Please enable JavaScript.

Coggle requires JavaScript to display documents.

Azure Fundamentals - Coggle Diagram

- - - - Common Event Format (CEF)
      - Syslog
      - REST API
    - - alerts
      - incidents (group of alerts)
      - Azure Monitor Workbooks
        
        Reaction rules
        
        Alert => Ticket
        
        human decision (block, ignore)
    - - AWS CloudTrail
      - Citrix Analytics
      - Sophos XG Firewall
      - VMware Carbon Black Cloud
      - Okta SSO
  - - - all Azure Services
      - on-premises services
      - uses machine learning to detect threads
        
        block malware
        
        optional: adaptive application control :pencil2:
      - Analyze incoming attacks
      - just-in-time access control for network ports
      - security assesment
      - File integrity monitoring
  - - - central
      - secure
      - monitor access
      - easier to manage
      - integration with other azure services
  - - - pyhsical security layer
      - identity and access layer
      - perimeter layer
      - network layer
      - compute layer
      - application layer
      - data layer
    - - Azure Firewall
      - Web Application Firewall (WAF)
        
        included in...
        
        Azure Application Gateway
        
        Azure Front Dor
        
        Azure Content Delivery Network (CDN)
    - - Fundamental level is automatically activated
      - Standard service level
- - - - Azure Marketplace
        
        huge range
        
        3rd Party Products
      - managed plattform
        
        windows
        
        linux
    - - virtual machines (IaaS)
      - container
      - serverless computing including microservices
        
        2 implementations
        
        Azure Functions
        
        stateless
        
        Azure Logic Apps
        
        stateful
        
        execute workflows
        
        runs only in the cloud
        
        often Response to an event via REST
        
        high availablity
        
        incoming events
        
        Timers
        
        HTTP (API, Webhook)
        
        Queues
      - App Service (PaaS)
        
        Web Apps
        
        ASP.NET
        
        Java
        
        Ruby
        
        Node.js
        
        Php
        
        Python
        
        API apps
        
        REST-API
        
        Swagger Support
        
        publish to Azure Marketplace
        
        WebJobs
        
        run a program or script
        
        can be scheduled
        
        can run by trigger
        
        often for backround task for applications
        
        Mobile Apps
        
        backend for iOS or Android Apps
        
        store mobile app data in DB
        
        Authentication
        
        Push notifications
        
        start back-end logic in C# or Node.js
      - Azure Batch
        
        High Performance Computing (HPC)
        
        Batch processing
    - - disk storage
        
        normal SSD/HDD for less critical data
        
        premium SSD für mission-critical production
        
        ultra disks für data-intensive workloads (e.g. SAP Hana)
      - databases
      - file storage
        
        fully managed
        
        SMB (encrypted transit)
        
        NFS
      - Queue Storage
      - Blob storage
        
        unstructured data
        
        binary data
        
        folders are containers
      - Azure Table Storag
      - 3 Storage Tiers
        
        hot
        
        frequently accessed
        
        e.g. images of a web site
        
        cold
        
        infreqently accessed
        
        stored for at least 30 days
        
        e.g. customer invoices
        
        slightly lower availablity (SLA)
        
        archive
        
        rare accessed
        
        stored for at least 180 days
        
        e.g. long term backups
        
        is not available at account level
        
        stores data offline
        
        lowest storage cost, but highest cost for rehydrate and access data
      - create a storage account first ! :warning:
    - - private network connection
        
        Azure VPN Gateway
        
        Point-to-site virtual private networks (individual devices)
        
        Site-to-site virtual private networks (on-premises DC)
        
        Network-to-Network (connects VNETS)
        
        Only 1 gateway to 1 network
        
        VPN types
        
        policy-based
        
        route-based
        
        different traffic encryption
        
        Azure ExpressRoute
        
        didicated private connectivity
        
        does not travel over the internet :
        
        connectivity
        
        any-to-any (IP VPN)
        
        point-to-point ethernet
        
        virtual cross-connection
        
        built-in redundancy
      - configure controll traffic
        
        default: route between subnets and connected networks
        
        link by network peering
        
        Route tables
        
        traffic rules
        
        custom route tables
        
        automatically created for each subnet
        
        Border Gateway Protocol (BGP)
        
        propagate on-premises BGP routes to Azure VNets
        
        Filter
        
        network resource group
        
        inbount security rules
        
        outbound security rules
        
        network virtual appliances
        
        special VM
        
        running a firewal
        
        WAN optimization
        
        like hardened netwok appliance
        
        UDR (User-defined routing)
        
        control route tables between subnets
    - - maschine learing services
        
        search and analyse existing data
        
        can make apps and devices smarter
      - pre-build cognitive services
        
        Language
        
        Speech
        
        Vision
        
        Decision
      - Azure Bot Service
        
        for simple, repetitive tasks
        
        virtual agents
        
        can rely on other AI services
        
        marketplace contains bot solutions
    - - managed by iot hubs
        
        allow monitor and control
        
        by dashboards
        
        by apps
        
        integrates sensors and devices
      - Azure Sphere
        
        Azure Sphere Secuirty Service (AS3)
        
        solution from hw to cloud
        
        Azure Sphere micro-controller unit (MCU)
        
        MT3620
        
        ensure HW is not compromised
        
        secure channel communication
      - Azure IoT Central
        
        on top of IoT Hub
        
        Dashboard
        
        aggregates repots
      - Azure IoT Hub
        
        managed service
        
        bi-directional communication
    - - logic apps
      - service bus
      - connect applications & services
      - allows workflows to orchestrate business processes
        
        On-Premises
        
        in cloud
    - - integrated in every aspect of Azure
        
        harded infrastructure
        
        global security monitoring
      - Azure Identity Management (IAM)
        
        who has access to service and data
  - - - Azure DevOps
      - Azure DevTest Labs
    - - Azure Synapse Analytics
      - Azure HDInsight
      - Azure Databricks
    - - mobile back-end services
        
        Android
        
        iOS
        
        Windows Apps
      - Features
        
        Connectivity to on-premise data
        
        Connection
        
        SQL Server
        
        Sharepoint
        
        Oracle
        
        SAP
        
        Offline data-sync
        
        Broadcasting push notifications
        
        Autoscaling to match business needs
    - - Azure App Service
      - Azure Notification Hubs
      - Azure API Management
      - Azure Cognitive Search
      - Azure SignalR Service
        
        Real Time Functionality
  - - - ensure redundant data
      - protect date in the event of erros
      - consists of at least 1 data center
        
        indepenend functions
        
        power supply
        
        cooling
        
        network operation
      - AZ only in supported regions
      - intended for
        
        VMs
        
        Managed disks
        
        load balancers
        
        SQL databases
      - 2 service categories
        
        Zonal services
        
        permanently assigned resource for a specific zone
        
        like VM, disks or ip
        
        Zone redundant services
        
        automatically replicates accross zones
        
        like storage or SQL dbss
    - - natural disasters
      - civil unrest
      - power outages
      - physical network failures
      - combined with another region that is at least 300 Miles (480 km) away
        
        data wil remain within the same geography
        
        for tax
        
        for legal resons
  - - - Azure Migrate
        
        Assessment
        
        Estimate monthly costs
        
        Sizing recommendations
        
        Readiness to move to Azure
        
        Microsoft Monitoring Agent
        
        lightweight collector appliance
        
        up to 100 VMs concurrently
      - Azure Database Migration Service
      - Service Map
        
        maps communication between application components
        
        identify dependencies
      - Azure TCO Calculator
      - Data Migration Tool
        
        differnt DB-Types
        
        Azure Cosmo DB
        
        atom-record-sequence (ARS) format
        
        MySQL
        
        PostgresSQL
        
        Online Migration
        
        Offline Migration
        
        Data Migration Assistant
    - - Asssess
      - Migrate
      - Optimize
      - Monitor
    - - Rehost :recycle:
        
        least impact
        
        minmal changes
      - Refactor
        
        using SaaS
        
        reduce OpEx
        
        performace improvement
      - Rebuild
        
        sometimes cheaper to rebuild instead of rearchitect
        
        starting from the scratch
      - Rearchitect
        
        cloud native
        
        take advantate of new approches
        
        container
        
        microservices
      - Replace
        
        reviewing estate
        
        3rd-Party maybe fits perfekt
        
        maybe SaaS
    - - Azure Advisor
        
        evaluates Azure Resources
        
        makes recommendations
      - Azure Cost Management
    - - Azure Monitor
        
        performance
        
        health
        
        Azure Log Analytics Agent installed
        
        alerts
      - Azure Sentinel
        
        security analkytics
        
        provides SIEM
        
        security information
        
        event-management
      - Azure Service Health
        
        personalized view
        
        health check for azure services
- - - - Benefit / Advantage
        
        common
        
        Run infrastructure more effeciently
        
        Lower operating costs
        
        usage-based model
        
        no upfront costs
        
        no Capital expenditures (CapEx)
        
        no amortization
        
        no need to purchace and mantain infrastructure
        
        pay additional resources when needed
        
        pay fewer, if fewer needed
        
        cloud services cateogrized as operation costs (OpEx)
        
        Scalability
        
        vertically (scale up, down)
        
        addin capacity (e.g. RAM, CPU, etc.)
        
        horizontally (scale out, in)
        
        adding instances (e.g. new VM)
        
        High Availability
        
        depends on selected SLA
        
        Elasticy
        
        auto-scaling
        
        Flexibility
        
        deploy quickliy
        
        configure when app needs change
        
        Geographical distribution
        
        reginal data centers
        
        organize apps and services in regions
        
        Disaster recovery
        
        cloud-based backup
        
        data replication
        
        geographic distribution
    - - PaaS
        
        Managed VMs
        
        Managed Network
        
        Example
        
        Azure App Services
        
        serverless computing
        
        additional benefits
        
        productivity
        
        user can focus on application development
        
        easily available worldwide
        
        good for distributed teams
        
        disadvantage
        
        platform limitations
      - SaaS
        
        Example
        
        O365 :warning:
        
        managed application environment
        
        additional benefit
        
        Flexibility
        
        Users can access data from anywhere
        
        disadvantage
        
        software restrictions
        
        customer just configure features
      - IaaS
        
        HW up to date
        
        but no OS Updates
        
        rapid deployment of new devices
        
        additional benefits
        
        most flexible category of cloud service
        
        Administration
        
        shared responibility
        
        User: Service Mainanance
        
        Provider: Infrastrucure mainanance
    - - Public cloud
      - Private cloud
      - Hybrid cloud
  - - - seperates tight coupling of computer hardware and OS
        
        CPU
        
        Disk
        
        Ram
        
        OS
      - can run multiple virtual machines
      - optimize the capacity of abstraced hardware
      - supports windows or linux OS
  - - - each server contains a hypervisor to run multiple machines
      - network switches provide connectivity
      - each server runs a fabric controller that is connected to an orchestrator
        
        Orchestrator manage Azure Requests
        
        API
        
        Azure Portal
        
        Script
- - - - Resource Group
        
        Resource
        
        instances of service
        
        manageable item available through Azure :pencil2:
        
        e.g. memory
        
        e.g. SQD Database
        
        e.g. virtual machines
        
        belong to a single resource group
        
        combinded resources
        
        logical container
        
        deletion will delete all resources also :!:
      - additional subscriptions possible
        
        Organzations can limit or quotas the number of resources and manage costs
        
        by users
        
        by teams
        
        by project
        
        Dev
        
        Test
        
        Production
      - provides authenticated and authorized access
        
        logical unit of Azure services associated with an Azure account
      - 2 types of limits
        
        Billing Limits
        
        Access Control Limits
    - - Azure AD
        
        nur User, Gruppne, Device
        
        less functionality than normal AD
        
        for O365 and Microsoft 365
        
        general for customers in the cloud
        
        MFA
        
        Signle Sign On
        
        My Apps Portal
        
        AD Connect :silhouettes:
        
        connect classic Active Directory
    - - user location
      - user device
      - some different signals
  - - - 10.000 mgt. groups per directory
      - supports up to 6 levels
        
        not include root level
        
        not include subscription level
      - can have many children
      - contained in a single hierarchy in each directory
- - - - create
      - update
      - delete
      - administrative features
        
        access control
        
        locking
    - - Azure Portal
      - SDK
        
        Azure CLI
        
        Azure PowerShell
      - REST
    - - called Resource Manager Template
      - is a JSON file