Learning Microsoft Azure: Cloud Computing and Development Fundamentals (Final)

Foreword by Magnus Mårtensson
Foreword by Thomas Maurer
Preface
Greetings from the Author
The Cloud Migration Journey to Azure That Leads Me to You
Why I Wrote This Book
Who Should Read This Book
What You Will Learn
Navigating This Book
Part I: Cloud Computing and Microsoft Azure Fundamentals
Part II: Compute, Networking, Storage, and Databases
Part III: Artificial Intelligence (AI), Machine Learning (ML), Big Data, IoT, and Security
Part IV: Integration, Infrastructure, and DevSecOps
Part V: Governance, Migration, Architecture, and Development Tools
Check Your Knowledge
Learn by Doing (Try It!)
Learning Resources and Further Readings
What This Book Is Not
Conventions Used in This Book
Using Code Examples
O’Reilly Online Learning
How to Contact Us
Acknowledgments
I. Cloud Computing and Microsoft Azure Fundamentals
1. Cloud Computing Fundamentals
What Is Cloud Computing?
Benefits of the Cloud in Software Engineering and IT
Cloud Computing Versus Virtualization
Cloud Hypervisor: The Key to Virtualization in the Cloud
Evolution of Cloud Computing
Mainframe computing
Cluster computing
Grid computing
Cloud computing
Our Journey to the Modern Cloud
Cloud Computing Deployment Models
Public Cloud
Advantages of using a public cloud
Private Cloud
Community Cloud
Hybrid Cloud
What Is Multi-Cloud?
Hybrid Cloud Versus Multi-Cloud
Public Cloud Computing Providers
Microsoft Azure
Amazon (AWS)
Google Cloud Platform
Oracle Cloud
Alibaba Cloud
Cloud Computing Service Models
Infrastructure as a Service
Platform as a Service
Software as a Service
Serverless Computing: Function as a Service and Backend as a Service
Containers as a Service
Data as a Service
The challenges of data as a service
Shared Responsibility in Cloud Computing and Azure
Shared Responsibility Model Offers Cloud Security Advantages
Capital Expeditures and Operational Expeditures
Benefits of Adopting and Transformation to Modern Cloud Technologies
Cloud Computing for Business Value and Customers
Cloud Computing for IT Companies
Summary
Check Your Knowledge
Recommended Resources
2. Microsoft Azure Fundamentals
Microsoft Azure as a Public Cloud Provider
Microsoft Azure Helps Organizations Minimize Up-front Costs
Benefits of a Cloud Provider
Azure Portal
Features of Azure Portal
Microsoft Azure Services
Overview of Azure Core Services
Compute Services in Azure
Networking Services in Azure
Core Azure Storage Services
Core Azure Database Services
Identity Management and Security Services
Developer Tools, Monitoring, and DevOps Services
Cloud Migration and Hybrid + Multi-Cloud Cloud Services
Core Architecture and Resource Management Concepts in Microsoft Azure
Azure Management Groups
Azure Subscriptions
Azure Resource Groups
Azure Resources
Azure Resource Manager
Azure Geographies, Regions, Region Pairs, and Azure Availability Zones
Azure Geographies
Azure Regions
Azure Region Pairs
Azure Availability Zones
Cost Management in Microsoft Azure
User Identities, Roles, and Active Directories in Azure
Azure Role-Based Access Control
Azure roles
Learn by Doing (Try It!)
Microsoft Azure Portal Hands-On
Summary
Check Your Knowledge
Recommended Resources
II. Compute, Networking, Storage, and Databases
3. Microsoft Azure Cloud Compute Services
Azure Compute for Developing Fully Managed Systems
Azure Virtual Machines and Virtual Machine Scale Sets
Azure Virtual Machines
Development and applications
Azure Virtual Machine Scale Sets
Scaling Options for Azure VM Scale Sets
Azure App Service
Azure Web App for Containers
Static Web Apps
Key Benefits and Uses of Azure Static Web Apps
Serverless Compute Services
Benefits of Serverless Architecture in the Cloud
Azure Functions
Components of Azure Functions
Azure Durable Functions
Key features and benefits of Azure Durable Functions
Components of Azure Durable Functions
Client functions
Orchestrator functions
Activity functions
Entity functions
Orchestration Triggers Kickstart Durable Functions
The orchestrator is deterministic
Durable Function Types: Stateful or Stateless?
Application patterns for serverless stateful workflows
Function chaining
Fan-out / fan-in
Async HTTP APIs
Monitor pattern
Human interaction
Aggregator pattern
Container Services in Azure
Azure Containers and Azure Kubernetes Service
Azure Container Registry
Azure Container Instance
Azure Container Apps
Azure Kubernetes Services
Making Sense of Quantum Computing in Azure
Azure Quantum
Azure Quantum Development Kit
Learn by Doing (Try It!)
Summary
Check Your Knowledge
Recommended Resources
4. Microsoft Azure Cloud Networking
Azure Networking
Azure Networking Services Categories
Azure Networking Services for Connectivity
Azure Virtual Network
Azure VNet Peering
Azure Virtual Wide Area Network
Azure ExpressRoute
Azure ExpressRoute Global Reach
Azure VPN gateway
Different types of VPN gateway connections
Azure NAT gateway for virtual networks
Azure Domain Name System
Azure Bastion
Services for Application Protection
Azure Firewall
Azure DDoS Protection
Azure Private Link
Web Application Firewall
Network security group (NSG)
Azure Load Balancer
Key uses of Azure Load Balancer
Azure Networking Services for Application Delivery
Azure Front Door
Azure Application Gateway
Azure Traffic Manager
Azure CDN
Azure Networking Services for Network Monitoring
Azure Network Watcher
Azure Monitor Network Insights
Azure Space: Networking Beyond the Clouds
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
5. Microsoft Azure Cloud Storage and Databases
Data Storage and Databases in the Cloud
Data Storage Management in the Cloud
Benefits of Digital Storage in the Cloud
Big Data, Structured Databases, and Non-Structured Databases
Azure Storage and Database Services in the Cloud
Azure Storage
Database Services in Azure
Services for Azure Storage
Azure Blob Storage
Azure Files
Azure Queue Storage
Azure Table Storage
Azure Managed Disks
Azure Storage Security Best Practice Tips
Azure Database Services
Azure SQL as a Fully Managed Database Service
Azure SQL deployment options
Azure Cosmos DB
Azure Cosmos DB consistency levels
Azure Cosmos DB APIs
Global distribution and replication using Azure Cosmos DB
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
III. Artificial Intelligence, Machine Learning, Big Data, IoT, and Security
6. Artificial Intelligence, Machine Learning, and Cognitive Services in Azure
Artificial Intelligence on Azure: An Introduction
Azure OpenAI Service and Evolution of Chat-GPT
AI Technology Innovations and Terms You Need to Know
Why Should You Learn AI?
Benefits of AI to Businesses
Machine Learning
MLOps and DevOps: What’s the Difference?
Deep Learning in ML
Ethical and Responsible AI on Azure
Azure AI and Cognitive Services
Azure Machine Learning
Machine Learning Studio
Automated Machine Learning (AutoML)
AI Builder for Power Platform
Azure Applied AI Services
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
7. Big Data, Reporting, and Analytics Services in Azure
Big Data, Reporting, and Analytics Services in Azure
What Is Big Data?
Big Data Solutions in Azure
Big Data Use Cases in Azure
Complex Big Data Pipeline Tools in Azure
Azure Data Factory
Azure Data Catalog
Building, Configuring, and Deploying Big Data on Azure
Evaluation of a big data goal and solution
Identifying big data architecture
Preparation of Production Environment
Data Analytics
Azure Big Data and Analytics Services
Azure Data Lake
Azure NoSQL for Big Data and Analytics
Azure Stream Analytics
Azure Synapse Analytics
Azure Databricks
Azure Data Lake Storage
Azure HDInsight for Hadoop, R Server, HBase, Spark, and Storm Clusters
Azure Data Factory
Azure Analysis Services
Power BI Embedded Analytics
Microsoft Purview for Data Governance
Final Note on Data Management and Analytics in Azure
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
8. Cloud IoT and Maps Services
Internet of Things
Making Sense of IoT Technology
Components of an IoT Solution
Different Types of IoT Applications
Challenges of IoT
The advantages of IoT
The disadvantages of IoT
IoT in Microsoft Azure
Azure IoT
Azure IoT Hub and its device provisioning service
Azure IoT Central
Azure IoT Plug and Play app
Azure IoT DevKit and Azure-accredited IoT devices
Digital Twins
Securing IoT on Azure using Defender for IoT
Azure Maps
Control Results of Azure Maps with Geographic Scope
Authentication and Security on Azure Maps
Maps Integrations with Azure Event Grid
Developing with Azure Maps
Develop using REST APIs for the Maps Search service
Developing using web and mobile software development kits
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
9. Azure Security, Identity Management, and DevSecOps
Cybersecurity and Why It Matters
Importance of Cybersecurity on Cloud Infrastructure
Zero Trust Methodology in the Cloud
Cybersecurity, DevSecOps, and Securing Azure Infrastructure
Responsibility for Security Strategies Is a Collaborative Effort
Cloud Engineering Practices: Shift-Left or Shift-Right in DevSecOps
Shift-left: Integrating security practices before production
Shift-right: Continuous monitoring and improvement in production
Security perspective: Shifting left versus shifting right
Azure Security for Applications, Databases, and Networks
Azure Identity and Access Management (IAM)
Authentication and authorization
Microsoft Entra ID security features
Microsoft Entra ID Protection
Microsoft Entra risk detection
Microsoft Entra Connect for hybrid SSO and authentication
Hybrid identities on Microsoft Entra ID
Password hash synchronization
Pass-through authentication
Active Directory Federation Services
Azure role-based access control (RBAC)
Multi-Factor Authentication
Conditional Access policies (CAP)
Managed Identities on Azure
Azure Key Vault
Azure Network Security
Microsoft Sentinel
Microsoft Defender for Cloud
Microsoft Defender for Endpoint
Microsoft Defender for DevOps
Microsoft Defender for Containers
Microsoft Defender for App Service
Security Best Practices for Azure
Application Data Input Validation
Implementing Security Scanning and Checks in Source Code and CI/CD Pipelines
Secure Communication and Integration Between Applications and APIs
Taking Error Handling Seriously: Not Just Debugging but Also Security
DevSecOps: Security in Development, DevOps, and Infrastructure
Adopting Security in DevOps Practices
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
IV. Integration, Infrastructure, and DevSecOps
10. Azure Cloud Integration Services and Tools
Cloud Integration: An Introduction
Types of Cloud Integration in Azure
Benefits of Cloud Integration
Reliability and Scalability of Applications
Improved Work Efficiency and Cost Savings
Business Agility and Better Business Processes
Cloud Integration on Azure
Introduction to Web APIs
Different Types of Web APIs
API Management Lifecycle
Azure API Management
Benefits of Azure API Management
Components of Azure API Management
Azure API gateway
Azure API management plane
Azure APIM developer portal
Azure Logic Apps
Benefits and Uses of Azure Logic Apps
Pricing Tiers of Azure Logic Apps
Azure Logic Apps Components
Azure Service Bus: Cloud Messaging Broker Service
Azure Service Bus Components
Namespaces
Queues
Topics and subscriptions
Choosing the Right Azure Cloud Messaging Implementation
Azure Web PubSub
The Architecture Pattern Used in Azure Web PubSub
Benefits of Azure Web PubSub
Fundamentals of Azure Web PubSub
Typical Azure Web PubSub Workflow
Azure Event Grid
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
11. Cloud Infrastructure, DevOps, and Monitoring in Azure
Introduction
Cloud-Native Infrastructure
Modern Application Development and DevOps
The Core of DevOps and Its Function in Application Development
Continuous Integration, Deployment, Testing, and Monitoring
Continuous integration
Continuous deployment
Continuous testing
Continuous monitoring
Azure DevOps
Azure DevOps Cloud-Based and On-Premises Solutions
Azure DevTest Labs for Training, Testing, and Demos
Cloud Development and DevOps with GitHub
GitHub for Education
Cloud Infrastructure Automation and Management
Infrastructure as Code
Infrastructure as Code Using Hashicorp Terraform in Azure
Infrastructure as Code Using Azure Resource Manager and Bicep
When to Consider Azure Terraform over Azure Bicep or ARM
Configuration as Code
Policy as Code
Monitoring and Infrastructure Management in Azure
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
V. Governance, Migration, Architecture, and Development Tools
12. Cloud Management and Governance in Azure
Cloud Infrastructure Management and Governance
Azure Resource Manager
Managing and Organizing Resources Using Azure Resource Groups
Azure Resource Locks for Cloud Assets Protection
Azure Blueprints (Preview)
Creation and Deployment of Azure Blueprints
Azure Blueprints for Zero Trust Security and Cloud Migration
Azure Monitor for Monitoring and Reliability
Azure Automation
Azure Policy for Compliance and Policy Management
FinOps and Cost Management in Azure
Azure Cost Management Tools
Best Practices for Azure Cost Management
Cost Management Optimization for Azure
The Evolution of Cloud Management and Governance
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
13. Cloud Migration, Hybrid, and Multi-Cloud Solutions in Azure
Cloud Adoption and Modernization
Modernization of Legacy Applications and Traditional Infrastructure
Digital Estate and the Prerequisites of Cloud Migration
Identifying your organization’s digital estate
Cloud Rationalization
The five Rs of rationalization
Cloud Adoption and Migration Anti-Patterns
The Five Pillars of a Well-Architected Framework for Azure
Pillar #1: Operational Excellence
Automation of processes
Cloud resource optimization
Pillar #2: Security
Pillar #3: Reliability
Change management
Pillar #4: Performance Efficiency
Pillar #5: Cost Optimization
Benefits of cost optimization of cloud resources
Cloud Adoption Framework for Azure
Benefits of the Cloud Adoption Framework for Azure
Recommended Approach for Cloud Adoption in Azure
The 4 S’s: Start Small Smart Steps
Adopt a phased, interactive approach
Using a hybrid approach
Leverage the benefits of serverless technologies and Cloud automation
Adopt a flexible DevOps approach
Azure Well-Architected Review
Benefits of Azure Well-Architected Review
Microsoft Assessments for Evaluation and Review
Useful Microsoft Assessments for Cloud Migration
Hybrid Cloud and Multi-Cloud Solutions in Azure
Azure Arc
Azure Arc-Enabled Kubernetes
Azure Stack
Azure VMware Solution
Azure ExpressRoute
Azure Site Recovery
Azure VPN Gateway
Multi-Cloud and Hybrid Solutions in Azure
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
14. Cloud Development Tools for Azure
Importance of Development Tools for Developer Productivity
Azure Development Tools for Engineers
Visual Studio and Visual Studio Code
Alternative IDEs for Java, Cross-Platform, or Mobile Development
JetBrains Rider
Eclipse
IntelliJ IDEA
Android Studio
Xcode
Azure Software Development Kits
Azure Command-Line Tools
Azure Cloud Shell
Azure Command-Line Interface (CLI)
Azure PowerShell
Predictive IntelliSense in Azure Cloud Shell
Azure Developer CLI (azd)
Microsoft Dev Box
Azure Deployment Environments in Microsoft Dev Box
Azure DevOps and GitHub for Developers
Azure DevOps
GitHub
GitHub Codespaces
GitHub Command-Line Interface
GitHub for Enterprise
Learn By Doing (Try It!)
Summary
Check Your Knowledge
Recommended Learning Resources
Afterword by Maxim Salnikov
Getting Ready for the Transformation
Final Words from the Author
A. Check Your Knowledge Answers
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Chapter 14
Index