This chapter provides a brief overview of Azure architecture and services, with a subsequent focus on the storage services available in the Azure cloud.

Azure architecture & services overview

Prepare for Azure cloud usage

Azure physical infrastructure

Azure hierarchical structure

Azure storage services

Storage account functionality

The right storage service

Table storage use cases

Creating and removing storage accounts

Create storage accounts

Remove storage account

Storage configuration and file management

Redundancy hierarchy

Storage tools comparison

Migration vs. file operations

Work with blobs in storage accounts

Upload blobs

Edit and download blob

Azure Storage Services

This chapter provides an overview of compute services within Azure Cloud, exploring virtual machines, networking components, and app services in more detail.

Exploring Azure compute services

Compute service models

Compute service selection

Azure networking overview

Cloud resources connectivity

Azure virtual networks

The right network service

Azure virtual machines

Virtual machine characteristics

Virtual machine properties

Create and configure virtual machines

Create a virtual machine

Options for hosting applications

Migrate application

Application architecture

Compute and Networking Services

This chapter explores Azure's identity and access control, covering the shift to cloud-based identity solutions, access control features, and key security concepts like RBAC and zero trust, with a focus on Microsoft Defender for Cloud.

Azure directory services

Active Directory key elements

Cloud counter part

Active Directory components

Options

User

Computer

Group

Entra ID in practice

Azure identity services and access control

Azure authentication methods

Windows Hello for Business

Microsoft Authenticator app

FIDO2 security keys

Passwordless authentication

Conditional access

Create users and groups in Entra ID

Azure permission model

Directory roles

Role-based access control (RBAC)

Directory roles vs. RBAC

RBAC inheritance

Configure Azure permissions

Browse RBAC permissions

Cloud security in Azure

Zero trust model

Defense-in-depth layers

Multi-Factor Authentication (MFA)

Role-Based Access Control (RBAC)

Defense-In-Depth

Microsoft Defender for Cloud

Security vs. access control

Azure architecture and services

Identity, Access Control and Security

Continue your journey towards the Azure Fundamentals (AZ-900) certification with this introductory course on Microsoft Azure’s architecture and services. Learn key components like virtual machines, databases, networking, and storage through interactive exercises. Gain hands-on experience designing scalable cloud infrastructure and managing resources using best practices.

<h2> Azure Infrastructure</h2>
Delve into the heart of Azure's infrastructure, understanding cloud computing basics, and gain insights into Azure's organizational structure with this interactive course. This course is included as part of the learning track for the Azure Fundamentals (AZ-900) certification! Throughout this course you will explore core concepts like storage accounts, containers, file shares, tables, and queues, enhancing your comprehension of Azure's storage services. <br><br>

<h2> Azure Compute and Networking</h2>
Navigate the landscape of compute services, distinguishing cloud-native models from traditional ones. Learn key components and configurations, gaining clarity on when to apply different compute service offerings. Unravel the complexities of Azure's networking services, from virtual networks and subnets to VPNs, peering, and public/private endpoints. Explore Azure's virtual machines and hosting options for applications, spanning Infrastructure-as-a-Service (IaaS) to Platform-as-a-Service (PaaS). <br><br>

<h2> Security and Access Control</h2>
Dive into the realm of identity, access control, and security within Azure. Understand cloud directory services, hybrid identity solutions, and the transition to the cloud. Recognize the advantages of Azure access control features and how to apply them. Acquire foundational knowledge about the Azure permissions model (RBAC) and the architecture of inheritance. Finally, master cloud security in Azure, understanding concepts like Zero Trust, defense-in-depth, and leveraging Microsoft Defender for Cloud.

This comprehensive course ensures a deep understanding of Azure's key principles, empowering you to navigate Azure cloud with confidence.


Understanding Microsoft Azure

This course dives deeper into the Azure's backbone by going into topics like containers, virtual machines and much more.

Understanding Microsoft Azure Architecture and Services

Microsoft Azure Fundamentals (AZ-900)

IT administrators should have the permissions to assist other users facing authentication challenges

The Marketing department manager should have the capability to modify the membership of the Marketing group exclusively for his employees

Finance department should be able to access payroll files from storage account "payroll"

The group containing all developers should have full permissions on resource groups they own

Every employee should be able to access and read information from the company's public Azure subscription

Directory roles vs. RBAC

Understanding Microsoft Azure Architecture and Services

Hands-on interactive exercise