Copy of Azure Fundamentals AZ 900THeBest.pptx

Editor's Notes

• #4: On demand delivery of different IT resources over the internet enabling faster innovations, flexible resources and economies of scale.
• #5: No depreciation is very important to understand there is no depreciation for hardware resources for consumers, when we are setting up organization and we get 50 desktops for people to work here but after 5 years there will be some new technology so for sure the desktop laptop cost will go down, If I get a 80k laptop after 5 years the cost will go down. In cloud no depreciation occurs. In cloud we have opex and when we talk about physical infra then cap ex is used.
• #6: Cloud security is pivotal for organizations to protect their business data, reduce data theft, and meet compliance requirements. To secure your data in the cloud, including Microsoft Azure, you need to consider the shared responsibility model, where the cloud provider handles some security tasks while the customer manages others. Imagine the cloud as a big apartment building. The landlord (cloud provider) takes care of the building itself: the roof, plumbing, walls, etc. They keep it secure from intruders and make sure everything runs smoothly. But you, the tenant, are responsible for your own apartment. You lock your door, keep your valuables safe, and don't leave the windows open when you're gone. It's the same with the cloud. The provider secures the infrastructure, but you're responsible for your data, applications, and devices. You need to keep them locked up tight! This shared responsibility keeps everyone safe and sound in the cloud.
• #7: Physical Infrastructure: Microsoft is responsible for the physical security of the data centers, including the buildings, servers, networking equipment, and other hardware. Networking: The CSP manages the networking infrastructure that connects data centers, ensuring the availability and reliability of the Azure services. Virtualization Infrastructure: Microsoft is responsible for the virtualization layer, which abstracts the physical hardware and allows multiple virtual machines to run on the same physical server.
• #8: Physical Infrastructure: Microsoft is responsible for the physical security of the data centers, including the buildings, servers, networking equipment, and other hardware. Networking: The CSP manages the networking infrastructure that connects data centers, ensuring the availability and reliability of the Azure services. Virtualization Infrastructure: Microsoft is responsible for the virtualization layer, which abstracts the physical hardware and allows multiple virtual machines to run on the same physical server.
• #9: Data: Microsoft is responsible for the security of the Azure platform, but customers are responsible for securing their own data. This includes classifying data, implementing encryption, and setting access controls. Operating System (OS): Microsoft manages and secures the underlying infrastructure, but customers are responsible for securing the operating system of their virtual machines (VMs). This involves applying patches, configuring firewalls, and maintaining the OS security settings. Applications: Customers are responsible for the security of their applications, including the code they develop and deploy. Microsoft ensures the security of the underlying platform, but customers must secure their specific applications.
• #13: Available to anyone like dropbox, google drive. Example azure is managed by microsoft. Available to anyone and can be accessed by anyone - security not good- if azure is compromised anyone can see it. Maybe
• #16: Show azure availability zones
• #25: A public cloud like Azure makes it much easier to get your applications up and running. And because it uses a pay-per-use model, you can scale your operation up or down to meet demand, paying only for what you use. “Azure provides instant unlimited scalability that is very useful for events such as Black Friday sales,” says Matsukevich. “Businesses no longer need to spend money on additional servers that will be under-utilised the rest of the year – they get as much computing power as is needed to meet the demand.” Azure’s massive toolset helps keep businesses on track. In previous projects, Matsukevich has relied on Azure’s DevOps capabilities as a CI/CD (Continuous Integration and Continuous Delivery) tool, which allows him to to process multiple code changes simultaneously. “Azure DevOps is like a Swiss Army knife for deploying applications. It has a built-in version control system and awesome release management,” he says. With Azure keeping everything stable, streamlined and organised, Matsukevich’s team were free to focus on the pipeline and the deployment of applications. “By using this tool, we saved a huge amount of engineering time – we no longer needed to maintain servers and workers like we had to with previous generations of CI/CD tools like Jenkins,” he says. “Also, since Azure DevOps natively integrates with all other Azure services, it becomes much easier to set up and maintain a secure configuration.”
• #37: For eg: in this service, customer does not have to worry about creating a middleware, installing the requirements to create a virtual environment, installing timely software patches for operating system etc. All of this is taken care by the cloud provider, i.e. Microsoft in this case. An App Service plan is nothing but a bunch of virtual machines running behind the scenes but they are completed abstracted from you as an App Service plan. Azure Virtual Machines: What are they? Essentially, they're like your own personal computer but in the cloud. You have full control from the OS up to the apps. When to use them? Go for VMs if you need that deep level of control, especially if you're migrating older apps that have specific needs or if you’re familiar with managing your own environment. Azure App Service: What are they? Think of it as a streamlined service for web apps and APIs. They manage a lot of the nitty-gritty for you. When to use them? Choose App Service if you're building web apps and want Azure to handle the infrastructure stuff, like scaling. It's great when you want to focus more on the code and less on the setup. Quick Tips on Deciding: Complexity If you need to micromanage every detail, VMs are your friend. Want things a bit simpler? App Service. Cost: VMs can be pricier since they're always on, even when idle. App Service might be more wallet-friendly based on your usage. Migration: Got an old app to move? VMs might be easier.
• #38: The cool part? It takes care of all the computer stuff your code needs, so you can focus on what your code does best! The term serverless is a bit misleading. The idea of Serverless computing or Functions as a Service is that you don't need to concern yourself with the underlying details of your infrastructure and can instead write and deploy your code on a Serverless provider such as Lambda or Azure functions. Serverless computing is a cloud computing model where the cloud provider manages the infrastructure, dynamically allocating resources as needed. In this model, developers focus on writing and deploying code (functions or applications) without worrying about the underlying infrastructure, such as servers, operating systems, or scaling. It doesn't mean there are no servers; rather, the management and provisioning of servers are abstracted away from the developer, allowing them to focus solely on code development and execution.
• #41: Azure blob storage is fundamental for the entire Microsoft Azure because many other Azure services will store the data within a storage account, inside the blob storage, and act upon that data. And every blob should be stored in a container. The container is more like a folder where different blobs are stored. At the container level, we can define security policies and assign those policies to the container, which will be cascaded to all the blobs under the same container. It serves images or documents directly to a browser. It stores files for distributed access. We can stream video and audio using blob storage. Easy writing to log files. It stores the data for backup, restore, disaster recovery, and archiving. It stores the data for analysis by an on-premises or Azure-hosted service. Consider a scenario, in a development environment where every developer needs access to IDE and tools without using the internet to download it. At this situation, Azure Blob Storage would meet the need and using which you can only store development tools then give a link to the team to access the Blob location.
• #42: We can create an unlimited number of file shares within a storage account. Once we create a file share, then we can create directories, just like folders, and then we can upload files into it. Once we create a file share, we can mount that on any virtual machine, whether it is in Azure or outside. For implementing a File server in your organization, you should choose the Azure Files option. A File server is used to share Files across departments in your organization. When it comes to File sharing, end-user should not be allowed to access the copies of the File from its URI and need to be mapped locally in the computers. This is when Azure File Storage fits your need.
• #43: Order Placement: When a customer places an order on the website, the order details (like items purchased, quantity, customer information) are sent to a queue in Azure Queue Storage. Asynchronous Processing: The order processing system, which might be a separate part of the application, picks up orders from the queue asynchronously. This decouples the order placement process from the order processing, ensuring that the customer doesn't have to wait for the entire order processing to be completed before getting a confirmation. Inventory Management: The order processing system updates the inventory by sending messages to another queue, notifying the inventory management system about the items sold. Payment Processing: Another part of the system handles payment processing asynchronously. It picks up the order details from the queue, processes the payment, and updates the order status. Shipping and Notifications: The shipping system, which handles packaging and dispatching, picks up the order details from the queue and starts preparing the shipment. Simultaneously, a notification system can pick up the order details to send shipping confirmation emails or SMS to the customer.
• #44: This service stores data in a key/value pair manner. Its allows for authentication call from inside and outside of the Azure environment. Store data sets that do not require complex joins, foreign keys, or stored procedures, and can be denormalized for fast access. Table storage is used to store flexible data sets such as user data for web applications, device information, or other types of metadata the service requires. You can store any number of entities in a table, up to the storage account’s capacity limit.
• #55: Increased cost visibility: Gain a clear understanding of your cloud spending and identify areas where you can save money. Improved cost control: Set budgets, monitor spending, and receive alerts to proactive manage costs. Optimized resource utilization: Identify and eliminate underutilized resources to reduce unnecessary spending. Informed decision-making: Use cost data to make informed decisions about your cloud investments. Reduced risk of unexpected bills: Avoid exceeding your budget and incurring unexpected charges.
• #56: Increased cost visibility: Gain a clear understanding of your cloud spending and identify areas where you can save money. Improved cost control: Set budgets, monitor spending, and receive alerts to proactive manage costs. Optimized resource utilization: Identify and eliminate underutilized resources to reduce unnecessary spending. Informed decision-making: Use cost data to make informed decisions about your cloud investments. Reduced risk of unexpected bills: Avoid exceeding your budget and incurring unexpected charges.