Microsoft Azure Infrastructure Services for Architects : Designing Cloud Solutions

Intro -- Microsoft® Azure® Infrastructure Services for Architects -- Acknowledgments -- About the Author -- Contents at a Glance -- Contents -- Introduction -- Who Should Read This Book -- What's Inside -- How to Contact the Author -- Chapter 1 The Cloud and Microsoft Azure Fundamentals -- The Evolution of the Datacenter -- Introducing the Cloud -- The Private Cloud and Virtualization -- Types of Service in the Cloud -- Microsoft Azure 101 -- Microsoft Datacenters and Regions -- Microsoft Network -- Azure Resource Providers -- Getting Access to Microsoft Azure -- Free Azure Trials and Pay-as-You-Go -- Azure Benefits from Visual Studio Subscriptions -- Enterprise Enrollments for Azure -- Reserved Instances and Azure Hybrid Benefit -- Reserved Instances -- Azure Hybrid Benefit -- Increasing Azure Limits -- The Azure Portal -- Portal Basics -- Azure Portal Dashboards -- Chapter 2 Governance -- What Is Governance? -- Understanding Governance Requirements in Your Organization -- Azure Subscriptions and Management Groups -- Subscriptions -- Management Groups -- Resource Groups -- Role-Based Access Control -- Naming Conventions -- Using Tags -- Azure Policy -- Azure Templates -- Azure Blueprints -- Azure Resource Graph -- Cost Management -- Visibility -- Accountability -- Optimization -- Chapter 3 Identity -- The Importance of Identity -- A Brief Refresher on Active Directory -- Using Cloud Services, Federation and Cloud Authentication -- Federation -- Cloud Authentication and Authorization -- Azure Active Directory Fundamentals -- Azure AD SKUs -- Populating Azure AD -- Azure AD B2B -- Azure AD Authentication Options -- Azure AD Groups -- Azure AD Entitlements and Application Publishing -- Chapter 4 Identity Security and Extended Identity Services -- Azure AD Security -- Multi-Factor Authentication -- Password Policies -- Azure AD Conditional Access ; Azure AD Identity Protection -- Azure AD Log Inspection -- Azure AD Privileged Identity Management -- Azure Advanced Threat Protection -- Azure AD Application Proxy -- Azure AD B2C -- Active Directory in the Cloud -- Active Directory Site Configuration -- Placing a Domain Controller in Azure -- Azure AD Domain Services -- Chapter 5 Networking -- Connectivity -- Virtual Networks -- Adding a VM to a Virtual Network -- NIC IP Configurations -- Reserved IPs for VM -- Accelerated Networking -- Azure DNS Services and Configuration Options -- Connecting Virtual Networks -- Connectivity to Azure -- Azure Virtual WANs and ExpressRoute Global Reach -- PaaS VNet Integration -- Protection -- Network Security Groups and Application Security Groups -- Firewall Virtual Appliances -- Distributed Denial-of-Service Protection -- Delivery -- Intra-Region Load Balancing -- Inter-Region Load Balancing -- Monitoring -- Chapter 6 Storage -- Azure Storage Services -- Azure Storage Architecture -- Using Storage Accounts and Types of Replication -- Storage Account Keys -- Azure Storage Services -- Storage with Azure VMs -- VM Storage Basics -- Temporary Storage -- Managed Disks -- Bulk Data Options -- Azure Import/Export and Azure Data Box Disk -- Azure Data Box -- Azure Data Box Gateway and Data Box Edge -- Azure Database Offerings -- Azure SQL Database -- Azure Cosmos DB -- Chapter 7 Azure Compute -- Virtual Machines -- Fundamentals of IaaS -- Types of Virtual Machines -- Azure VM Agent and Extensions -- Boot Diagnostics -- Ephemeral OS Disks -- Proximity Placement Groups -- Virtual Machine Scale Sets -- Low-Priority VMs -- Azure Dedicated Host -- Windows Virtual Desktop -- VMware in Azure? -- Platform as a Service Offerings -- Containers -- Azure Application Services -- Azure Serverless Compute Services -- Chapter 8 Azure Stack -- Azure Stack Foundation -- Azure Stack 101 ; Services Available on Azure Stack -- How to Buy Azure Stack -- When to Use Azure Stack -- Managing Azure Stack -- How to Interact with Azure Stack -- Marketplace Syndication -- Plans, Offers, and Subscriptions -- Updating Azure Stack -- Privileged Endpoint and Support Session Tokens -- Understanding Azure Stack HCI -- Chapter 9 Backup, High Availability, Disaster Recovery, and Migration -- Availability 101 -- Distinguishing High Availability vs. Disaster Recovery vs. Backup -- Understanding Application Structure and Requirements -- Architecting for Multi-Region Application Deployments -- Backups in Azure -- Thinking About Backups -- Using Azure Backup -- High Availability in Azure -- Disaster Recovery in Azure -- On-Premises Disaster Recovery -- On Premises to Azure Disaster Recovery -- Azure to Azure -- Migrating Workloads to Azure -- Migration Benefits -- Migration Approaches -- Migration Phases -- Chapter 10 Monitoring and Security -- Azure Monitoring -- Why Monitor? -- Types of Telemetry in Azure -- Azure Monitor Fundamentals -- Azure Monitor Logs Fundamentals -- Alerting -- Security in Azure -- Advanced Threat Protection (ATP) -- Azure Security Center (ASC) -- Azure Sentinel -- Keeping Secrets with Azure Key Vault and Managed Identities -- Chapter 11 Managing Azure -- Command Line, Scripting, and Automation with Azure -- Using PowerShell with Azure -- Using the CLI with Azure -- Leveraging Azure Cloud Shell -- Automating with Azure Automation and Azure Functions -- Deploying Resources with ARM JSON Templates -- Everything Is JSON -- Anatomy of an ARM JSON Template -- Template Tips -- Additional Useful Technologies for Azure Management -- Azure Bastion Host -- Windows Admin Center -- Chapter 12 What to Do Next -- Understanding and Addressing Azure Barriers -- Building Trust -- Understanding Risks for Azure ; Why You Should Use Azure and Getting Started -- Understanding Azure's Place in the Market -- First Steps with Azure IaaS -- Index -- EULA