Explore web apps as platform as a service with Azure app services, covering deployment, scaling, SSL, custom domains, deployment slots, and how they differ from virtual machines.

Create an Azure web app in the portal by configuring a subscription and resource group, selecting code web app with .NET 9 in Canada Central, and setting a custom domain.

Explore Azure App Service Plan options, from free and shared plans to basic, premium, and isolated options; compare ACU-based performance, scaling, backups, staging slots, and zone deployment.

Explore deploying Azure web apps with GitHub Actions auto deploy, manage public or private access, enable Application Insights for monitoring, and apply tagging and Defender for Cloud options.

Explore manual scaling of an Azure app service on a basic B1 plan, increasing from one to two instances (and up to three) while noting cost impact.

Deploy a simple Blazor web app to Azure using Visual Studio 2022, creating a Hello Scott page and publishing to an Azure App Service with a publish profile.

Master deployment slots in Azure App Service to test changes on staging and swap to production with traffic split (A/B testing) for safe, rapid releases.

Learn to separate secrets from code with environment variables or key vaults, configure deployment slots and connection strings, and tune IIS and security settings.

Learn to add a custom domain to an App Service, validate ownership with A and TXT DNS records, and prepare a security certificate for HTTPS.

Configure a security certificate for the custom domain in Azure App Service, choosing between managed certificates or uploading your own PFX/CER, then bind via SNI or IP to enable https.

Automate performance and cost balance by auto scaling Azure App Services, using manual or automatic options to scale out on demand or scale up with metrics like CPU utilization.

Enable diagnostic settings for autoscale evaluations and actions, routing logs to log analytics. Review app service, HTTP, and application logs for telemetry and CPU utilization.

Learn to create a web app with PowerShell in Azure Cloud Shell, including resource groups, app service plans, free tier, and EastUS, with deployment from GitHub or local repos.

Learn to create and deploy a web app with the Azure CLI, provisioning a resource group, app service plan, and web app, then deploy from GitHub.

Explore containers as portable images that bundle an app and its dependencies for easy deployment. Learn about Azure Container Instances, Azure Container Registry, and container orchestration with Kubernetes.

Create and run a container using Azure Container Instances with a Hello World quickstart image, expose a public IP on port 80, and view the welcome page.

Create an Azure Container Registry, a private registry to securely store and share container images, supporting repositories and access controls for development to production.

Enable WSL 2 and docker desktop on windows, install container tools, and build a visual studio image to push to an azure container registry.

Create a new asp.net core web app in Visual Studio 2022, enable Linux container support, build a Dockerfile, test locally, and publish to Azure container registry for deployment.

Deploy a docker image from an Azure Container Registry to an Azure Container Instance, enable admin access, and configure a public IP to verify a running container.

Deploy a Linux container to an Azure web app from an Azure Container Registry, compare web app vs container instance, and explore scaling and integration options.

Explore Azure function apps, the serverless, event-driven code that scales automatically, with triggers, bindings, and language options, plus pricing, plans, and durable function concepts.

Create a function app in the azure portal, compare consumption, premium, and app service hosting, and deploy code—from node.js to containers—with storage, networking, and deployment options.

Learn to create your first function inside a function app using an http trigger or other templates, configure anonymous or secured access, and test it directly in the browser.

Create a simple http trigger function in node.js, using index.js and function.json with anonymous access, accepting a name via query or body. Test with the function url and view results.

Explore monitoring function events and errors by viewing recent invocations, durations, and console messages, and leverage application insights and real-time log streams for debugging in the Azure portal.

Create a storage account and add an Azure blob storage output binding to an HTTP function, writing the input name into a blob.

Learn to create a timer trigger in Azure Functions, configure a cron-based schedule, and test it anonymously to see how the timer runs on its own cadence.

explains using function core tools to create, test, and publish Azure functions from command line, including func init, func new, local testing in cloud shell, and az function app publish.

Use Visual Studio 2022 to create an Azure function in C# with an HTTP trigger, test it locally, and publish to an Azure function app with GitHub CI.

Join hands-on practice by using the Microsoft Learn sandbox to create Azure resources, run a JavaScript function app, manage subscriptions and RBAC, and reinforce exam-ready skills.

Create a storage account and configure blob storage, choosing a region and standard storage, then evaluate redundancy options like LRS, ZRS, GRS, and GZRS for reliability.

Explore securing storage accounts with https, manage anonymous access via account keys or Microsoft Entra RBAC, and evaluate data lake storage with hot, cool, cold, and archive access tiers.

Explore how to secure storage accounts with network options, private endpoints, and routing choices, and enable data protection features like soft delete, point-in-time restore, versioning, change feed, and immutability.

Compare Microsoft-managed keys with customer-managed keys using Azure Key Vault, enabling transparent data encryption and infrastructure encryption, and select blob, table, and queue scopes before creating an unmanaged storage account.

Explore how a private storage account uses containers to organize blob data, upload files, view properties and urls, and switch access tiers such as hot, cool, cold, and archiving.

Use access keys as administrative credentials, rotate between key1 and key2. Generate a SAS token to grant time-limited read access via HTTPS-only signed URL.

Demonstrate copying a blob between Azure containers with AzCopy v10 using a SAS token, avoiding downloads and data egress costs, preserving access tier, and enabling programmatic transfers within Azure.

Learn to copy a blob between Azure storage containers using StartCopyFromUri with Azure.Storage.Blobs in a Visual Studio 2022 console app, including source, destination, and file names.

Access and manipulate blob properties and metadata programmatically by retrieving properties such as access tier, size, and content type, then set and verify metadata via a string–string dictionary.

Explore how Azure policy enforces storage governance by applying predefined storage policies, such as enforcing minimum TLS version 1.2 and enabling HTTPS-only, across subscriptions or resource groups.

Explore storage account access tiers (hot, cool, cold, and archived) and learn how lifecycle management moves blobs between tiers, with rules like 45 days and a 30-day minimum, reducing costs.

Discover Cosmos DB’s globally distributed multi-modal NoSQL architecture and its API options, including NoSQL and MongoDB, with serverless or provisioned throughput and a free tier.

Configure a Cosmos DB account with NoSQL default, enable public or private networking, use periodic backups or switch to continuous backups, and choose Microsoft or customer managed encryption.

Explore how geo replication distributes Cosmos DB data across Azure regions to improve availability and performance, covering multi-region rights, conflict resolution, failover options, and the associated cost impact.

Secure Cosmos DB access by using connection keys or role-based access control, rotate keys if exposed, and leverage managed identities for app to DB communication.

Create a Cosmos DB container using Data Explorer, understand the database and container hierarchy, and choose a partition key with high cardinality for JSON documents like cars.

Programmatically add data to Cosmos DB with the Python SDK by supplying endpoint, key, database name, and container name to create JSON items for the Toyota Camry and Honda Civic.

Explore Cosmos DB consistency options, from strong to eventual, and how global databases affect data reads and latency. Learn how session and consistent prefix guarantee ordered data across regions.

Trigger code on Cosmos DB changes using a Cosmos DB trigger with Azure Functions or SDK, monitor a collection, and manage a lease collection to coordinate actions and log changes.

Explore the Cosmos DB quickstart: create a CosmosClient, a cosmicworks database, and a products container with categoryId as the partition key, then create, read, and query items using CreateItemAsync.

Explore Entra ID, Azure's identity platform for authenticating users, apps, and APIs. Learn about users, groups, roles, administrative units, app registrations, and features like self-service password reset and cloud sync.

Understand the basics of Azure Active Directory tenants, users, and subscriptions, including switching directories, global administrator roles, and best practices for creating a personal tenant for safe practice.

Create a new Entra ID (Azure AD) tenant for testing, select azure active directory, set onmicrosoft.com domain, and note europe data residency; focus on app registrations for authentication and authorization.

Register and configure app registrations with the Microsoft Identity Platform, exploring Azure Active Directory endpoints, OAuth 2.0 and OpenID flows, and preparing apps for production via the Identity Platform checklist.

Create and manage users in Entra ID (Azure AD), including members and guest users, inviting external users, and enabling a web app login using Azure Active Directory.

Register a new application in Azure Active Directory, configure single-tenant or multi-tenant options, and test a web app with the quick start sample code in .NET Core on localhost.

Demonstrates signing in a web app with the Microsoft identity platform, obtaining an access token during redirect, and validating user identity within an ASP.NET Core web app.

Learn how to use Microsoft Graph to access data across Microsoft 365 and Azure AD, query users and groups, and set up Graph API in Visual Studio.

Create a console app that uses the Microsoft Graph API to fetch Azure AD users and display their names, after registering the app and securing a client secret.

Explore secure cloud app configuration by comparing app settings.json, app service configuration, and Azure Key Vault for secrets. Learn deployment slots, environment-specific overrides, and Key Vault access.

Understand encryption in transit for storage accounts using HTTPS, and encryption at rest with Microsoft-managed or customer-managed keys via an Azure key vault; explore infrastructure encryption as a second layer.

Learn how Azure SQL databases encrypt data at rest with transparent data encryption and enforce encryption in transit with TLS 1.2, plus server and database level options and Always Encrypted.

Configure a customer-managed key for a SQL database by creating a key vault, provisioning an RSA 2048 key, enabling purge protection, and linking the key to transparent data encryption.

Configure Application Insights to monitor web apps with Azure Monitor across development to production, gaining real-time telemetry, availability metrics, and autoinstrumentation across supported platforms.

Learn to monitor and analyze metrics, logs, and traces with Azure Monitor and Application Insights, create app dashboards, and validate availability through tests and live metrics using instrumentation.

Explore API management as a front-end for multiple APIs, enforcing policies, quotas, and documentation while provisioning a developer-tier service and configuring pricing, regions, and monitoring.

Configure and explore API management by deploying the service, using the developer portal and gateway, managing APIs and products, and validating access with subscription keys and test calls.

Learn to use the API management service to apply policies for security, throttling, quotas, mock responses, and required headers, and to test inbound and outbound processing.

Add a new API to Azure API Management by importing from OpenAPI or an existing function app. Define operations and parameters, test requests, and publish a single consolidated API URL.

Learn how the OpenAPI specification, formerly Swagger, describes API operations and outputs. See how Azure API Management imports and manages external APIs from an OpenAPI definition.

Learn how to publish and manage a public-facing developer portal for your APIs, including sign-up, in-browser testing with try it, subscription keys, and access control.