Subscriptions & Governance Flashcards
What does an account represent?
A person or a program
App = managed identity (□ a program or service)
□ An account can be a owner of multiple tenants
What is a tenant?
A representation of an organization
Usually associated with a domain name
How many tenants must an account be associated with?
Every Azure Account is a part of at least one tenant
Does every tenant have a subscription?
No, simply means the tenant cannot create resources.
What is a resource group?
A way of organizing a group of resources
□ A resource can only be a part of a single resource group
□ Deleting a resource group deletes all resources in them
Can you move a subscription from one tenant/directory to another?
Yes
What is cost anomoly notification?
A notification that detects when a new charge occurs.
A new charge is defined as a new charge that was not the day before OR
§ Charges that were there but have stopped OR
§ Or charges that have significantly changed.
What are azure advisor recommendations?
This is something that Microsoft offers recommendations for how you can save money on things.
§ Examples: reservations that you paid for but are not using, low cpu usage on vms, etc.
What is a resource lock? and what are the two types of locks?
Lock type
□ Delete = can be modified, but not deleted
□ Read only= nothing can be changed
What is Azure Policy? and what is an example?
Azure Policy helps to enforce organizational standards and to assess compliance at-scale
Example: storage accounts keys should not be expired
What format are Azure Policies stored in?
JSON
What are the two enforcement options for azure policy?
Enabled = outright deny creation, effect=deny
Disabled = Reports about compliance, effect=audit
What is a filter with respect to azure policy?
You can filter out policies only on certain regions, resources, etc
Do new azure policies effect existing resources?
No. New policies don’t affect any previously created resources, they just get reported that they are out of
compliance
How can you determine if a resource is compliant with all azure policies? What will azure provide if it is not?
For any resource/resource group you can look at the “compliance” tab which outlines if your resources/rg is compliant with policies
○ Remediation = something you can do to get your resources to be compliant with your policies
