Posts

Azure Tutorials Series - Economies of Scale | CapEx vs OpEx | Azure Previews | Azure AD

 In previous article we learnt about Azure Monitoring and Azure Health Service. In this article, we will be covering few fundamentals such as Economies of Scale, Capital Expenditure vs Operational Expenditure. This might be the last article in the series of Azure Tutorials Series for the preparation of Az-900, we might cover few practice papers as well which will give you exposure to the real time scenarios where Azure fundamentals comes in handy. Economies of Scale As the company grows in size, they can decrease price per unit for their customers.  Concept of buying in more quantities at lower cost, power of volume. Core principle being when the customer buys the service, he/she has to pay more than what Azure does it to them, the same service can be bought in good rate. Capital Expenditure(CapEx) vs Operational Expenditure(OpEx) Capital Expenditure requires upfront cost on infrastructure. It is an investment in on-premises. The value of infrastructure is such that it degrad...

Azure Tutorials Series - Monitoring in Azure

Image
 In previous article we learnt about Azure Policies and Blueprints, In this article we will learn about Monitoring concepts in Azure, services like Azure Service Health and Azure Monitor. Monitoring in Azure Continuous monitoring of your applications and resources and keeping a log. Centralised repository to correlate events from multiple resources. One stop solution for collecting, analysing and tracking the progress and performance. Enhances availability, performance and security of the resources Provides visual graphics of the statistics. Can be integrated with other tools such as Power BI. Performs  Analysis Visualisation Insights Response Azure Monitor is a central dashboard where you can run queries, view graphs and create alerts for certain events. Azure Service Health  Is like a doctor which assesses your body first after which it provides you a medical subscription. Azure Service Health does the same, it provides you the health status of Azure Automatic pop-ups a...

Azure Tutorials Series - Azure Policy | Blueprints

Image
 In previous article we learnt about Azure Encryption, Key Value, Azure Storage Encryption and lot of other related terms. In this article we will learn about Azure Policy, Difference between Azure Policy and RBAC, How to create a policy, Azure Blueprints, Azure Blueprints vs Azure Resource Manager Templates and lastly Azure Blueprints versus Azure Policy.  Azure Policy & Azure Blueprints Ensure whether the standards are maintained and followed. Azure Policy Enforces rules or policies for specified or all resources Makes sure all existing resources follows it and all the new deployment shall also follow it Such that infrastructure remains compliant, for an example, all the virtual machines in your organization has 8 GB RAM at least, or even allows to select the location of the resources. Can immediately deny the creation of a new resource if it is non-compliant with the policy. Can stop the update of old resource if it is against the policy. Azure Policy can add restrictio...

Azure Tutorials Series - Encryption

 In Previous article, we covered Azure Identity Management, different user roles, Azure AD tenant and lot of other topics. In this article, we will be covering concepts of Encryption in Azure. Encryption in Azure Encryption of data such that no unauthorised person can read it. Data has to be decrypted to understand Encryption Types Symmetric Encryption - Requires the same key to encrypt and decrypt the data Asymmetric Encryption - uses a pair of public and private key such that one key can perform a single task at a given time. Encryption Ways Encryption at Rest - Data stored in server disk, database or storage account. Encryption in Transit - Data actively moving from one location to another Encryption on Azure We have below encryption for different services For raw storages - Azure Storage Service Encryption For Virtual machine disks - Azure Disk Encryption For Databases - Transparent Data Encryption(TDE) For Secrets- Azure Key vault We will learn about these 4 services and i...

Azure Tutorials Series - Identity and Access | Azure AD

 In previous article we learnt about Azure securities, Let's learn about Azure Identity and access in this article. We will cover authentication, authorisation, Azure active directory(AD) and RBAC. Identity and Access Management in Azure Ability to allow roles or permissions to access limited pool of resources Azure Active Directory helps enables authorisation and authentication for the privileges. Authentication vs authorisation Authentication(AuthN)  - Verifies the identity of a person Authorization(AuthZ)  - Verifies what all priviliges user has Azure Active Directory   Called Azure AD Cloud based identity service No SLA for free tier, Standard and Premium get 99.9% Can be used stand alone or can be synced with existing on-prem active directory Services includes - Multi Factor Authentication Single sign on Application Management Business to Business(B2B) identity services Business to customer(B2C) identity services Device Management Roles in Azure Roles in Azure ...

Azure Tutorials Series - Azure Security

Image
In previous article, we shared the concepts of networking and learnt about Azure load balancing, Azure Traffic Manager, DNS and other concepts. In this article, we will learn about security threats to Azure and how it deals to tackle it. Azure Security Attackers always have a good eye on the data breach Azure provides layer by layer protection to protect the security Confidentiality, Integrity and availability are the fundamental pillars of security Allows endpoint encryption for virtual machines Using networking to allow limited authorised traffic Anti DDoS attack configuration. Uses firewalls to identify and alert malicious attack on your network Provides IAM roles, RBAC for identity verification and access controls Uses Single-Sign-on and multi factor authentication Some of the way to increase the security of traditional systems are longer and more complex passwords Allow employees to log in with company registered devices Use MFA which requires to verify the identity Change passwor...

Azure Tutorials Series | Load Balancing | Azure Application Gateway | Azure CDN

Image
In previous article, we have gone through Azure Networking and terminologies used while deciding a network. In this article, we will learn about load balancing, Azure application gateway, Content Delivery network, DNS, Azure traffic manager, network latency and difference between Azure traffic manager and load balancer. Azure Load Balancing Provides high availability with an SLA of 99.999% Highly resilient - An ability to stay operational during catastrophic times such as natural disasters, DDoS attacks. The function of load balancer is to equally distribute the traffic, as if high traffic comes in, it distributes among other peers. Azure Load Balancer Provides low latency - Ability of a computer network to process a very high volume of data messages with minimal latency(delay) Supports TCP and UDP applications Allows port forwarding  Let's suppose, one VM is unresponsive, Azure Load Balancer will route the traffic to the pool of other VMs. Azure Application Gateway Recommended to ...