Details

<p>Introduction xix</p> <p><b>Chapter 1 The Cloud and Microsoft Azure Fundamentals 1</b></p> <p>The Evolution of the Datacenter 1</p> <p>Introducing the Cloud 2</p> <p>The Private Cloud and Virtualization 4</p> <p>Types of Service in the Cloud 10</p> <p>Microsoft Azure 101 13</p> <p>Microsoft Datacenters and Regions 14</p> <p>Microsoft Network 24</p> <p>Azure Resource Providers 26</p> <p>Getting Access to Microsoft Azure 30</p> <p>Free Azure Trials and Pay-as-You-Go 31</p> <p>Azure Benefits from Visual Studio Subscriptions 31</p> <p>Enterprise Enrollments for Azure 33</p> <p>Reserved Instances and Azure Hybrid Benefit 37</p> <p>Reserved Instances 37</p> <p>Azure Hybrid Benefit 39</p> <p>Increasing Azure Limits 40</p> <p>The Azure Portal 41</p> <p>Portal Basics 42</p> <p>Azure Portal Dashboards 45</p> <p><b>Chapter 2 Governance 47</b></p> <p>What is Governance? 47</p> <p>Understanding Governance Requirements in Your Organization 49</p> <p>Azure Subscriptions and Management Groups 52</p> <p>Subscriptions 52</p> <p>Management Groups 55</p> <p>Resource Groups 62</p> <p>Role-Based Access Control 63</p> <p>Naming Conventions 69</p> <p>Using Tags 70</p> <p>Azure Policy 75</p> <p>Azure Templates 80</p> <p>Azure Blueprints 83</p> <p>Azure Resource Graph 86</p> <p>Cost Management 88</p> <p>Visibility 89</p> <p>Accountability 91</p> <p>Optimization 93</p> <p><b>Chapter 3 Identity 95</b></p> <p>The Importance of Identity 95</p> <p>A Brief Refresher on Active Directory 97</p> <p>Using Cloud Services, Federation and Cloud Authentication 98</p> <p>Federation 98</p> <p>Cloud Authentication and Authorization 101</p> <p>Azure Active Directory Fundamentals 103</p> <p>Azure AD SKUs 106</p> <p>Populating Azure AD 108</p> <p>Azure AD B2B 122</p> <p>Azure AD Authentication Options 128</p> <p>Azure AD Groups 137</p> <p>Azure AD Entitlements and Application Publishing 138</p> <p><b>Chapter 4 Identity Security and Extended Identity Services 145</b></p> <p>Azure AD Security 145</p> <p>Multi-Factor Authentication 145</p> <p>Password Policies 149</p> <p>Azure AD Conditional Access 150</p> <p>Azure AD Identity Protection 153</p> <p>Azure AD Log Inspection 154</p> <p>Azure AD Privileged Identity Management 156</p> <p>Azure Advanced Threat Protection 158</p> <p>Azure AD Application Proxy 158</p> <p>Azure AD B2C 160</p> <p>Active Directory in the Cloud 162</p> <p>Active Directory Site Configuration 163</p> <p>Placing a Domain Controller in Azure 164</p> <p>Azure AD Domain Services 167</p> <p><b>Chapter 5 Networking 171</b></p> <p>Connectivity 171</p> <p>Virtual Networks 171</p> <p>Adding a VM to a Virtual Network 174</p> <p>NIC IP Configurations 174</p> <p>Reserved IPs for VM 176</p> <p>Accelerated Networking 177</p> <p>Azure DNS Services and Configuration Options 177</p> <p>Connecting Virtual Networks 178</p> <p>Connectivity to Azure 181</p> <p>Azure Virtual WANs and ExpressRoute Global Reach 193</p> <p>PaaS VNet Integration 194</p> <p>Protection 196</p> <p>Network Security Groups and Application Security Groups 196</p> <p>Firewall Virtual Appliances 199</p> <p>Distributed Denial-of-Service Protection 202</p> <p>Delivery 202</p> <p>Intra-Region Load Balancing 203</p> <p>Inter-Region Load Balancing 206</p> <p>Monitoring 210</p> <p><b>Chapter 6 Storage 213</b></p> <p>Azure Storage Services 213</p> <p>Azure Storage Architecture 213</p> <p>Using Storage Accounts and Types of Replication 215</p> <p>Storage Account Keys 219</p> <p>Azure Storage Services 221</p> <p>Storage with Azure VMs 235</p> <p>VM Storage Basics 235</p> <p>Temporary Storage 236</p> <p>Managed Disks 237</p> <p>Bulk Data Options 242</p> <p>Azure Import/Export and Azure Data Box Disk 242</p> <p>Azure Data Box 242</p> <p>Azure Data Box Gateway and Data Box Edge 242</p> <p>Azure Database Offerings 243</p> <p>Azure SQL Database 243</p> <p>Azure Cosmos DB 246</p> <p><b>Chapter 7 Azure Compute 249</b></p> <p>Virtual Machines 249</p> <p>Fundamentals of IaaS 249</p> <p>Types of Virtual Machines 252</p> <p>Azure VM Agent and Extensions 258</p> <p>Boot Diagnostics 260</p> <p>Ephemeral OS Disks 261</p> <p>Proximity Placement Groups 262</p> <p>Virtual Machine Scale Sets 263</p> <p>Low-Priority VMs 264</p> <p>Azure Dedicated Host 264</p> <p>Windows Virtual Desktop 265</p> <p>VMware in Azure? 265</p> <p>Platform as a Service Offerings 266</p> <p>Containers 266</p> <p>Azure Application Services 275</p> <p>Azure Serverless Compute Services 278</p> <p><b>Chapter 8 Azure Stack 281</b></p> <p>Azure Stack Foundation 281</p> <p>Azure Stack 101 281</p> <p>Services Available on Azure Stack 284</p> <p>How to Buy Azure Stack 285</p> <p>When to Use Azure Stack 287</p> <p>Managing Azure Stack 288</p> <p>How to Interact with Azure Stack 288</p> <p>Marketplace Syndication 290</p> <p>Plans, Offers, and Subscriptions 292</p> <p>Updating Azure Stack 294</p> <p>Privileged Endpoint and Support Session Tokens 295</p> <p>Understanding Azure Stack HCI 296</p> <p><b>Chapter 9 Backup, High Availability, Disaster Recovery, and Migration 297</b></p> <p>Availability 101 297</p> <p>Distinguishing High Availability vs. Disaster Recovery vs. Backup 297</p> <p>Understanding Application Structure and Requirements 299</p> <p>Architecting for Multi-Region Application Deployments 301</p> <p>Backups in Azure 305</p> <p>Thinking About Backups 305</p> <p>Using Azure Backup 307</p> <p>High Availability in Azure 311</p> <p>Disaster Recovery in Azure 312</p> <p>On-Premises Disaster Recovery 313</p> <p>On Premises to Azure Disaster Recovery 314</p> <p>Azure to Azure 317</p> <p>Migrating Workloads to Azure 318</p> <p>Migration Benefits 319</p> <p>Migration Approaches 320</p> <p>Migration Phases 320</p> <p><b>Chapter 10 Monitoring and Security 325</b></p> <p>Azure Monitoring 325</p> <p>Why Monitor? 325</p> <p>Types of Telemetry in Azure 326</p> <p>Azure Monitor Fundamentals 329</p> <p>Azure Monitor Logs Fundamentals 334</p> <p>Alerting 341</p> <p>Security in Azure 350</p> <p>Advanced Threat Protection (ATP) 350</p> <p>Azure Security Center (ASC) 353</p> <p>Azure Sentinel 355</p> <p>Keeping Secrets with Azure Key Vault and Managed Identities 357</p> <p><b>Chapter 11 Managing Azure 359</b></p> <p>Command Line, Scripting, and Automation with Azure 359</p> <p>Using PowerShell with Azure 360</p> <p>Using the CLI with Azure 370</p> <p>Leveraging Azure Cloud Shell 371</p> <p>Automating with Azure Automation and Azure Functions 376</p> <p>Deploying Resources with ARM JSON Templates 383</p> <p>Everything is JSON 383</p> <p>Anatomy of an ARM JSON Template 386</p> <p>Template Tips 389</p> <p>Additional Useful Technologies for Azure Management 393</p> <p>Azure Bastion Host 393</p> <p>Windows Admin Center 395</p> <p><b>Chapter 12 What to Do Next 399</b></p> <p>Understanding and Addressing Azure Barriers 399</p> <p>Building Trust 400</p> <p>Understanding Risks for Azure 400</p> <p>Why You Should Use Azure and Getting Started 408</p> <p>Understanding Azure’s Place in the Market 408</p> <p>First Steps with Azure IaaS 411</p> <p>Index 415</p>

<p><b>John Savill</b> is a technical specialist who focuses on Microsoft core infrastructure technologies including Microsoft Azure, Windows, and Hyper-V. An 11-time Microsoft MVP, an Azure Solutions Architect Expert and he is also ITIL certified and a CISSP. John has been working with Microsoft technologies for more than 25 years and was the creator of the highly popular NT FAQ website. The author of <i>Mastering Windows Server 2016 Hyper-V</i> and<i> Mastering Microsoft Azure Infrastructure Services,</i> he has a large library of courses on Pluralsight that are linked directly from Azure.com and regularly writes articles and whitepapers along with creating technology videos for his YouTube channel, http://onboardtoazure.com.

<p><b>Create and manage a public cloud and virtual network with Microsoft Azure</b> <p>Microsoft's virtualization and cloud platform offers both economy and flexibility in implementing the public cloud, cloud identity and the full cloud service your enterprise requires. This highly authoritative guide provides the knowledge necessary to take full advantage of Azure. <p>This book focuses on the infrastructure-related services of Azure, including VMs, storage, networking, identity and some complementary technologies. Using clear explanations and videos that provide additional learning reinforcement, John Savill helps you learn key best practices and techniques to enable you to create a true, enterprise cloud architecture. You will explore not only how to architect solutions, but also how automate processes using technologies such as templates and PowerShell/CLI, and integrate Azure with your on-premises infrastructure to create a hybrid solution. <p><b>Coverage includes:</b> <ul> <li>Architecting cloud authentication including SSO</li> <li>Integrating corporate and social identities</li> <li>Planning and implementing governance in the cloud</li> <li>Architecting a hybrid network solution</li> <li>Designing highly available and resilient services in Azure</li> <li>Understanding storage solutions available in Azure</li> <li>Replicating and backing up to Azure</li> <li>Using Azure for disaster recovery</li> <li>Provisioning resources using ARM templates</li> <li>Monitoring Azure and beyond resources using Azure services including Azure Monitor</li> </ul> <p> <li><b>Get expert guidance on evaluating, deploying, and maintaining Microsoft Azure environments</b></li> <li><b>Learn to set up cloud-based virtual machines, deploy web servers, and configure hosted data stores</b></li> <li><b>Apply enterprise security guidelines for Azure deployment</b></li>

US