(Unit 4 of 4) Azure management infrastructure Flashcards
What is a RESOURCE in Azure?
A resource is the basic building block of Azure.
Anything you create, provision, deploy, etc. is a resource.
Give examples of resources in Azure
- VMs
- Virtual networks
- Databases
- Cognitive services
What is an Azure RESOURCE GROUP?
Resource groups are simply groupings of resources. When you create a resource, you’re required to place it into a resource group.
How many resources can be in a resource group at any given time?
Each resource can exist in only one resource group.
AND you can move a resource from one resource group to another group.
When you apply an action to a resource group, that action will apply to?
ALL the resources located in the R.G
What is an Azure Subscription?
In Azure, subscriptions are a unit of management, billing, and scale.
What is the function of an Azure Subscription?
Similar to how resource groups are a way to logically organize resources,
subscriptions allow you to logically organize your resource groups and facilitate billing.
Describe the heirachy behind and Azure Subscription.
An Azure subscription links to an Azure account, which is an identity in Azure Active Directory (Azure AD) or in a directory that Azure AD trusts.
You can use Azure subscriptions to define boundaries around Azure products, services, and resources.
.
There are two types of subscription boundaries, name both.
- Billing boundary
- Access control boundary
Describe the 1st type of subscription BOUNDARY
**Billing boundary: **This subscription type determines how an Azure account is billed for using Azure.
Describe the 2nd type of subscription BOUNDARY
Access control boundary:
Azure applies access-management policies at the subscription level, and you can create separate subscriptions to reflect different organizational structures.
Similar to using resource groups to separate resources by function or access, you might choose to create additional subscriptions to separate?
- Environments (Dev and Test, Compliance)
- Organizational structures (limiting teams to lower cost resources)
- Billing: You can create additional subscriptions for billing purposes.
Describe the Azure heirachy.
- Management Groups
- Subscriptions
- Resource Groups
- Resources
What is a Management Group?
If you have many subscriptions, you might need a way to efficiently manage access, policies, and compliance for those subscriptions.
Azure management groups provide a level of scope above subscriptions.
Give an example of how you could possibly use M.G (1)
Create a hierarchy that applies a policy.
You could limit VM locations to the US West Region in a group called Production. This policy will inherit onto all the subscriptions that are descendants of that management group and will apply to all VMs under those subscriptions.