Please enable JavaScript.

Coggle requires JavaScript to display documents.

AZ900 - Coggle Diagram

- - - - Statefull
      - Hub and Spoke / Route Tables
      - PaaS
      - Rules (1) NAT 2) Network 3) Application)
    - - Basic - Free but no logging or alerting
      - Standard ($3k/mo) - Basic DDoS + App Gateway +Logging + SIEM + DDOS Protection Plan (VNets from diff subs)
    - - Associated with 1) VM Interfaces 2) Subnets
      - Priority 100 - 4096 (Default is 65000)
      - Service-specific and region-specific service tags
  - - - Free
        
        SSO, B2B, B2C, Admin MFA
      - Other tiers: O365Apps, P1, P2
  - - - Policy/Compliance
      - Resource Security,
      - Threat Protection
    - - Basic (Secrets, Keys, Certs)
      - Premium - HSM Support
    - - Categorise and Protect Data/Emails
    - - Part of ATP EcoSystem (Azure ATP, Defender ATP, O365 ATP
      - Protect On-Prem Identities/Servers
  - - - Policy Definition -> Initiatives
    - - Security Principle, Role, Scope, Role Assignment
    - - Owner/Admin
      - Resource Group Level, Resource Level, Subscitpion Level
      - Locks are Inherited
    - - Best Practices - Cost, Perf, HA, Security OpExcellence
  - - - No metrics until configured
      - Dashboards
      - Alerts
    - - Subscription Specific Health of Az Svcs
  - - - Compliance manager
      - Audit Reports
      - Data Protection Information
- - - - Basic
      - Dev
      - Std
      - Pro Direct
      - Premier
- - - - Fibre Connected Backbone
      - 2 ms perf between region guarantee
      - DR
      - Min of 3 Avaialbility Zones in enabled Regions - FT and HA
    - - Located within same region
    - - Isolated Power Generators
    - - UK. US, Canada etc
      - Min of two Regions
  - - - VNET
      - Load Balancer
      - Az App Gateway and WAF
      - VPN Gateway
      - Content Delivery Network
      - Az Traffic Manager
    - - Blob
      - Data Box
      - Az Queue Storage
      - Az Disks (VMs) (Std/Prm) (Unmanaged/Managed)
      - Azure Files (And Azure File Sync)
    - - VM
      - Containers
      - Web App
      - Functions
    - - Az SQL Database (Scales up, but not out easily to multiple regions)
      - Cosmos DB (NoSQL, Unstructured. Global Distribution to regions.
  - - - IoT Hub (Device management (twin devices))
      - IoT Central (Monitor)
      - Pricing Units by message (Basic/Standard)
    - - Azure SQL Data Warehouse (Relational) -> PowerBI
      - Azure Data Lake - NoSQL (Data Containers containing related data)
      - Analytics: Azure HDInsight - computer clusters for processing big data
    - - Machine Learning
      - Azure Cognitive Services - Vision, Speech, Natural Lang, Search)
      - Azure dataBricks - Data Modelling for ML with Data Lakes/Warehouse
      - Az ML Service - build ML Models with Python (can be done on-prem unlike DataBricks) -> Containers
      - ML Studio - SaaS for ML - creating data models via GUI
    - - Azure Functions - Compute Code Execution - Trigger based
      - Azure Logic Apps -> Serverless Workflows - Connectors, Triggers, Actions
      - Azure Event Grid - Event Routing - Azure Services Interactions - Trigger event and Listen between services.
- - - - Network
      - Application
      - System (VM)
      - Power
      - Reliant Systems (Ext DB)
    - - Vertical (Up)
      - Horizontal (Out)
      - Auto-Scale (Elasticity)
      - Flexibility (Agility)
    - - FT
        
        E.g. deal with VM faults
      - DR
        
        Backups
        
        Relocate to unaffected regions
        
        BCDR Plans
  - - - IaaS
      - PaaS
      - SaaS
    - - Private (Single Tenant, not necessarily on-prem)
      - Public (Multi Tenant)
      - Hybrid