Microsoft Azure Essentials

Microsoft Azure Essentials Track Summary

Azure Infrastructure
See the essential compute, storage, networking,
management, monitoring and security components of Azure
and how you can seamlessly manage your infrastructure in
the cloud with Microsoft.

Welcome to Azure Essentials. If youre new to Azure as a solution for

Infrastructure as a Service (IaaS), in the next few minutes well break down some
of the essentials of what you need to know to plan and implement your solutions
on Azure IaaS, as a primer to your deeper learning.

If you are new to Cloud computing the first question you may We operate over 40 regions globally and growing. A
have is whats the difference between IaaS and PaaS? The region represents a collection of data centers, which allows
simplest way to distinguish between the two models is by taking us to respect your data sovereignty needs and provide a
a look at whats managed by us as a Cloud vendor and what is robust failover model. You can choose the regions where
managed by you. With PaaS we run your compute and your infrastructure runs so that its closest to your data and
application services and you manage your applications and data. customers. Access can be over the internet or, to optimize
With IaaS we manage your compute, storage and networking your connection to the service, you can establish a fast
infrastructure for you and you manage everything else. and private connection to Azure via Express Route.

Azure offers a robust set of services that comprehensively In IaaS, compute, storage and networking services
supports both PaaS and IaaS scenarios. Using IaaS services, resemble those you are familiar with in your data center,
Azure becomes the equivalent of your physical data center in but there are some new concepts that help you create
the Cloud. resilient and elastically scalable solutions.
COMPUTE STORAGE
Lets start with compute. As an IT Professional, you will be Moving onto Storage, Azure offers multiple storage types,
familiar with deploying solutions to on-premises infrastructure to support both new and existing business applications.
using Virtual Machines. Anything you run in compute in a VM For IaaS-based solutions, three storage types are
on-premises, whether on Windows or Linux, you can easily run important: Blob, Disk and File storage. You may only need
in Azure. You only pay for what you use. to store small amounts of data, or you may need to store
petabytes. Like Compute, you pay only for what you use,
Azure also offers a large catalog of pre-defined first-, and and you can scale up and down based on your needs.
third-party, reference VM images that you can deploy. Or you
can define your own from within Azure, or deploy images that Azure Blobs provide highly scalable, unstructured
you have already have. During this specification phase, you storage. You can use them to store just about anything,
can establish a Resource Group to contain your VM including text files and documents. Blobs can be made
configurations, storage and networking requirements within a private, or available for public access. You can select from
group. Or, you can choose from hundreds of pre-defined both Hot and Cool blob storage tiers. The Hot tier
Azure Resource Manager templates available on GitHub that provides high performance, low latency access. The Cool
make it easy to configure a complex application in a few clicks. tier can offer significant cost savings, when you dont
require frequent access.
Youll need to specify an Azure location to host your VM and
the size of VM you require. Azure offers a range of VM types, If you wish to attach data disks to your Virtual Machines,
differing in the power and performance they offer. You can Azure offers conventional Hard Disk Drive options, and
easily switch between VM types at any time, so only choose also Solid-State Drives for your I/O-intensive applications.
what you need. For example: while doing Dev/Test you may
The third type of storage available to support IaaS-based
only need the entry-level A-family Virtual Machine for your
applications is Azure Files. This is like having a
application. Then, for a higher performance when in
conventional File Share in the cloud. You may need this if
production, you may want to switch to using D-family
you are migrating applications onto Azure that require
Virtual machines, or a family optimized to the needs of
support for traditional SMB file storage.
specific workloads.
As part of your disaster recovery plan, you can set up your
Now, an important step in defining your Compute is
Azure storage to synchronize stored data across two,
considering availability and redundancy. Here, Availability Sets
geographically separated regions, hundreds of miles
are an important concept to become familiar with. Grouping
apart. This means your data is durable even in the event
two or more Virtual Machines together in an Availability Set
of a complete regional outage or a disaster. In addition,
will protect your workloads against downtime. Azure will
you can use Azure Site Recovery to protect your entire
automatically place Virtual Machines in the same Availability
environment. Azure Site Recovery automates the
Set across different hardware resources to avoid any single
replication of the virtual machines to a secondary Azure
point of failure. Alongside Availability Sets, Azure provides
region, based on policies that you set. This will not only
several other options such as Traffic Manager, Scale sets and
replicate your entire Azure IaaS solution, you can also use
Availability Zones to make your applications highly resilient,
it to replicate your on-premises systems too. When it
available and scalable.
comes to Azure networking, the on-premise concepts you
are familiar with also apply in the cloud.

When you deploy your Virtual Machines, you do so into a

Virtual Network. This becomes your private network
address space in which your machines can seamlessly
communicate with each other. For security, you can segment In terms of security one of the most important things
this further, so that you have separate subnets and you can youll want to do is enable Azure Security Center. This
use IP-based Access Control Lists (ACLs) within the subnets. provides a view of the security state of all of your Azure
Also, you can apply load balancing and other common resources. At a glance, you can verify that the appropriate
networking concepts, just as you would in your on-premises security controls are in place and configured correctly, and
environments. For hybrid connectivity, you can connect the quickly identify any resources that require attention - for
virtual machines in Azure to Active Directory and on-premises example, production Virtual Machines that are not using
resources, using the Azure Network Gateway. encryption. You can also set up alerts and receive
recommendations on how to mitigate a threat.
MANAGEMENT AND SECURITY
Once deployed, you can monitor the health and availability of
So that was a brief tour of the essential
your IaaS services and your applications through the Azure
Portal. Through Azure Monitor you can easily create things to know about Azure IaaS as
dashboards to surface only what you want to monitor. You can you start to plan and implement your
use Azure Log Analytics and Azure Application Insights to
explore Azure log data and application performance data.
IaaS solutions on Azure.
Also, you can set up alerts around specific SLAs that you may
be tracking. For granular access control, Role-based Access
This is a big topic, and we encourage
Control (RBAC) allows you to set different job roles into to continue your learning experience
Resource Groups. You can use these to define the level of
by checking out the additional learning
access users have when administering Azure.
experiences in the links shown.
Additionally, for proactive resource optimization, Azure
Advisor analyses your resources based on usage and provides
personalized recommendations that can be reviewed and
implemented easily.

Azure Infrastructure

Demo Overview
VIRTUAL NETWORKS STORAGE ACCOUNT
Virtual networks allow you to isolate your resources and An Azure Storage Account provides a unique namespace
inter-connect them as needed. They provide Internet to store and access your Azure storage data objects. All
connectivity for your systems in Azure, connectivity within objects in an Azure Storage Account are billed together as
Azure between resources and connectivity back to your a group. By default, the data in your account is available
on-premises datacenters. They are the cloud equivalent of only to you, the account owner.
your routers and switches. Virtual networks, like all resources
in Azure, are arranged within resource groups for ease of
access and management.
BLOBS VIRTUAL MACHINES
One of the storage containers available within an Azure While virtual machines offer a sense of familiarity between
storage account is a Blob. Some resources (like Virtual on-prem and cloud solutions, there are important
Machines, if managed disks are used) automatically build differences in planning for IaaS solutions to keep in mind.
out containers and storage accounts as a part of their own From the Virtual machine blade you can view core
configuration. Traditional file shares are another option networking information. Here you'll find a list of any
available within Storage accounts. Here you can see a list network interfaces attached to the virtual machine,
of any existing file shares and create new ones. subnets they reside in and effective security rules.

ADDITIONAL RESOURCES

AZURE LEARNING PATHS Advanced Azure Virtual Machine and Compute

Azure Administrator
Azure Networking Concepts

Azure Solution Architect

Azure Storage Accounts

MICROSOFT MECHANICS Azure Web App Service

Hybrid infrastructure Automation with Azure Resource

Getting Started with Azure Virtual Machines
Manager Templates

Deploying a Highly Available Virtual machine

An Overview of Azure Monitor

Configuration Management & Disaster Recovery

Application Insights - Live telementry across the with Azure
app lifecycle

Protection via Azure Security Center: Detection and

resonse review

Azure Stack integrated systems - how to bring Azure to

your data center

HANDS-ON LABS
Azure Portal and Navigation

Azure Virtual Machine and Compute