Learn Azure Administration: Solve your cloud administration issues relating to networking, storage, and identity management speedily and efficiently

Cover
Title Page
Copyright and Credits
Dedication
About Packt
Contributors
Table of Contents
Preface
Section 1: Understanding the Basics
Chapter 1: Getting Started with Azure Subscriptions
	Technical requirements
	Getting an Azure subscription
		PAYG
		CSP
		Enterprise Agreement
		Understanding different subscription models
	Implementing subscription policies
		Getting started with Azure Policy
		Policy validation results
		Examples of Azure policies
	Using Azure Blueprints for repeatable deploy and update operations
		Getting started with Blueprint assignment
		Assigning an Azure blueprint
	Checking usage and managing quotas
	Cost monitoring and analysis
		Cost analysis
		Budgets
		Azure Advisor
	Implementing management automation
	Summary
	Further reading
Chapter 2: Managing Azure Resources
	Technical requirements
	Managing resource providers
	Managing resource groups
		Browsing resource groups
		Listing the available resources
		Moving resources
		Understanding resource providers
	Performing deployments using ARM with templates
		Writing a template from scratch
		Automation scripts
		Other tools
	Implementing resource locks
		Subscription locks
		Resource group locks
	Automating resource group management with Azure Event Grid
		Creating an event subscription
		Analyzing the gathered data
	Implementing proper resource naming conventions
		Subscription
		Resource group
		Resources
	Summary
Chapter 3: Configuring and Managing Virtual Networks
	Technical requirements
	Creating and configuring VNet peering
		The Azure portal
		The Azure CLI
	Creating and configuring VNet-to-VNet connection
		Single region
		Multiple regions
		Connecting the networks
			The same resource group
			Different resource groups
	Creating and configuring subnets
		Creating a VNet
		Creating a subnet
		Understanding subnet configuration
	Securing critical Azure services with service endpoints
		Creating a VNet and Azure Storage account
		Creating a service endpoint
		Configuring a service endpoint
	Configuring a naming resolutions
		Creating a DNS zone
		Configuring the DNS within a VNet
	Creating and configuring network security groups (NSGs)
		Creating a VNet with a subnet
		Adding an NSG to a subnet
		Reviewing NSG rules 
		Adding an NSG rule
	Summary
Section 2: Identity and Access Management
Chapter 4: Identity Management
	Technical requirements
	Creating users in Azure AD
		Getting started with user creation
		Creating a user in an Azure Active Directory tenant
		Creating a guest user
		Describing the user creation process
	Assigning a role to a user
	Registering an application in Azure AD
		Creating a new application
	Creating groups
		Group creation
	Managing groups
	Managing directory roles
	Monitoring and auditing users
	Enabling MFA authentication
	Securing an Azure Service Fabric cluster
	Summary
Chapter 5: Access Management
	Technical requirements
	Creating a custom role
	Configuring access to Azure resources
	Configuring MSI
		Securing Azure App Services
	Using and revoking Shared Access Policies
		Creating and managing Shared Access Policies
	Generating SAS tokens for different services
	Summary
Chapter 6: Managing Virtual Machines
	Technical requirements
	Adding data disks
		Creating a data disk
	Adding network interfaces
	Using Desired State Configuration
	Scaling VMs up/out
		Scaling caveats
	Configuring monitoring
		Configuring guest-level monitoring
		Extending monitoring capabilities
		Enabling connection monitor
	Configuring high availability
	Deploying VMs
		Browsing the solutions
		Deploying resources using various tools
	Securing access to VMs
	Connecting to a VM
		Connecting to a VM
		Using RDP and SSH to connect
	Summary
Section 3: Advanced Topics
Chapter 7: Advanced Networking
	Technical requirements
	Implementing load balancing
	Monitoring and diagnosing networks
		IP flow verify
		Next hop
		Effective security rules
		VPN troubleshoot, Packet capture, and Connection troubleshoot
	Configuring DDoS protection
	Enabling VNets in AKS
	Enabling VNets for ACI
	Enabling VNets in Redis Cache
	Summary
Chapter 8: Implementing Storage and Backup
	Technical requirements
	Configuring network access for Azure Storage accounts
	Enabling monitoring and finding logs for Azure Storage accounts
	Managing the replication of Azure Storage accounts
		Selecting the replication mode
	Setting up Azure file shares
	Transferring large datasets with low or no network bandwidth
		Understanding your case – low or no bandwidth
		Transferring data from on-premises to Azure
	Transferring large datasets with medium or high network bandwidth
		Understanding your case – medium or high bandwidth
		The available options
	Exploring periodic data transfer
	Enabling security for Azure Storage
	Summary
Chapter 9: High Availability and Disaster Recovery Scenarios
	Technical requirements
	Monitoring Azure VMs
		Creating a VM
		Enabling monitoring
		Understanding the details
	Monitoring Azure Storage services
	Monitoring Azure App Service
		Exploring capabilities of Azure Application Insights
	Implementing Azure SQL backup
		Creating our SQL server and database
		Backing up your databases
	Implementing Azure Storage backup
		Backing up your storage account data
	Implementing Availability Zones for VMs and HA
		Availability Sets versus Availability Zones
		Implementing AZs 
		Understanding how AZs work
	Monitoring and managing global routing for web traffic with Azure Front Door
		Understanding Azure Front Door
		Creating an Azure Front Door instance
	Designing backup plans for VMs
	Summary
	Further reading
Chapter 10: Automating Administration in Azure
	Technical requirements
	Starting/stopping Azure VMs during off-hours
		Getting started with a VM
		Creating an Automation account
	Monitoring Blob storage with Azure Event Grid
		Extending your setup
	Monitoring ACR with Azure Event Grid
		Integrating ACR with Azure Event Grid
	Integrating FTP/SFTP servers with Azure Logic Apps
		Creating an Azure Logic App instance
		Understanding the setup
	Integrating Office 365 with Azure Logic Apps
	Integrating Azure SQL Server with Azure Logic Apps
		Getting started with Azure Logic Apps
	Managing updates for VMs
		Getting started with the Update Management feature
		Enabling the feature for multiple machines
	Tracking changes in VMs
	Summary
	Further reading
Other Books You May Enjoy
Index