Book Image

Learn Azure Administration - Second Edition

By : Kamil Mrzygłód
5 (1)
Book Image

Learn Azure Administration - Second Edition

5 (1)
By: Kamil Mrzygłód

Overview of this book

Complete with the latest advancements in Azure services, this second edition of Learn Azure Administration is a comprehensive guide to scaling your cloud administration skills, offering an updated exploration of Azure fundamentals and delving into the intricacies of Azure Resource Manager and Azure Active Directory. Starting with infrastructure as code (IaC) basics, this book guides you through the seamless migration to Azure Bicep and ARM templates. From Azure virtual networks planning to deployment, you’ll get to grips with the complexities of Azure Load Balancer, virtual machines, and configuring essential virtual machine extensions. You'll handle the identity and security for users with the Microsoft Entra ID and centralize access using policies and defined roles. Further chapters strengthen your grasp of Azure Storage security, supplemented by an overview of tools such as Network Watcher. By the end of the book, you’ll have a holistic grasp of Azure administration principles to tackle contemporary challenges and expand your proficiency to administer your Azure-based cloud environment using various tools like Azure CLI, Azure PowerShell, and infrastructure as code.
Table of Contents (23 chapters)
1
Part 1:Introduction to Azure for Azure Administrators
4
Part 2: Networking for Azure Administrator
7
Part 3: Administration of Azure Virtual Machines
12
Part 4: Azure Storage for Administrators
16
Part 5: Governance and Monitoring

Using managed identities

When deploying services to Azure, you can utilize a variety of different resources that will eventually interact with each other. You can have a virtual machine hosting an application connecting to a database, data orchestrators interacting with storage services, and many, many other possibilities. When designing such solutions, one often thinks about authentication and authorization mechanisms that will be used to determine what one service can and cannot do when connecting to another one. Most of the time, this can be solved by using concepts such as connection strings, access policies, or an in-built RBAC mechanism. This, however, is not always an ideal way of handling that challenge. In this section, we’ll talk more about using managed identities when connecting with Azure Storage to see how they make the whole setup simple.

Definition of managed identity

A managed identity in Azure is a concept for assigning an identity to a service that normally...