Book Image

Learn Azure Administration - Second Edition

By : Kamil Mrzygłód
5 (1)
Book Image

Learn Azure Administration - Second Edition

5 (1)
By: Kamil Mrzygłód

Overview of this book

Complete with the latest advancements in Azure services, this second edition of Learn Azure Administration is a comprehensive guide to scaling your cloud administration skills, offering an updated exploration of Azure fundamentals and delving into the intricacies of Azure Resource Manager and Azure Active Directory. Starting with infrastructure as code (IaC) basics, this book guides you through the seamless migration to Azure Bicep and ARM templates. From Azure virtual networks planning to deployment, you’ll get to grips with the complexities of Azure Load Balancer, virtual machines, and configuring essential virtual machine extensions. You'll handle the identity and security for users with the Microsoft Entra ID and centralize access using policies and defined roles. Further chapters strengthen your grasp of Azure Storage security, supplemented by an overview of tools such as Network Watcher. By the end of the book, you’ll have a holistic grasp of Azure administration principles to tackle contemporary challenges and expand your proficiency to administer your Azure-based cloud environment using various tools like Azure CLI, Azure PowerShell, and infrastructure as code.
Table of Contents (23 chapters)
1
Part 1:Introduction to Azure for Azure Administrators
4
Part 2: Networking for Azure Administrator
7
Part 3: Administration of Azure Virtual Machines
12
Part 4: Azure Storage for Administrators
16
Part 5: Governance and Monitoring

The basics of Azure Policy

In this section, we’ll describe how Azure Policy works. We’ll focus on how it’s implemented and linked with Azure Resource Manager, what we can configure, and how to ensure that the implemented rules are applied correctly. Let’s start by discussing how Azure Policy relates to properties exposed by resources via Azure Resource Manager.

Azure Resource Manager and Azure Policy

As mentioned in Chapter 2, Basics of Infrastructure-as-Code, each resource in Azure is described by a set of fields, which are individual for each type of service. For example, let’s compare the configuration of a resource group with a storage account. In the following code snippet, we have a description of a resource group:

{
      "type": "Microsoft.Resources/resourceGroups",
      "apiVersion": "2022-09-01",
      ...