AZ-900+Slides Skylines+Academy v2
AZ-900+Slides Skylines+Academy v2
Traditional Datacenter
Cloud Computing Overview
What is Cloud Computing?
© 2019 Skylines Academy, LLC. All rights reserved.
Application
Analytics
Services
Scalability
© 2019 Skylines Academy, LLC. All rights reserved.
Vertical Scaling
Horizontal Scaling
Elastic
© 2019 Skylines Academy, LLC. All rights reserved.
• Average time to • Average time between • Interval of time in • Time requirement for
recover service from outages which data could be recovery to be
an outage lost during a recovery. completed in before
E.g. 5 minute RPO there is business
means up to 5 minutes impact.
of data could be lost.
Disaster Recovery and Fault Tolerance
© 2019 Skylines Academy, LLC. All rights reserved.
Cloud Economics
Economies of Scale
© 2019 Skylines Academy, LLC. All rights reserved.
Cloud Benefits
• Cloud providers can pass on
economies of scale to
consumers
• Acquire hardware at lower
Economies of scale is the ability to do costs
things more efficiently or at a lower-
cost per unit when operating at a • Local Government deals
larger scale.
• Datacenter efficiencies
Capex vs Opex
(CapEx) (OpEx)
• Spending on infrastructure is • No up-front cost
completed upfront • Pay for service as you
• Cost written off over a consume it
period of time • Deduct from tax bill in same
year as expense occurs
Typical On-Premises CapEx Costs
© 2019 Skylines Academy, LLC. All rights reserved.
Advantages Disadvantages
© 2019 Skylines Academy, LLC. All rights reserved.
Advantages Disadvantages
© 2019 Skylines Academy, LLC. All rights reserved.
Advantages Disadvantages
© 2019 Skylines Academy, LLC. All rights reserved.
Resource Groups
Resource Group Overview
© 2019 Skylines Academy, LLC. All rights reserved.
DESTROYED
Web App Virtual Machines Database
Why Resource Groups?
© 2019 Skylines Academy, LLC. All rights reserved.
• Organization
• Easy de-provisioning
• Security Boundary
– RBAC
• Apply Policies
© 2019 Skylines Academy, LLC. All rights reserved.
Resource
Resource Resource Group ARM Templates
Provider
Individual manageable item Container where you can Provider of services you Files used to define
available to you in Azure house your resources for can deploy in Azure resources you wish to
management e.g. Microsoft.Compute deploy to a resource
group
ARM Templates Overview
© 2019 Skylines Academy, LLC. All rights reserved.
{
"$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
• Apply Infrastructure as
"parameters": {
},
"variables": {
},
"resources": [
{
"name": "[concat('storage', uniqueString(resourceGroup().id))]",
Code
"type": "Microsoft.Storage/storageAccounts",
• Download templates
"apiVersion": "2016-01-01",
"sku": {
"name": "Standard_LRS"
},
"kind": "Storage",
"location": "North Central US",
"tags": {},
from Azure Portal
"properties": {}
• Use Quickstart
templates, provided by
Resource
(E.g. Storage Account)
Microsoft
Quickstart Templates
© 2019 Skylines Academy, LLC. All rights reserved.
https://azure.microsoft.com/en-us/resources/templates/
https://github.com/Azure/azure-quickstart-templates
ARM File Types
© 2019 Skylines Academy, LLC. All rights reserved.
Define the inputs you want Values that you can use Define the resources you Specify values that are
to pass into the ARM throughout your template. wish to deploy or update. returned after the ARM
template during Used to simplify your deployment is completed.
deployment. template by creating reuse
of values.
© 2019 Skylines Academy, LLC. All rights reserved.
Application OS OS OS
Hardware Hardware
Type Purpose
H – High High performance compute instances aimed at very high-
performance end computational needs such as molecular modelling and
compute other scientific applications.
L – Storage Storage optimized instances which offer a higher disk
optimized throughput and IO.
M – Large memory Another large-scale memory option that allows for up to
3.5 TB of RAM.
N – GPU enabled GPU-enabled instances.
SAP HANA on Specialized instances purposely built and certified for
Azure Certified running SAP HANA.
Instances
VM Specializations
© 2019 Skylines Academy, LLC. All rights reserved.
S M R
Premium Storage Larger memory Supports remote
options available configuration of direct memory
instance type access (RDMA)
Example: DSv2 Example: Standard A2m_v2 Example: H16mr
© 2019 Skylines Academy, LLC. All rights reserved.
Module:
VM Availability
Availability Sets
© 2019 Skylines Academy, LLC. All rights reserved.
FD 0
FD 1
Fault Domains and Update Domains
FD 2
Fault Domains and Update Domains
© 2019 Skylines Academy, LLC. All rights reserved.
FD 0 FD 1 FD 2
UD 0 UD 1
UD 2
Planning for Availability
© 2019 Skylines Academy, LLC. All rights reserved.
Availability Zones
Availability Zones
© 2019 Skylines Academy, LLC. All rights reserved.
App Services
Introduction to Web Apps
© 2019 Skylines Academy, LLC. All rights reserved.
Application Code
Monolithic App Issues:
• Minor code changes required
full recompile and testing
• Application becomes a single
point of failure
• Application is difficult and
often expensive to scale
Application Modernization
© 2019 Skylines Academy, LLC. All rights reserved.
Individual service
Microservices:
• Break application out into
separate services
12-Factor Apps:
• Make the app independently
scalable, stateless, highly
availably be design.
Comparing Monolithic and Microservices
© 2019 Skylines Academy, LLC. All rights reserved.
Monolithic Microservices
This… Becomes This Scale what you need to, not what you don’t Now I can pick the best database for the
service
Service 2 Service 2
All services Service 2
tightly coupled
and error
prone
Service 3 Service 3 Service 3
Service 3
App D
App C
App A
App B
App E
OS OS OS
Hypervisor
Docker
OS
Hardware
Server
© 2019 Skylines Academy, LLC. All rights reserved.
Serverless Computing
What is Serverless Computing?
© 2019 Skylines Academy, LLC. All rights reserved.
• Fully-managed services
• Only pay for what you use
• Flexibility to scale, as needed
• Stitch together applications
and services seamlessly
Azure Serverless Computing Services
© 2019 Skylines Academy, LLC. All rights reserved.
• Workflow Engine
• Used to orchestrate and
stitch together functions
and services (Just like
regular orchestration
tools)
• Visualize, Design, Build,
Automate
© 2019 Skylines Academy, LLC. All rights reserved.
Triggers
Logic Apps – Key Constructs
Action
© 2019 Skylines Academy, LLC. All rights reserved.
Networking Overview
Networking Overview
© 2019 Skylines Academy, LLC. All rights reserved.
Source: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview
Networking Overview (continued)
© 2019 Skylines Academy, LLC. All rights reserved.
Core VNet
VNet
Subnet A Subnet B Capabilities:
• Isolation
• Internet Access
• Azure Resources (VMs
and Cloud Services)
• VNet Connectivity
• On-Premises
Connectivity
• Traffic Filter
• Routing
VNets: Key Points
© 2019 Skylines Academy, LLC. All rights reserved.
Hybrid Connectivity
Hybrid Connectivity Options
© 2019 Skylines Academy, LLC. All rights reserved.
Point-to-Site
Site-to-Site (S2S) ExpressRoute
(P2S)
S2S
© 2019 Skylines Academy, LLC. All rights reserved.
S2S
Multi-Site
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
S2S (continued)
© 2019 Skylines Academy, LLC. All rights reserved.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
P2S (continued)
© 2019 Skylines Academy, LLC. All rights reserved.
Aggregate
S2S/VNet-to-VNet P2S Throughput
SKU Tunnels Connections Benchmark
VpnGw1 Max. 30 Max. 128 650 Mbps
Workload SKUs
Production, critical workloads VpnGw1,VpnGw2,VpnGw3
SKU Features
Basic Route-based VPN: 10 tunnels with P2S; no
RADIUS authentication for P2S; no IKEv2 for P2S
Policy-based VPN: (IKEv1): 1 tunnel; no P2S
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction
ExpressRoute Key Benefits
© 2019 Skylines Academy, LLC. All rights reserved.
Between your on- To Microsoft cloud To Microsoft services Between your In every peering
premises network and services across all across all regions with network and location for higher
the Microsoft Cloud regions in the ExpressRoute Microsoft over reliability
through a connectivity geopolitical region. premium add-on. industry standard
provider. Connectivity protocols (BGP).
can be from an any-
to-any (IPVPN)
network, a point-to-
point Ethernet
connection, or
through a virtual
cross-connection via
an Ethernet exchange.
ExpressRoute Provisioning
© 2019 Skylines Academy, LLC. All rights reserved.
ORDER
START USING
EXPRESS
EXPRESSROUTE
• Azure subscription ROUTE • Provide service key (s-key) CIRCUIT
created/exists CIRCUIT to connectivity provider
• Connectivity provider • Provide additional
identified and • Select service provider information needed by • Link VNets to Azure
relationship set up • Select peering location connectivity provider private peering
• Physical connectivity • Select bandwidth (VPN ID) • Connect to Auzre services
with provider set up • Select billing model • If provider manages on public IPs through
• Select standard or routing, provide details Azure pubic peering
premium add-on • Connect to Microsoft
SERVICE cloud Services through
ENSURE THAT
PROVIDER Microsoft peering
PREREQUISITES
PROVISIONS
ARE MET CONNECTIVITY
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-workflows
Peering – Data to Collect
• Peering subnet for path 1 (/30)
© 2019 Skylines Academy, LLC. All rights reserved.
Unlimited
• Speeds from 50 Mbps to 10 Gbps
• Unlimited Inbound data transfer
• Unlimited Outbound data transfer
• Higher monthly fee
Metered
• Speeds from 50 Mbps to 10 Gbps
• Unlimited Inbound data transfer
• Outbound data transfer charged at a predetermined rate per GB
• Lower monthly fee
ExpressRoute Considerations
© 2019 Skylines Academy, LLC. All rights reserved.
Load Balancers
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Load Balancing Services
Azure Load Balancer
© 2019 Skylines Academy, LLC. All rights reserved.
Key Features:
• Layer 4
• Basic and standard (preview)
SKUs
• Service monitoring
• Automated reconfiguration
• Hash-based distribution
• Internal and public options
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Load Balancer: Internal Example
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Load Balancer: Public Example
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Load Balancer: Multi-Tier Example
Load Balancing: App Gateway
© 2019 Skylines Academy, LLC. All rights reserved.
Key Features:
CDN
© 2019 Skylines Academy, LLC. All rights reserved.
CDN
Theodore
Source
© 2019 Skylines Academy, LLC. All rights reserved.
CDN
Theodore
Other Users
Edge
Source
Azure CDN Offerings
© 2019 Skylines Academy, LLC. All rights reserved.
https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
© 2019 Skylines Academy, LLC. All rights reserved.
Azure CDN Offerings
© 2019 Skylines Academy, LLC. All rights reserved.
Types of Data
Types of Data
© 2019 Skylines Academy, LLC. All rights reserved.
Semi-Structured Unstructured
Structured Data
Data Data
Structured Data
© 2019 Skylines Academy, LLC. All rights reserved.
• Adheres to a schema
• All the data has the same field or
properties
• Stored in a database table with rows
and columns
• Relies on keys to indicate how one
row in a table relates to data in
another row of another table
• Referred to as “relational data”
Semi-Structured Data
© 2019 Skylines Academy, LLC. All rights reserved.
• No designated structure
• No restrictions on the kinds of data it
can hold
• Example a blob can hold a PDF, JPEG,
JSON, videos etc.
• Enterprises are struggling to manage
and tap into the insights from their
unstructured data
© 2019 Skylines Academy, LLC. All rights reserved.
• Relational database-as-a-service
• Uses latest stable version of
Microsoft SQL
• Create NEW or…
• Migrate Existing databases using the
Microsoft Data Migration Assistant
Azure SQL Database – Key Features
© 2019 Skylines Academy, LLC. All rights reserved.
Small database with single Medium-sized database that Large databases that must
concurrent user must support multiple support a large number of
concurrent connections concurrent connections and
operations
• Small dbs • Good option for cloud apps • High transaction volumes
• Single active operation • Multiple operations • Large number of users
• Dev / Test • Workgroup or web apps • Multiple operations
• Small scale apps • 10-100 DTU • Mission critical apps
• 5 DTU • 100-800 DTU
NEW – Azure SQL Managed Instances
© 2019 Skylines Academy, LLC. All rights reserved.
Cosmos DB
Azure Cosmos DB
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Storage
Azure Blob Storage
© 2019 Skylines Academy, LLC. All rights reserved.
Benefits
© 2019 Skylines Academy, LLC. All rights reserved.
Table Storage
© 2019 Skylines Academy, LLC. All rights reserved.
Libraries
Azure Queue Storage
Queue Storage
© 2019 Skylines Academy, LLC. All rights reserved.
VM Storage
VM Storage Types
© 2019 Skylines Academy, LLC. All rights reserved.
Storage Account
Container Container
IoT Services
Azure IoT
© 2019 Skylines Academy, LLC. All rights reserved.
IoT Solution
IoT Central IoT Hub
Accelerators
SaaS solution to help you Underlying service needed Complete ready to deploy
connect and manage your to facilitate messages solutions that implement
devices between your IoT common IoT scenarios
application and devices
© 2019 Skylines Academy, LLC. All rights reserved.
Control Node
Compute Node
Azure Storage
HD Insight
© 2019 Skylines Academy, LLC. All rights reserved.
A fully managed, elastic data warehouse with security at every level of scale at no extra SQL Data Warehouse
cost
A fully managed, fast, easy and collaborative Apache® Spark™ based analytics platform Azure Databricks
optimized for Azure
A fully managed cloud Hadoop and Spark service backed by 99.9% SLA for your HDInsight
enterprise
A data integration service to orchestrate and automate data movement and Data Factory
transformation
Open and elastic AI development spanning the cloud and the edge Machine Learning
Real-time data stream processing from millions of IoT devices Azure Stream Analytics
A fully managed on-demand pay-per-job analytics service with enterprise-grade Data Lake Analytics
security, auditing, and support
Enterprise grade analytics engine as a service Azure Analysis Services
A hyper-scale telemetry ingestion service that collects, transforms, and stores millions Event Hubs
of events
Fast and highly scalable data exploration service Azure Data Explorer
© 2019 Skylines Academy, LLC. All rights reserved.
Machine Learning
Azure Machine Learning
© 2019 Skylines Academy, LLC. All rights reserved.
Departments
Accounts http://account.azure.com
Subscriptions http://portal.azure.com
Resources Groups
Resources
© 2019 Skylines Academy, LLC. All rights reserved.
Account to Subscription Relationships
© 2019 Skylines Academy, LLC. All rights reserved.
Enterprise Hierarchy Example
© 2019 Skylines Academy, LLC. All rights reserved.
Common Scenarios
EA Breakdown
Enterprise Department Service
© 2019 Skylines Academy, LLC. All rights reserved.
View usage and Across all Accounts Across Department Across Account No
charges data and Subscriptions
Domain Services
Domain Services Overview
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Active
Active Directory
Azure AD Directory
Domain Services
(AAD) Domain Services
(ADDS)
(AADDS)
Azure Active Directory
AAD
© 2019 Skylines Academy, LLC. All rights reserved.
Azure AD
Azure AD Overview
© 2019 Skylines Academy, LLC. All rights reserved.
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
Azure AD Features
© 2019 Skylines Academy, LLC. All rights reserved.
Multifactor
Enterprise
Single Sign-On Authentication Self Service
Identity Solution
(MFA)
Create a single identity for Provide single sign-on Enhance security with Empower your users to
users and keep them in access to applications and additional factors of complete password resets
sync across the enterprise. infrastructure services. authentication. themselves, as well as
request access to specific
apps and services.
© 2019 Skylines Academy, LLC. All rights reserved.
Full access to all resources, Can create and manage all Can view existing Azure https://docs.microsoft.com
including the right to types of Azure resources, resources, but cannot /en-us/azure/active-
delegate access to others but cannot grant access to perform any other actions directory/role-based-
others against them access-built-in-roles
Azure RBAC Built-in Roles (continued)
API Management Service Contributor Can manage API Management service and the APIs
API Management Service Operator Role Can manage API Management service, but not the APIs
themselves
API Management Service Reader Role Read-only access to API Management service and APIs
Application Insights Component Contributor Can manage Application Insights components
Automation Operator Able to start, stop, suspend, and resume jobs
Backup Contributor Can manage backup in Recovery Services vault
Backup Operator Can manage backup except moving backup in Recovery
Services vault
Backup Reader Can view all backup management services
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles
Azure RBAC Built-in Roles (continued)
© 2019 Skylines Academy, LLC. All rights reserved.
Users
Resulting Rights
Roles
RBAC Custom Roles
© 2019 Skylines Academy, LLC. All rights reserved.
Assignable
Create if none of Each tenant can
Use “Actions” scopes:
the built-in roles have to 2000 - Subscriptions
and “NotActions”
work for you roles - Resource Groups
- Individual Resources
© 2019 Skylines Academy, LLC. All rights reserved.
Azure Policy
Azure Policies
© 2019 Skylines Academy, LLC. All rights reserved.
Assigned to
Enforce Built-in or
Subscriptions or Create > Assign
Governance Custom Code
Resource Groups
© 2019 Skylines Academy, LLC. All rights reserved.
Resource Locks
Azure Resource Locks
© 2019 Skylines Academy, LLC. All rights reserved.
Access
Data Endpoints Account
Management
https://gallery.technet.microsoft.com/Shared-Responsibilities-81d0ff91
Microsoft Trust Center
© 2019 Skylines Academy, LLC. All rights reserved.
https://servicetrust.microsoft.com/
Compliance Manager
© 2019 Skylines Academy, LLC. All rights reserved.
Continuous
Centralized Policy Actionable
Security
Management Recommendations
Assessment