Hands-On : Azure SQL Database Training for IT Architect

Explore Azure SQL service tiers and availability models, including vCore and DTU purchasing, scale-up and read scale-out, and AlwaysOn availability groups with primary and read-only replicas.

Learn scale-up and read scale-out in Azure SQL Database by creating a resource group, SQL server, a single database, and using secondary replicas for reads.

Elastic pool provides a cost-effective shared resource pool to manage and scale multiple Azure SQL databases, using the General Purpose tier.

Explore elastic query to run cross-database queries by linking two SQL databases, creating product and product2 tables, and querying via an external data source and external table.

Explore high availability and disaster recovery options in Azure SQL Database, including zone-redundant deployments across multiple availability zones and geo-replication for cross-region DR.

Learn how Azure SQL Database automatically backs up data with full, differential, and transaction log backups, enabling point-in-time restore and configurable retention policies across service tiers.

Export an Azure SQL database to a .bacpac file in a storage blob container, and import it into a new database on a second server, using SQL authentication.

Explore sql authentication for Azure sql database security, including creating sql server logins and database users, linking them, and assigning db_datareader roles to demonstrate access control.

Explore Azure AD authentication for Azure SQL Database security, demonstrating user ID/password and service principal methods, including creating a database user, assigning roles, and connecting via Azure Data Factory.

Enable managed identity authentication to connect Azure SQL without passwords; register the resource as an Azure AD enterprise app and create a database user for seamless access.

Learn how to control public network access to Azure SQL Database with firewall rules, including enabling exceptions or allowing outbound IPs, and contrast with service endpoint and private endpoint access.

Enable service endpoint access to Azure SQL Database by adding a virtual network rule in the Networking pane, letting resources in a virtual network connect without firewall tweaks.

Enable private endpoint access for Azure SQL by assigning a private IP and DNS A record in a virtual network, and see how connectivity differs from service endpoints.

Explore always encrypted in Azure SQL, alongside dynamic data masking and append-only ledger tables for integrity, by encrypting columns with Azure Key Vault and controlling access via Azure AD permissions.

Learn how dynamic data masking hides part of data using custom rules, as demonstrated on the store_tel column with exposed prefix, suffix, and padding, under a db_datareader user.

Explore ledger tables for data security by comparing append-only and updatable ledger configurations; learn to create balance and balance_ledger views, and perform insert, update, delete while inspecting history.

Learn how to enable Azure SQL auditing, capture four events, and store them in Log Analytics or other Azure services, including distinguishing sensitive data access with Data Discovery & Classification.

Deploy Azure SQL databases with ARM templates to automate infrastructure as code, then use PowerShell to deploy templates and manage resources.

Learn to deploy an Azure SQL database with Azure DevOps by managing ARM templates in a git repository. Build a pipeline and execute automated deployments from the project.

Learn to parameterize Azure DevOps pipelines with Azure Key Vault to securely manage SQL administrator and Azure AD credentials, create secrets, and deploy ARM templates in incremental mode.

Monitor Azure SQL with metrics and dashboards, pin data space used percent, data IO percentage, and log IO percentage to a dashboard, and configure diagnostic settings to archive metrics.

Trigger alerts from metrics by creating a condition and an action group, using the 'data space used percent' metric with a 10% threshold, sending an email notification.

Explore dynamic management views for resource statistics, including sys.resource_stats with 14 days and sys.dm_db_resource_stats with 1 hour history. Identify io intensive queries with sys.dm_exec_query_stats and monitor running queries through sys.dm_exec_query_requests.

Learn to use extended events to capture state when events occur, configure storage and SAS token, create and run an event session, and analyze data for slow queries.