The course is part of these learning pathsSee 5 more
Microsoft Azure is a collection of online services that organizations can use to build, host, and deliver applications. You don’t need to have your own data center because Azure runs in Microsoft’s data centers around the world. Not only does this approach save you the trouble of having to build and maintain your own on-premises IT infrastructure, but it can also save you money because you only have to pay for what you use, and you can scale your Azure resources up and down as needed.
In this course, you will not only get an overview of the Azure services available in various categories, such as compute, storage, and networking, but you will also follow hands-on examples showing you how to create virtual machines and web apps using the Azure Portal and Azure command-line interface.
- Describe some of the Azure services available in various categories
- Use the Azure Portal
- Use the Azure command line
- Anyone who would like to learn more about Azure
- General technical knowledge
- A Microsoft Azure account is recommended (sign up for free trial at https://azure.microsoft.com/free if you don’t have an account)
The GitHub repository for this course is at https://github.com/cloudacademy/azure-overview.
Building a solution is one thing, but making sure it continues to run properly and cost-efficiently is another. And, of course, you also need to make sure everything is secure and compliant. Fortunately, Microsoft has lots of services to help you with these tasks, too.
Azure Monitor is your one-stop shop for keeping track of what's happening with your Azure resources. It's a collection of a variety of monitoring tools. Remember when I mentioned Application Insights in the last lesson? That's actually just one component of Azure Monitor. Another is Log Analytics, which lets you run complex queries on multiple logs collected from your Azure resources.
But the core features of Azure Monitor are metrics and alerts. Metrics are basically statistics on various aspects of your resources, such as CPU usage on virtual machines and space used on Blob Storage. Azure Monitor creates graphs showing how these metrics have changed over time. It can also watch critical metrics you specify and send you an alert if there's a problem. For example, it could text you if a database is overwhelmed by a sudden spike in activity.
Microsoft also provides a dashboard called Service Health where you can find out about problems with the Azure platform itself as well as upcoming maintenance events. You can even create alerts so you'll be notified of both planned and unplanned outages.
Speaking of outages, it's always a good idea to have backups of your critical resources to help recover from service failures. Most Azure services, such as Cosmos DB, have their own built-in backup capabilities. Azure VMs are a little different because you back them up using a service called Azure Backup. Surprisingly, you can even use this service to back up your on-premises systems.
Even if you're doing a good job of maintaining your Azure systems, you might still be able to make some improvements. Microsoft provides a very helpful service called Azure Advisor that will not only suggest ways to improve the performance and availability of your applications, but it will even suggest ways to reduce your costs. For example, if it finds underutilized virtual machines, it will recommend that you use smaller (and less expensive) VMs to perform the same tasks.
Azure Advisor also provides security recommendations. It actually gets these recommendations from an important service called Azure Security Center, so if you want to get more details, that's the place to go. It's a dashboard that gathers security information from resources across your subscriptions and assesses your vulnerabilities.
First, it shows you how compliant your Azure subscriptions are. This is based on policies that you create in a service called, naturally, Azure Policy. For example, if someone in your organization creates a subscription that doesn't have your regulatory policy controls assigned to it, then it will show up in this compliance panel.
Then it shows you your resource security hygiene, which is an assessment of how secure your Azure resources are. You can click on it to see a list of recommendations to improve the security of your compute, storage, networking, and identity resources. It also gives you an Overall Secure Score to give you an idea of how secure all of your resources are. Each recommendation shows you how much your secure score would be improved if you were to implement the recommendation.
Finally, the Threat Protection panel shows you how many security alerts you have. These are potential threats that were detected by Azure Advanced Threat Protection. You can click on it to see the actual alerts so you can address them.
So far in this course, I've only talked about creating Azure resources manually, but once you're happy with a particular configuration for a resource, such as a virtual machine, you'll probably want to create nearly identical resources in a more automated way. The solution is something called an ARM template. ARM is short for Azure Resource Manager.
First, you create an ARM template that specifies all of the configuration details for one or more resources. For example, suppose you create an ARM template for a specific VM configuration. Then, whenever you need to create a VM with those characteristics, you can just run a certain command using that template, and voila, it takes care of all of the details for you. The best part is that Microsoft makes it really easy to create an ARM template. All you have to do is go to an existing resource that has the configuration you want and select "Export template" from the menu.
An even more powerful tool is Azure Blueprints, which lets you automate the deployment of entire Azure environments. A blueprint is a collection of ARM templates plus a few other details, such as policies and user permissions. When a blueprint is assigned to a subscription, it not only automates the creation of an environment, but it also keeps a record of the deployment. This makes it a critical governance tool because it enables the tracking and auditing of deployments.
We've covered a lot of Azure management tools, and that's not even all of them. You can rest assured that Microsoft has the services you need to manage your Azure infrastructure.
Guy launched his first training website in 1995 and he's been helping people learn IT technologies ever since. He has been a sysadmin, instructor, sales engineer, IT manager, and entrepreneur. In his most recent venture, he founded and led a cloud-based training infrastructure company that provided virtual labs for some of the largest software vendors in the world. Guy’s passion is making complex technology easy to understand. His activities outside of work have included riding an elephant and skydiving (although not at the same time).