azure

When working with a team of people in Azure, you may want to start using security and compliance settings. RBAC is capable to grant appropriate access to Azure AD users, groups and services. RBAC is configured by selecting a role (the definition of what action is allowed or denied)and a user, group or service principal. The selection can then be applied to the entire subscription, a resource group, or to specific resources. »

Terminology Monitor and Visualize Metric - Monitor numerical values to see the health, operation and performance. Query and Analyze Logs - Logs are activity logs, diagnostics logs and telemetry from monitoring solutions. Analytics queries help with troubleshooting and visualizations. Alert and Actions - Alert when a condition is reached and take corrective automated actions based on triggers from metrics and logs. Action Groups - Named groups of notifications and actions for alerts Azure Monitor Service Monitor your environment to determine the performance, health and availability of your environment by collecting and analyzing data. »

Terminology Azure subscription Enterprise agreement (EA) Management Groups Billing alerts Azure subscriptions A Azure subscription is a unit in which you can run services. Billing for Azure services is done on a per-subscription basis. If your account is the only account associated with a subscription, then you are responsible for billing. Subscriptions have accounts. An Azure account is an identity like Azure Active Directory account or Microsoft account. »

Azure virtual machine (VM) extensions are small applications that provide post-deployment configuration and automation tasks on Azure VMs. For example, if a virtual machine requires software installation, anti-virus protection, or to run a script inside of it, a VM extension can be used. Azure VM extensions can be: Managed with Azure CLI, PowerShell, Azure Resource Manager templates, and the Azure portal. VM configuration, you can use Powershell DSC (Desired State Configuration), Chef, Puppet and Custom Script Extensions to install VM configuration agents and configure your VM. »

!!!! Scale sets and availability update domain controleren / testen. Of Placement groups and this Scale Sets Azure virtual machine scale sets let you create and manage a group of identical, load balanced VM instances. The number of machines can increase automatically, by hand or on a schedule. All VMs are created from the same OS image and provisioning configuration. In this way you can deploy hundreds of identical VMs. »

See the Regions and availability page at Microsoft. Maintenance and Downtime There are three scenarios that can lead to virtual machine in Azure being impacted. Unplanned Hardware Maintenance - Occurs when the Azure platform predicts that the hardware or a platform component is about to fail. This will issue and hardware maintenance event. Azure uses Live Migration technology to move the VM to a healthy physical machine. Memory, open files and network connections are still active after a Live Migration. »

Quickly create a new VM New-AzVm ` -ResourceGroupName "myResourceGroup" ` -Name "myVM" ` -Location "East US" ` -VirtualNetworkName "myVnet" ` -SubnetName "mySubnet" ` -SecurityGroupName "myNetworkSecurityGroup" ` -PublicIpAddressName "myPublicIpAddress" ` -OpenPorts 80,3389 Specify $cred = Get-Credential # Create the initial configuration $vm = New-AzVMConfig -VMName myVM -VMSize Standard_Ds1_v2 # Set the operating system $vm = Set-AzVMOperatingSystem ` -VM $vm ` -Windows ` -ComputerName myVM ` -Credential $cred ` -ProvisionVMAgent -EnableAutoUpdate # Set the image information $vm = Set-AzVMSourceImage ` -VM $vm ` -PublisherName MicrosoftWindowsServer ` -Offer WindowsServer ` -Skus 2016-Datacenter ` -Version latest # Create the VM New-AzVM -ResourceGroupName myResourceGroupVM -Location EastUS -VM $vm »

Management commands Get status of a machine Get-AzVM get-azvm -status get-azvm -name SimpleWinVM -ResourceGroupName deploymentgroup Update VM settings $ResourceGroupName = "deploymentgroup" $vm = Get-AzVM -Name SimpleWinVM -ResourceGroupName $ResourceGroupName $vm.HardwareProfile.vmSize = "Standard_A3" Update-AzVM -ResourceGroupName $ResourceGroupName -VM $vm Creating machines See Azure Virtual Machine create with Powershell. # New VM simple New-AzVM -name azvm1 -ResourceGroupName azgroup1 Azure Virtual Machine Sample Scripts »

Also see Azure Resource Manager. Template can deploy multiple resources in a correct order. It will create depending resources first. Microsoft has a list of quickstart templates. Deploy a ARM template You can deploy a template by using its public URL. Deploy a ARM template with powershell Deploy a template to a resource group. Powershell will ask for the required parameters. New-AzResourceGroup -Name deploymentgroup -Location westeurope $templateUri = "https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-vm-simple-windows/azuredeploy.json" New-AzResourceGroupDeployment -Name rg9deployment1 -ResourceGroupName deploymentgroup -TemplateUri $templateUri Empty Template schema The template structure. »

Terminology Install Install-Module -Name Az -AllowClobber Login Login-AzAccount Resources »