Resource Groups Flashcards
What are the ways of creating a resource group?
Azure portal Azure CLI Powershell Templates SDKZ (.NET, Java)
Can you nest resource groups?
No
Can a resource belong to more than one resource group?
No
What are the factors to consider when creating a resource group?
Organizing for authorization
Since resource groups are a scope of RBAC, you can organize resources by who needs to administer them. If your database administration team is responsible for managing all of your Azure SQL Database instances, putting them in the same resource group would simplify administration. You could give them the proper permissions at the resource group level to administer the databases within the resource group. Similarly, the database administration team could be denied access to the resource group with virtual networks, so they don’t inadvertently make changes to resources outside the scope of their responsibility.
Organizing for life cycle
We mentioned earlier that resource groups serve as the life cycle for the resources within it. If you delete a resource group, you delete all the resources in it. Use this to your advantage, especially in areas where resources are more disposable, like non-production environments. If you deploy 10 servers for a project that you know will only last a couple of months, you might put them all in a single resource group. One resource group is easier to clean up than 10 or more resource groups.
Organizing for billing
Lastly, placing resources in the same resource group is a way to group them for usage in billing reports. If you’re trying to understand how your costs are distributed in your Azure environment, grouping them by resource group is one way to filter and sort the data to better understand where costs are allocated.
Do tags applied at a resource group level propagate to resources within the resource group?
No. Tags are not inherited by resources in a resource group.
What is the maximum number or tags you can have for a resource?
50
What are the ways in which one can add and manipulate tags?
Powershell
Portal
CLI
Resource manager templates
Do all resource types support tags?
No
What are different usages of tags?
For automation: Add a tag such as WAkeUp:7am and create an automation job that looks for resources with that tag and wakes up or shuts down
Enrich alerts: including tags in alerts can help identify affected entities. eg. if department is finance then you would know finance is impacted
Find by tag: Can be used to retrieve resources from different resource groups containing the same tag
Billing data: Can be used to group billing data
What is the Azure Policy Service?
It provides a way to create, assign and manage policies
What are policies used for?
Policies can enforce things such as only allowing specific types of resources to be created, or only allowing resources in specific Azure regions. You can enforce naming conventions across your Azure environment. You can also enforce that specific tags are applied to resources.
How can you create and assign policies?
Portal, Powershell and CLI
What is roles based access control (RBAC)?
RBAC provides fine grained management of resources. enabling you to provide specific access rights to users to perform their jobs.
Which access model does RBAC use?
The allow model
What are resource locks?
They block the ability to delete or modify resources within the scope
