
This manages the “who” of Azure IAM, managing Azure identities
Azure Active Directory
This controls the “can do what” in Azure, providing fine grained access control to Azure resources
Azure Role-Based Access Control
The general term referring to a user, service, or other authenticated identity in Azure
Security Principle
These are a collection of permissions that can be assigned to security principles to grant or deny access
Roles
Two components of logs in Azure Monitor
Activity: who created what when?
OS Logs
Two components (stores) of Azure Monitor
Logs
Metrics
Azure VM capability that consistent replicates a VM in one AZ to another
Availability Set
Azure Compute configuration that cna scale up and down copies of a virtual machine
Scale aet
Azure equivalent of VPC
Virtual Network (VNET)
Can VNETS span regions?
No