deck 1 Flashcards
Pay-As-You-Go - don’t want to forget about resources and it to keep billing you
In Cost Management and Billing create a budget and expiration
What happens when reach budget
Doesn’t stop resource, instead can add an action e.g. send email
virtual machine
windows or linux use RDP or SSH to remotely control Looks like a real server but isn't Can be placed on a virtual network, arranged in availability sets, placed behind load balancers Install whatever software Server can be created in a few mins
VM Abstractions
Azure Batch
Virtual Machine Scale Sets
Azure Kubernetes Service
Service Fabric
App services (web app) PAAS
Windows/Linux OS (but don’t control OS)
Fully managed servers - can’t remote control
.NET, .NET Core, Java, Ruby, Node.js, PHP and Python
Benefits in scaling, CI, deployment slots, integrates with VS
Azure Storage
Create storage accounts up to 5PB each: blob, queues, tables, files
Various level of replication included from local (11 9s durability) -> global (16 9s durability)
Storage tiers - hot, cool , archive
Keeps 3 copies of files
Managed (for VMs) or unmanaged
Networking
Connectivity
Security
Delivery
Monitoring
Connectivity
VNet - database entry
Virtual WAN - allows offices to connect to each other with Azure as middleman
ExpressRoute - allows Azure to office to connect - fast + encrypted (can use traditional VPN instead, runs over internet)
VPN Gateway
Azure DNS - having public/private domain names managed by Azure
Peering - connecting multiple VNets together so can have services in one region.
Bastion - Allows remote desktop into server without running rdp port or rdp software
Security
Network Security Groups (NSG) - access control list
Azure Private Link - take what used to be public and turns them into private endpoints
DDoS protection - free level and can pay for more with SLAs
Azure Firewall
Web App firewall (WAF) - built into app gateway product. recognises top 10/20 attacks
VN endpoints
Delivery
CDN -
Azure Front door - global load balancer
Traffic Manager
Application Gateway - app level (level 7) load balancer
Load balancer - network level (level 4) load balancer
Monitoring
Network watcher
ExpressRoute Monitor
Azure Monitor
VNet Terminal Access Point (TAP)
List create delete Azure CLI
az vm list
az keyvault create
az network vnet delete (vnet is a sub component of network)
az network vnet subnet list
Powershell list create delete
Get-AzVM
New-AzKeyVault
Remove-AzVirtualNetwork
Get-AzVirtualNetworkSubnetConfig
Powershell 7
Available for Windows, OSX and linux
Bash CLI
For linux systems
Azure CLI
for Windows, OSX and Linux
Azure Cloud Shell
In browser - CLI commands work too
Install-Module -Name Az -AllowClobber -Force
- AllowClobber allows overwriting existing files.
- Force (force to allow have 2 versions)
AAD
Free - 500,000 users/groups, SSO, no company branding or self-service password reset, SLA, dynamic groups, group naming policies, conditional access,
Premium P1 - no AI risky account detection, risk based conditional access policies, identity governance e.g. PIM, access reviews, entitlement management
Premium P2
https://docs.microsoft.com/en-gb/azure/active-directory/authentication/concept-mfa-licensing#available-versions-of-azure-ad-multi-factor-authentication
Account/User
Person or program with username, password MFA OR for app/managed identity - represents a program or service
Basis for authentication
Tenant
Organisaton represented by public domain name i.e. example.com (unique for you)
Will be assigned a domain if not specified
A dedicated instance of AAD
Azure account always part of at least one tenant
Not every tenant needs to have subscription/can have more than one
More than one account can be owner
Subscription
Agreement with microsoft to use azure services + how paying.
Gets billed to payment method of subscription - free PAYG, enterprise agreements
Azure AD Join. Cloud first/cloud-only AD
Can use Azure AD to sign in on windows 10 devices
When you don’t have an on-prem AD or for remote branch of office with limited onprem infrastructure +not worth installing a local AD or maybe you don’t want to pollute on prem AD with temp employees
Administrative Units
Taking a large organisation + dividing them into manageable segments e.g. canadian group + can specify which users can be admins.
Need premium license to add people to them.
