(Unit 4 of 4) Azure management infrastructure Flashcards
What is a RESOURCE in Azure?
A resource is the basic building block of Azure.
Anything you create, provision, deploy, etc. is a resource.
Give examples of resources in Azure
- VMs
- Virtual networks
- Databases
- Cognitive services
What is an Azure RESOURCE GROUP?
Resource groups are simply groupings of resources. When you create a resource, you’re required to place it into a resource group.
How many resources can be in a resource group at any given time?
Each resource can exist in only one resource group.
AND you can move a resource from one resource group to another group.
When you apply an action to a resource group, that action will apply to?
ALL the resources located in the R.G
What is an Azure Subscription?
In Azure, subscriptions are a unit of management, billing, and scale.
What is the function of an Azure Subscription?
Similar to how resource groups are a way to logically organize resources,
subscriptions allow you to logically organize your resource groups and facilitate billing.
Describe the heirachy behind and Azure Subscription.
An Azure subscription links to an Azure account, which is an identity in Azure Active Directory (Azure AD) or in a directory that Azure AD trusts.
You can use Azure subscriptions to define boundaries around Azure products, services, and resources.
.
There are two types of subscription boundaries, name both.
- Billing boundary
- Access control boundary
Describe the 1st type of subscription BOUNDARY
**Billing boundary: **This subscription type determines how an Azure account is billed for using Azure.
Describe the 2nd type of subscription BOUNDARY
Access control boundary:
Azure applies access-management policies at the subscription level, and you can create separate subscriptions to reflect different organizational structures.
Similar to using resource groups to separate resources by function or access, you might choose to create additional subscriptions to separate?
- Environments (Dev and Test, Compliance)
- Organizational structures (limiting teams to lower cost resources)
- Billing: You can create additional subscriptions for billing purposes.
Describe the Azure heirachy.
- Management Groups
- Subscriptions
- Resource Groups
- Resources
What is a Management Group?
If you have many subscriptions, you might need a way to efficiently manage access, policies, and compliance for those subscriptions.
Azure management groups provide a level of scope above subscriptions.
Give an example of how you could possibly use M.G (1)
Create a hierarchy that applies a policy.
You could limit VM locations to the US West Region in a group called Production. This policy will inherit onto all the subscriptions that are descendants of that management group and will apply to all VMs under those subscriptions.
Give an example of how you could possibly use M.G (2)
Provide user access to multiple subscriptions.
By moving multiple subscriptions under a management group, you can create one Azure role-based access control (Azure RBAC) assignment on the management group.
How many management groups can be supported in a single directory?
10,000 management groups can be supported in a single directory.
How many levels of depth can a management group support?
A management group tree can support up to six levels of depth. This limit doesn’t include the root level or the subscription level.
List a fact about M.G (3)
Each management group and subscription can support only one parent.
What Azure feature replicates resources across regions that are at least 300 miles away from each other?
Region pairs
A management group tree can support up to how many levels of depth?
6
