Microsoft Azure Infrastructure Services for Architects

An expert guide for IT administrators needing to create and manage a public cloud and virtual network using Microsoft Azure

With Microsoft Azure challenging Amazon Web Services (AWS) for market share, there has been no better time for IT professionals to broaden and expand their knowledge of Microsoft's flagship virtualization and cloud computing service. Microsoft Azure Infrastructure Services for Architects: Designing Cloud Solutions helps readers develop the skills required to understand the capabilities of Microsoft Azure for Infrastructure Services and implement a public cloud to achieve full virtualization of data, both on and off premise. Microsoft Azure provides granular control in choosing core infrastructure components, enabling IT administrators to deploy new Windows Server and Linux virtual machines, adjust usage as requirements change, and scale to meet the infrastructure needs of their entire organization.

This accurate, authoritative book covers topics including IaaS cost and options, customizing VM storage, enabling external connectivity to Azure virtual machines, extending Azure Active Directory, replicating and backing up to Azure, disaster recovery, and much more. New users and experienced professionals alike will:

• Get expert guidance on understanding, evaluating, deploying, and maintaining Microsoft Azure environments from Microsoft MVP and technical specialist John Savill

• Develop the skills to set up cloud-based virtual machines, deploy web servers, configure hosted data stores, and use other key Azure technologies

• Understand how to design and implement serverless and hybrid solutions

• Learn to use enterprise security guidelines for Azure deployment

Offering the most up to date information and practical advice, Microsoft Azure Infrastructure Services for Architects: Designing Cloud Solutions is an essential resource for IT administrators, consultants and engineers responsible for learning, designing, implementing, managing, and maintaining Microsoft virtualization and cloud technologies.

Auteur

John Savill is a technical specialist who focuses on Microsoft core infrastructure technologies including Microsoft Azure, Windows, and Hyper-V. An 11-time Microsoft MVP, an Azure Solutions Architect Expert and he is also ITIL certified and a CISSP. John has been working with Microsoft technologies for more than 25 years and was the creator of the highly popular NT FAQ website. The author of Mastering Windows Server 2016 Hyper-V and Mastering Microsoft Azure Infrastructure Services, he has a large library of courses on Pluralsight that are linked directly from Azure.com and regularly writes articles and whitepapers along with creating technology videos for his YouTube channel, http://onboardtoazure.com.

Texte du rabat
Create and manage a public cloud and virtual network with Microsoft Azure Microsoft's virtualization and cloud platform offers both economy and flexibility in implementing the public cloud, cloud identity and the full cloud service your enterprise requires. This highly authoritative guide provides the knowledge necessary to take full advantage of Azure. This book focuses on the infrastructure-related services of Azure, including VMs, storage, networking, identity and some complementary technologies. Using clear explanations and videos that provide additional learning reinforcement, John Savill helps you learn key best practices and techniques to enable you to create a true, enterprise cloud architecture. You will explore not only how to architect solutions, but also how automate processes using technologies such as templates and PowerShell/CLI, and integrate Azure with your on-premises infrastructure to create a hybrid solution. Coverage includes:

• Architecting cloud authentication including SSO
• Integrating corporate and social identities
• Planning and implementing governance in the cloud
• Architecting a hybrid network solution
• Designing highly available and resilient services in Azure
• Understanding storage solutions available in Azure
• Replicating and backing up to Azure
• Using Azure for disaster recovery
• Provisioning resources using ARM templates
• Monitoring Azure and beyond resources using Azure services including Azure Monitor Get expert guidance on evaluating, deploying, and maintaining Microsoft Azure environments Learn to set up cloud-based virtual machines, deploy web servers, and configure hosted data stores Apply enterprise security guidelines for Azure deployment

Contenu
Introduction xix

Chapter 1 The Cloud and Microsoft Azure Fundamentals 1

The Evolution of the Datacenter 1

Introducing the Cloud 2

The Private Cloud and Virtualization 4

Types of Service in the Cloud 10

Microsoft Azure 101 13

Microsoft Datacenters and Regions 14

Microsoft Network 24

Azure Resource Providers 26

Getting Access to Microsoft Azure 30

Free Azure Trials and Pay-as-You-Go 31

Azure Benefits from Visual Studio Subscriptions 31

Enterprise Enrollments for Azure 33

Reserved Instances and Azure Hybrid Benefit 37

Reserved Instances 37

Azure Hybrid Benefit 39

Increasing Azure Limits 40

The Azure Portal 41

Portal Basics 42

Azure Portal Dashboards 45

Chapter 2 Governance 47

What is Governance? 47

Understanding Governance Requirements in Your Organization 49

Azure Subscriptions and Management Groups 52

Subscriptions 52

Management Groups 55

Resource Groups 62

Role-Based Access Control 63

Naming Conventions 69

Using Tags 70

Azure Policy 75

Azure Templates 80

Azure Blueprints 83

Azure Resource Graph 86

Cost Management 88

Visibility 89

Accountability 91

Optimization 93

Chapter 3 Identity 95

The Importance of Identity 95

A Brief Refresher on Active Directory 97

Using Cloud Services, Federation and Cloud Authentication 98

Federation 98

Cloud Authentication and Authorization 101

Azure Active Directory Fundamentals 103

Azure AD SKUs 106

Populating Azure AD 108

Azure AD B2B 122

Azure AD Authentication Options 128

Azure AD Groups 137

Azure AD Entitlements and Application Publishing 138

Chapter 4 Identity Security and Extended Identity Services 145

Azure AD Security 145

Multi-Factor Authentication 145

Password Policies 149

Azure AD Conditional Access 150

Azure AD Identity Protection 153

Azure AD Log Inspection 154

Azure AD Privileged Identity Management 156

Azure Advanced Threat Protection 158

Azure AD Application Proxy 158

Azure AD B2C 160

Active Directory in the Cloud 162

Active Directory Site Configuration 163

Placing a Domain Controller in Azure 164

Azure AD Domain Services 167

Chapter 5 Networking 171

Connectivity 171

Virtual Networks 171

Adding a VM to a Virtual Network 174

NIC IP Configurations 174

Reserved IPs for VM 176

Accelerated Networking 177

Azure DNS Services and Configuration Options 177

Connecting Virtual Networks 178

Connectivity to Azure 181

Azure Virtual WANs and ExpressRoute Global Reach 193

PaaS VNet Integration 194

Protection 196

Network Security Groups and Application Security Groups 196

Firewall Virtual Appliances 199

Distributed Denial-of-Service Protection 202

Delivery 202

Intra-Region Load Balancing 203

Inter-Region Load Balancing 206

Monitoring 210

Chapter 6 Storage 213

Azure Storage Services 213

Azure Storage Architecture 213

Using Storage Accounts and Types of Replication 215

Storage Account Keys 219

Azure Storage Services 221

Storage with Azure VMs 235

VM Storage Basics 235

Temporary Storage 236

Managed Disks 237

Bulk Data Options 242

Azure Import/Export and Azure Data Box Disk 242

Azure Data Box 242 A...