Book Image

Azure Architecture Explained

By : David Rendón, Brett Hargreaves
Book Image

Azure Architecture Explained

By: David Rendón, Brett Hargreaves

Overview of this book

Azure is a sophisticated technology that requires a detailed understanding to reap its full potential and employ its advanced features. This book provides you with a clear path to designing optimal cloud-based solutions in Azure, by delving into the platform's intricacies. You’ll begin by understanding the effective and efficient security management and operation techniques in Azure to implement the appropriate configurations in Microsoft Entra ID. Next, you’ll explore how to modernize your applications for the cloud, examining the different computation and storage options, as well as using Azure data solutions to help migrate and monitor workloads. You’ll also find out how to build your solutions, including containers, networking components, security principles, governance, and advanced observability. With practical examples and step-by-step instructions, you’ll be empowered to work on infrastructure-as-code to effectively deploy and manage resources in your environment. By the end of this book, you’ll be well-equipped to navigate the world of cloud computing confidently.
Table of Contents (20 chapters)
1
Part 1 – Effective and Efficient Security Management and Operations in Azure
5
Part 2 – Architecting Compute and Network Solutions
12
Part 3 – Making the Most of Infrastructure-as-Code for Azure

Designing for security

Azure provides a range of tools to help us ensure our systems are secure. Some of these tools, such as Azure Key Vault, are independent services to be consumed as part of our solution. Other tools are component-specific, such as an Azure SQL Server’s firewall or threat protection capabilities.

In many cases, some options may seem to be duplicated or overlap in services – this isn’t by accident. When designing cloud applications, we often want to deploy and combine multiple tools that seem to serve the same purpose, or at the very least provide additional layers.

This multi-layered approach is called defense in depth and is an important subject in cloud platforms such as Azure. This concept essentially states that we should expect one or more of our security measures to fail – and then design additional measures to compensate when they do.

It may seem odd to assume something will fail – after all, years of system design...