Skip to content

Azure management and governance | AZ-900 | Video 5

Learn Azure management and governance essentials including cost management, compliance, resource deployment, and monitoring tools in this AZ-900 session.

Key Takeaways

  • Azure cost management depends on multiple factors including resource type, usage, geography, and subscription.
  • Azure governance is enforced through policies, blueprints, and resource locks to ensure compliance and security.
  • The Azure Pricing Calculator is a vital tool for estimating and planning cloud expenses.
  • Azure provides comprehensive deployment and monitoring tools to optimize resource usage and maintain system health.
  • Effective management and governance skills are essential for cloud professionals using Azure.

What the video covers

  • Introduction to Azure management and governance focusing on organizing resources, compliance, cost management, and monitoring.
  • Explanation of cost factors including resource type, consumption, reserved capacity discounts, geography, network traffic, and subscription types.
  • Overview of Azure Marketplace and its certified third-party solutions with distinct billing models.
  • Demonstration and usage of the Azure Pricing Calculator to estimate resource provisioning costs.
  • Discussion on cost management tools like resource tagging and alerts to optimize cloud spending.
  • Governance and compliance tools including blueprints, policies, resource locks, and the Service Trust portal.
  • Resource deployment methods from Azure Portal, PowerShell, CLI to advanced tools like Azure Arc and ARM templates.
  • Monitoring and optimization services such as Azure Advisor, Azure Service Health, and Azure Monitor to maintain performance and security.
  • Emphasis on managing hybrid and multi-cloud environments with Azure’s provisioning and monitoring capabilities.
  • Summary of how to effectively manage costs, enforce governance, deploy resources, and monitor Azure environments.

Answers

Questions about this video

What are the main factors that influence Azure costs?

Azure costs are influenced by resource type, consumption, reserved capacity discounts, geography, network traffic, and subscription types.

How can I estimate the cost of Azure resources before deployment?

You can use the Azure Pricing Calculator, a free online tool that estimates hourly or monthly costs based on selected Azure services and configurations.

What governance tools does Azure provide to enforce compliance?

Azure offers governance tools such as blueprints, policies, resource locks, and access to the Service Trust portal to help enforce compliance and secure resource management.

Full Transcript — Download SRT & Markdown

00:01
Speaker A
[Music] Alexandra Zakharova: Hello, and thank you for joining me. Welcome to the third session of AZ-900 Microsoft Azure Fundamentals.
00:15
Speaker A
I hope you have had a chance to watch the previous videos in the series, and are ready to continue building your Azure knowledge.
00:23
Speaker A
I'm Alexandra Zakharova, Senior Technical Trainer and (inaudible) at Microsoft, and I'm delighted to guide you through this part of your Azure journey.
00:34
Speaker A
If you would like to connect, you can find me on LinkedIn via aka.ms/alexandra. In this session, we will focus on Azure management and governance.
00:46
Speaker A
You will learn how to organize resources effectively using management groups and subscriptions, explore compliance tools that help you meet regulatory requirements, and understand cost management strategies to keep your cloud spending under control.
01:04
Speaker A
You'll also cover monitoring and optimization services like Azure Monitor and Azure Advisor, which provide insight to improve performance, security, and reliability.
01:18
Speaker A
By the end of this session, you will have a clear understanding of how to manage, govern, and optimize your Azure environment, skills that are essential for any cloud professional.
01:30
Speaker A
So let's get started. In this session, we're shifting gears from core services to the tools and practices that help you manage, govern, and optimize your Azure environment.
01:45
Speaker A
We'll start with cost management, explore the Pricing Calculator, and how tax can help you track and control spending.
01:53
Speaker A
Then we'll dive into governance and compliance. We will learn about blueprints, policies, resource locks, and the Service Trust portal.
02:06
Speaker A
Next, we'll look at resource deployment tools from the Azure Portal to PowerShell, CLI, and even advanced options like Azure Arc and Azure Resource Manager.
02:20
Speaker A
After that, we'll cover monitoring tools including Azure Advisor, Azure Service Health, and Azure Monitor so you can keep your environment healthy and efficient.
02:34
Speaker A
By the end of the session, you will know how to manage costs, enforce governance, deploy resources effectively, and monitor your Azure environment like a pro.
02:46
Speaker A
Ready? Let's get started. [Inaudible] is a very important topic. How to manage your finance and maximize savings with Azure.
02:57
Speaker A
The cost of Azure resources is influenced by several factors. Let's discuss six important factors.
03:05
Speaker A
The first factor is the type of resource. When you provision an Azure resource, Azure creates metered instances for that resource.
03:14
Speaker A
The meters track resources' usage, and generate a usage report that is used to calculate your bill.
03:22
Speaker A
The second factor is consumption. As we mentioned in our first session, a pay-as-you-go model is a cloud payment approach where you're billed for the resources utilized during the billing cycle.
03:36
Speaker A
If you consume more computer resources in the cycle, your payment will be higher. If your usage is lower in the current cycle, your payment will reduce.
03:48
Speaker A
It's a straightforward pricing mechanism that offers maximum flexibility as we previously discussed. As mentioned earlier, you're only charged for what you actually use.
04:01
Speaker A
This direct pricing mechanism provides maximum flexibility. However, Azure also allows you to continuously use a specific fixed amount of cloud resources and receive discounts on these reserved resources.
04:15
Speaker A
Many services including databases, computer resources, and storage offer the ability to set a fixed level of usage and receive discounts.
04:25
Speaker A
In some cases, discounts can reach up to 72%. When you reserve capacity, you define a fixed amount of Azure resource usage, and payment for a specific period, usually one or three years.
04:40
Speaker A
Using resource capacity allows significant saving when using stable and predictable workloads, while still having the flexibility to increase cloud resources as needed.
04:52
Speaker A
The surge factor is maintained. The flexible capabilities of the cloud allow you to quickly adjust resources on demand.
05:01
Speaker A
Monitoring in Azure helps you preserve financial resources by providing various recommendations such as shutting down underutilized virtual machines.
05:12
Speaker A
By tracking resources and not retaining resources that are no longer needed, you can effectively control cloud costs.
05:21
Speaker A
The first factor that affects cost is geography and placement of your resources. When provisioning most resources in Azure, you need to specify the region where the resource will be deployed.
05:36
Speaker A
Azure's infrastructure is distributed globally, allowing you to deploy services centrally or as close as possible to where your customers use them.
05:47
Speaker A
Such global deployment results in global price differences. The cost of electricity, labor, taxes, and fees varies depending on the location.
05:59
Speaker A
Due to such cost variations, the deployment cost of Azure resources may differ depending on the region.
06:07
Speaker A
Network traffic or fees factor also depends on geographical location. For example, data movement within Europe includes lower costs since data is moving from Europe to Asia or South America.
06:22
Speaker A
Billing zones are a factor that determines the cost of some Azure services. Bandwidth refers to data movement to and from Azure data centers.
06:34
Speaker A
The fifth factor is network traffic. In some cases, inbound data transfer is provided at no cost.
06:44
Speaker A
Charges for outbound data transfer depend on billing zones. And finally, the sixth factor is subscription.
06:52
Speaker A
Some (inaudible) subscriptions also include usage quotas that affect costs. For example, the free Azure trial subscription provides access to a range of Azure products for free for 12 months.
07:06
Speaker A
It also includes credits for expenses during the first 30 days from the registration date.
07:13
Speaker A
You get access to over 25 products that are always provided for free. Now that we have examined the dynamics of resources placement and network traffic costs, let's shift our focus to the Azure Marketplace, a platform that extends your Azure experience
07:33
Speaker A
by offering solutions and services from third-party providers. This can include servers (inaudible) and configured software, devices with managed network firewalls, or connectors for third-party (inaudible) service.
07:49
Speaker A
When you purchase products through the Azure Marketplace, you may (inaudible) only for Azure services you use, but that's (inaudible) third-party provider services.
08:00
Speaker A
In this case, the billing structures are determined by the provider. All solutions available in the Azure Marketplace are certified and comply with Azure policies and standards.
08:15
Speaker A
Certification policies may vary depending on the type of the service or solution, as well as the Azure service.
08:24
Speaker A
Emerging from the Azure Marketplace (inaudible) let's now turn our focus to the Pricing Calculator, another valuable tool in comprehending potential Azure expenditures.
08:35
Speaker A
This calculator is freely available online, and allows you to estimate the approximate hourly or monthly cost of using Azure.
08:47
Speaker A
The Pricing Calculator is designed to provide an estimated cost of provisioning resources in Azure.
08:53
Speaker A
You can (inaudible) the cost of individual resources, billing solution, or as a sample scenario to view Azure cost estimates.
09:02
Speaker A
The main focus of the Pricing Calculator is on the cost of provisioning resources in Azure.
09:08
Speaker A
With the Pricing Calculator, (inaudible) the cost of all provisioning of resources, including computer services, storage, and (inaudible) networking expenses.
09:19
Speaker A
You can even consider various storage options, such as storage time, access tier, and redundancy.
09:27
Speaker A
To better understand how the Pricing Calculator works, let's take a look at it in the browser.
09:36
Speaker A
(inaudible) Pricing Calculator. It's available to everyone publicly. Bing it or Google it, or just copy/paste the link from Microsoft Learn, or try the same links you see on my screen.
09:49
Speaker A
And if you want to save your cost estimates there, I highly recommend logging in.
09:55
Speaker A
It's not mandatory; just nice if you want to review all the scenarios that you reviewed in the past, you have this option.
10:04
Speaker A
They do have all Azure products on the left side. You can select the products that you're interested in to discover their pricing.
10:13
Speaker A
You have also some example scenarios, so to include in your...
10:24
Speaker A
You can add a virtual machine to our estimate, just to see how you can use this useful tool.
10:32
Speaker A
We select a region for the resource. You'll see that it's modified directly, the price, on the top right corner.
10:40
Speaker A
We can also select the operating system, however, I'm sure if you switch from Windows to Linux, the price decreases significantly.
10:49
Speaker A
You can select the type of (inaudible). Is a tier. So change the price. The number of instances, the size of it, the (inaudible) modifies the price for us as well, a total monthly price.
11:11
Speaker A
And if we want to, we can estimate as well the amount of VMs that are needed, the amount of hours that we'll use them.
11:20
Speaker A
And there are multiple savings options available to us. If you want to book it for one year, three years, it will provide you 24% off, 45% account accordingly.
11:34
Speaker A
It's why I always highly recommend to use those reservations. Plan if you're sure that you'll use this resource over long period of time.
11:46
Speaker A
If you bring your own Hybrid Benefits, or your other licenses, this also can be good saving options available to you.
11:54
Speaker A
Let's try it on something different, for example, storage account. If you go to our storage account.
12:02
Speaker A
We can again, change the origin from East US to Sweden Central. And on the top right corner is the price.
12:12
Speaker A
Change, we can modify the type of storage, account performance, access tier. Will impact also our price, and the redundancy option, changing from LRS.
12:27
Speaker A
For example LRS it's $19. If I put something more interesting here, like GZRS, it will increase the price to $68 per month.
12:40
Speaker A
So it's kind of a big difference in (inaudible) storage account. [inaudible] You can also estimate operations and data transfer here.
12:53
Speaker A
Write and read. Create operations. And after you set up all resources here that you're interested in adding some to estimate.
13:07
Speaker A
You can export it from the (inaudible) parts. But I highly recommend to review all those different option, and especially if you really want to know how pricing is working in Azure.
13:21
Speaker A
And I mentioned that you can download it and export it. You have this Export to Excel in the left bottom corner, so when I click on Export, let's say because I don't want to do again and Save it locally, but I would love to prefer
13:38
Speaker A
to keep it on my laptop. I will just switch currency to Euro, as I'm based in France, it kind of makes sense to me.
13:46
Speaker A
And I'll download it Excel. It's popup on a different screen. Let me bring it to this screens that I'm currently sharing with you.
13:56
Speaker A
And I will find here everything that I set up with the service name, description, estimated monthly cost, and I will find total here.
14:06
Speaker A
So it will help me to decide if I want to move with Azure. But also estimate my expenses thanks to this free Pricing Calculator available in public access to everyone.
14:21
Speaker A
(inaudible) to play with it. I really like this tool. Again, it's only estimate. It's not exact amount of money that you will pay.
14:29
Speaker A
You have Azure Resources (inaudible) Azure good resource to estimate (inaudible) and decide if you want to move to cloud.
14:38
Speaker A
Let's come back to our slides. The Cost Management service allows you to easily track the expenses of your Azure Resources.
14:47
Speaker A
You can set up alerts for costs, and create budgets to manage your resources more efficiently.
14:54
Speaker A
You can find it within the billing and Resource Management section, or as a standalone tool designed for Teams, managing costs across different scopes.
15:04
Speaker A
You can also automate tasks and add cost-related features to your tools and processes. This enhances visibility and accountability for your organization's goals.
15:16
Speaker A
Cost Management works in the Azure Portal, Microsoft 365 Admin Center, or Power VI. It also sends various emails and alerts to help you stay informed and manage your account and costs effectively.
15:33
Speaker A
Within the Azure Cost Management Service there is an additional feature called Cost Analysis. It gives you a visual overview of your Azure costs.
15:43
Speaker A
You can see your typical costs in different ways such as billing cycles, regions, and resources.
15:51
Speaker A
Cost analysis, it's helpful for starting and analyzing your organization's expenses. By looking at the accumulated costs over time, you can identify trends and drivers, helping you understand your budgets' impact.
16:09
Speaker A
The more you use the cloud, the more important it becomes to maintain proper oversight.
16:15
Speaker A
An effective organizational strategy helps you comprehend your cloud usage and manage costs. One approach to arranging related resources is by placing them in separate subscriptions.
16:28
Speaker A
Resource groups are also useful for managing interconnected resources. Resource tags offer yet another way to organize resources.
16:37
Speaker A
These tags supply additional information or metadata about resources. It's important to know that tags are not inherited.
16:47
Speaker A
This means you can apply tags at one level, without them automatically displaying at another level.
16:54
Speaker A
This flexibility allows for customizable tag schemas that can adapt based on the level: resource, resource groups, subscription, and et cetera.
17:04
Speaker A
A resource tag consists of a name and a value. And each Azure Resource can be assigned one or more tags.
17:15
Speaker A
In this lesson, we'll delve into Azure governance and compliance. By the end of this lesson, you will be able to describe the purpose of Microsoft Purview, explain Azure policies and resource locks, and understand the role of the Service Trust portal.
17:34
Speaker A
Let's begin with Microsoft Purview. Microsoft Purview is family of data governance, risk, and compliance solutions that can help your organization govern, protect, and manage your entire data estate.
17:49
Speaker A
It combines the former Azure Purview and Microsoft 365 compliant solutions and services together into single brand.
17:59
Speaker A
The Microsoft Purview helps you gain visibility into assets across your entire data estate, and enables easy access to all your data, security, and risk solutions.
18:11
Speaker A
Moreover, Microsoft Purview manages sensitive data across clouds, apps, and endpoints. It empowers your organization to govern, protect, and manage data in a new, comprehensive way.
18:26
Speaker A
Microsoft Purview includes unified data governance solutions, to help you manage data services across your own on-premises, multi-cloud, and software as a service estate.
18:40
Speaker A
That includes Azure storage services, Power VI, databases like SQL or Hive, file services like Amazon S3, and many more.
18:51
Speaker A
Access policies in Microsoft Purview enable you to manage access to different data system across your entire data estate.
19:01
Speaker A
Moving on to another vital component, we have Azure Policy. This service in Azure allows you to create and assign policies for resource control and auditing, as well as management.
19:16
Speaker A
These policies ensure compliance with various resource configuration roles, ensuring adherence to corporate standards. Azure Policy enables you to define individual policies or set of related policies called initiators.
19:35
Speaker A
Azure Policy assess resources, and identify those that do not comply with the defined policies.
19:44
Speaker A
It can also prevent the creation of non-compliant resources. Azure Policies can (inaudible) at each level, allowing you to tailor policies to specific resources, resource groups, subscriptions, and et cetera.
19:59
Speaker A
Additionally, Azure Policies can be inherited. So while you set a policy at a higher level it automatically applies to all child groups.
20:09
Speaker A
For example, if you set an Azure policy at the resource group level, all resources created in that group will automatically receive the same policy.
20:19
Speaker A
Now let's delve into the concept of resource locks. These locks play a crucial role in preventing accidental deletion or modification of resources.
20:31
Speaker A
Just as you might have accidentally deleted a document and regretted it, resource locks help you avoid such incident.
20:41
Speaker A
(inaudible) base control policies in place, there is a risk that Azure (inaudible) appropriate access level may occasionally delete critical (inaudible) resources.
20:51
Speaker A
Resource locks prevent deletion or update of resources, depending on the type of lock. Resource lock can apply to individual resources, resource groups, or even entire subscriptions.
21:06
Speaker A
They can also be inherited, meaning if you place a resource lock on a resource group, it applies to all resources in that group.
21:16
Speaker A
There are two types of resource locks. One prevents user from deleting while the other restricts user from modifying or deleting a resource.
21:28
Speaker A
Delete lock means that authorized users can read and modify the resource, but they cannot delete it.
21:37
Speaker A
Read-only means that authorized user can read your resource but cannot delete or update it.
21:44
Speaker A
To better understand resource locks, let's take a look at how they can be configured in the portal.
21:53
Speaker A
In this demo, we'll see how to manage resource locks. (inaudible) let's select for example, virtual machines that we created before together.
22:05
Speaker A
And I will go to the Settings on my resource, and I will find the Locks.
22:11
Speaker A
Here when I click on Locks, I have possibility on the top (inaudible) to add some locks.
22:17
Speaker A
I will provide the name of my lock. Let's call it "notmodify," and I will select that this is read-only lock.
22:27
Speaker A
It means that now I cannot modify anything on this VM. To prove it, let's try for example to delete this VM after we put a lock on it, and it'll have a message saying that this virtual machine can't be deleted.
22:45
Speaker A
And if you look in the bottom part, there will be small information about the lock, and if you want to delete it, you'll need first to remove our lock.
23:02
Speaker A
If you want also to modify this VM and add some disk to it, for example, I will provide a new disk.
23:12
Speaker A
Again, it should give us an error message, because it's a read-only lock. And again, we can't have (inaudible) VM.
23:20
Speaker A
Why? If you look at the bottom part: "Please remove the lock and try again." This is the purpose exactly of our read-only lock.
23:29
Speaker A
So we can't delete and we can't modify our resource. If you want now to modify or to delete, I will need first to delete this lock.
23:40
Speaker A
As I can apply locks to the resources, I can also apply locks to the other levels, like resource groups, or even subscription.
23:50
Speaker A
And the locks will be inherited. If I select Locks on my resource group, and let's call this lock "notdelete" and we will just select the Delete type of the lock this time, and I'll assign this lock to the full group.
24:05
Speaker A
And now if I go to any resource inside of this group and I try to hit Delete, confirming Okay, I want to Delete, again you will get an error message saying "Please remove the lock and try again" if you want
24:21
Speaker A
to delete this resource. And this was only to illustrate, since the locks are inherited to all resources in this resource group.
24:30
Speaker A
And now if I want to do it something inside of this resource group, I would need again to delete first my locks.
24:39
Speaker A
To summarize, locks are available on different level. You can find them in the Settings menu on the left side of your resource, of Resource group or in the description, and it's an effective way to secure your data and resources.
24:53
Speaker A
Let's come back now to our presentation. I hope you enjoyed the demo. Let's discover together the Microsoft Service Trust portal.
25:02
Speaker A
It provides materials, tools, and other resources on how Microsoft Cloud Services protects your data, as well as how to manage cloud data security and compliance in your organization.
25:17
Speaker A
The Service Trust portal is a publicly accessible website by Microsoft Corporation to publish, audit reports, and other information related to compliance requirements concerning Microsoft Cloud Services.
25:32
Speaker A
The Service Trust portal, users can download audit reports proven by external auditors, and access analytical information from Microsoft technical documentation which contains details on how Microsoft Cloud Services safeguard your data and manage cloud data security and compliance in your organization.
25:57
Speaker A
To access some resources on the Service Trust portal authentication verified user need to sign in with their Microsoft Cloud Service account, review and accept the Microsoft compliance material non-disclosure agreement.
26:12
Speaker A
Additionally on this portal, you can use My Library. This feature helps you to add documents and resources, allowing you to access documents related to you in one place and receive notifications when they're updated.
26:31
Speaker A
We are moving forward to the next lesson in this session. In this lesson, we'll get familiar with the features, tools for managing, and how to put Azure Resources into action.
26:43
Speaker A
We'll look at what the Azure portal can do, explore cloud shells capabilities, and understand how to use PowerShell and CLI.
26:52
Speaker A
Additionally, we'll learn about Azure Resource Manager and cover Bicep, a useful tool for managing resources.
27:01
Speaker A
You'll also discover Azure services that make handling both on-premises and multi-cloud setups easier. We'll look at Azure Arc as a way to manage Azure's power beyond its usual reach, giving you more control and flexibility.
27:20
Speaker A
To make the most of Azure capabilities, you will need a reliable way to interact with Azure environments, management groups, subscriptions, resource groups, resources, and et cetera.
27:34
Speaker A
Azure provides a range of tools for environment management, including Azure Portal, Azure PowerShell, and Command-Line Interface, CLI.
27:46
Speaker A
Now let's explore how these tools integrate seamlessly with the Azure environment. The Azure Portal ensures resilience and (inaudible) in each Azure Data Center.
28:01
Speaker A
This consideration makes the Azure Portal resilient to individual data center (inaudible) and helps avoid network latency due to proximity to users.
28:12
Speaker A
The Azure Portal is continuously updated and doesn't go offline for maintenance. Azure Cloud Shell is a browser-based shell.
28:24
Speaker A
It allows you to create, configure, and administer Azure services using the shell. Azure Cloud Shell supports both Azure PowerShell, and Azure CLI, which is a (inaudible) shell.
28:40
Speaker A
Azure Cloud Shell doesn't require local installation or setup. It authenticates using Azure credentials so it already knows who you are and what permissions you have upon login.
28:56
Speaker A
Azure PowerShell is a shell that enables developers, DevOps specialists, and IT professionals to execute commands called commandlets.
29:08
Speaker A
These commands involve the Azure REST API to perform management tasks in Azure. The Azure CLI has the same functionality as Azure PowerShell, but this commands written in Bash (inaudible) provides the same benefits of handling disk group tasks or orchestrating complex separation of this code.
29:33
Speaker A
It can also be installed on Windows, Linux, and Mac platforms as well as accessed via Azure cloud Shell.
29:43
Speaker A
Since Azure PowerShell and Azure CLI based in Bash offer similar capabilities and access procedures, I advise using the one you're more familiar with.
29:55
Speaker A
And don't worry, for passing the AZ-900 exam, you don't need to know how to write these commands.
30:03
Speaker A
Managing hybrid and multi-cloud environments can quickly become complex. Azure offers multiple tools for provisioning, configuring, and monitoring Azure resources.
30:13
Speaker A
But what about on-premises resources and hybrid configuration, or cloud resources and multi-cloud setups? Azure Arc allows extending Azure governance and monitoring to hybrid and multi-cloud configurations.
30:29
Speaker A
The Azure Arc service simplifies management and administration that provides a unified management platform for multiple clouds and on-premises environments.
30:42
Speaker A
Azure Arc enables projecting existing non-Azure and/or on-premises resources into Azure Resource Manager. This means you can manage virtual machines, Kubernetes clusters, and databases as if they were running in Azure.
31:00
Speaker A
You can utilize [inaudible] your Azure management services and capabilities regardless of where the resources are located.
31:08
Speaker A
Additionally, Azure Arc offers a cohesive experience by allowing you to view your Azure Arc-enabled resources pretty formally.
31:18
Speaker A
Whether you prefer the Azure Portal, the Azure CLI, Azure PowerShell, or Azure REST API, Azure Arc provides a unified approach to managing your diverse resources.
31:31
Speaker A
This simplification enhances your operational efficiency and control across complex environments. Transitioning from the essential tools used to interact with Azure environments, let's now delve into the underlying structures that ensure seamless integration and consistent management.
31:52
Speaker A
Azure Resource Manager, ARM, is a deployment and management service for Azure. It provides a level of control to create, update, and delete resources in your Azure account.
32:05
Speaker A
Every time you perform any action with Azure resources, ARM is used. Many users submit a request from any Azure tool or API, it is redirected to ARM.
32:19
Speaker A
ARM then performs authentication and authorization checks on the request. It then forwards the request to the appropriate Azure service that takes the requested action.
32:31
Speaker A
Since all requests are processed through a single API, results and capabilities remain consistent across different tools.
32:43
Speaker A
The concept of infrastructure as a code in Azure transforms the resource management by using code for provisioning and configuration.
32:51
Speaker A
Infrastructure as a code involves defining infrastructures through code (inaudible), replacing manual setups. This consistency minimizes errors and ensures reproducibility.
33:05
Speaker A
Infrastructure as code foster collaboration with version controls and shared scripts, promoting teamwork and consistent configuration.
33:14
Speaker A
Scalability becomes effortless [inaudible] duplication avoids manual duplication complexities. Implementing infrastructure as a code means version controlling code, testing scripts, and using Azure's tool for verification.
33:33
Speaker A
Infrastructure as a code empowers efficient Azure Resource Management through automation, consistency, and collaboration. Azure Resource Manager integrate seamlessly with infrastructure as a code through ARM templates, JSON files that define and deploy resources correctly.
33:57
Speaker A
So ARM templates are an example of infrastructure as a code in action. With ARM templates, you can describe the resource you want to use in the clarity of JSON format.
34:09
Speaker A
The ARM template deployment validates the deployment code before any execution, ensuring that resources are created and connected correctly.
34:20
Speaker A
The template that manages the (inaudible) creation of these resources. For instance, if you need 50 instances of the same resource, all 50 instances are created simultaneously.
34:32
Speaker A
Developers, DevOps specialists, or IT professionals only need to define the desired state and configuration of each resource in the Azure Resource Manager template, as a template takes care of all the rest.
34:49
Speaker A
Our templates can even run PowerShell and CLI scripts before or after resource configuration (inaudible) the clarity of creation and deployment of the entire Azure infrastructure, including virtual machines, networking infrastructure, storage systems, and as-necessary resources.
35:13
Speaker A
You can write ARM templates two different ways: by using JSON and by using Bicep.
35:19
Speaker A
Bicep has a declarative syntax that you treat like application code. Treating your infrastructure as a code enables it to track changes to your infrastructure requirements and makes your deployment more consistent and repeatable.
35:34
Speaker A
Bicep is intended to be easy to understand and straightforward to learn, regardless of your experience with other programming languages.
35:44
Speaker A
All resource types, API versions, and properties are valid in Bicep templates. If you have previously looked into using JSON template, you will notice that Bicep simplifies the template creation experience.
35:59
Speaker A
It provides a simpler syntax for writing templates. You can reference parameters and variables directly without using complicated functions.
36:09
Speaker A
You can reference the properties of a resource directly by using its symbolic name, instead of complex reference statements.
36:18
Speaker A
In most situations, Bicep automatically detects dependencies within your resources. This process removes some of the work involved in template authoring.
36:31
Speaker A
You can see on the slide an example of how to deploy storage account using Bicep.
36:39
Speaker A
If we examine the JSON code, we will notice that the code required to deploy a storage account will be twice as long as (inaudible) Bicep.
36:49
Speaker A
Let's take a look on my screen, and you will see that it will take two slides to reflect the same code in JSON.
36:59
Speaker A
And finally, we move onto our last lesson in this session. We will discuss monitoring.
37:08
Speaker A
Azure Advisor emulates Azure resources and provides recommendations to enhance reliability, security, performance, efficiency, and cost saving.
37:21
Speaker A
Azure Advisor was designed to save you time on cloud optimization. Azure recommendation service includes proposed actions that you can take immediately, defer, or dismiss.
37:33
Speaker A
You can access recommendations through the Azure Portal, or via the API. Additionally, you can configure notifications to alert you about new recommendations becoming available.
37:45
Speaker A
With a solid grasp of how Azure Advisor enhances resources management, let's pivot to another indispensable tool, Azure Service Health.
37:57
Speaker A
Azure Service Health helps monitor your Azure resources, both individual-deployed resources and overall Azure status.
38:07
Speaker A
Azure Service Health achieves this through a combination of three different Azure Services. First, Azure Status provides a broad view of Azure's global health status (inaudible) service outages in Azure through the Azure status page.
38:27
Speaker A
This page offers a global perspectives on the operational status of all Azure services across all Azure regions, making it a valuable guide for incidents with wide-ranging consequences.
38:42
Speaker A
Secondly, Service Health offers a narrower view of services and Azure regions that you use.
38:52
Speaker A
It's the best tool to find information about issues affecting the functionality of the services, plan maintenance, and optimization recommendations for your solutions.
39:04
Speaker A
All of this is possible because the authenticated service hubs knows which services and resources you're currently using.
39:14
Speaker A
You can even configure Service Health alerts to receive notifications about service issues, plan maintenance, and other changes that may impact your used Azure Services and region.
39:28
Speaker A
Thirdly, Resource Health is specialized view of your actual Azure resources. This service provides information about the operational status of individual cloud resources, such as specific virtual machine instance.
39:44
Speaker A
The combined force of Azure Service Health and Azure Monitor enables you to set alerts that notify you of shifts in the availability of your cloud resources.
39:56
Speaker A
Speaking of Azure Monitor, you might be wondering what exactly is Azure Monitor? Azure Monitor is a platform for collecting data about resources, analyzing the data, visualizing information, and even taking actions based on the results.
40:16
Speaker A
Azure Monitor can track Azure resources, on-premises resources, and even multi-cloud resources such as virtual machines hosted by other cloud service providers.
40:28
Speaker A
You can set up alerts to monitor logs and trigger specific logs' event or configure them to track metrics and trigger when certain values are crossed.
40:41
Speaker A
For example, you can set up an alert based on metrics to notify when the CPU load on a virtual machine exceed 80%.
40:51
Speaker A
Alerts are based on metrics provide real-time notifications based on numerical values, while rules-based unlock support complex data-processing logic from multiple sources.
41:04
Speaker A
Azure Monitor alerts (inaudible) action groups to customize who needs to be notified, and what actions should be taken.
41:13
Speaker A
An action group is simply a collection of notifications and action settings (inaudible) shared with one or more alerts.
41:25
Speaker A
Action groups are used in Azure Monitor, Azure Service Health, and Azure Advisor to send notification when alerts are triggered.
41:36
Speaker A
With that, we conclude our third session of the AZ-900 Microsoft Azure Fundamentals course. In this session, you learned how to manage cost effectively using tools like the Azure Pricing Calculator, and resource tags, enforce governance and compliance with policies,
41:56
Speaker A
and resource locks (inaudible) Service Trust portal for transparency and compliance information. We explored resource deployment options including the Azure Portal, PowerShell, CLI, Azure Arc, and Azure Resource Manager, giving you flexibility in how you manage your environment.
42:19
Speaker A
Finally we wrapped up with monitoring and optimization tools: Azure Advisor, Service Health, and Azure Monitor to help you keep your Azure environment secure, reliable, and performing at its best.
42:35
Speaker A
You're now equipped with the knowledge to control costs, maintain compliance, deploy resource effectively, and monitor your Azure environment like a pro.
42:47
Speaker A
Your learning journey doesn't stop here. I encourage you to continue exploring other videos in this course or dive deeper into our next (inaudible) topic on Microsoft Learn at aka.ms/learn.
43:03
Speaker A
Thank you for joining me. And I hope to see you soon in our next learning adventure.
43:08
Speaker A
Happy studying.
Topics:Azure managementAzure governancecost managementAzure Pricing CalculatorAzure policiesresource deploymentAzure MonitorAzure AdvisorAzure Service HealthAZ-900

Get More with the SozAI App

Transcribe recordings, audio files, and YouTube videos — with AI summaries, speaker detection, and unlimited transcriptions.

Or transcribe another YouTube video here →