
Discover azure cloud services across PaaS, IaaS, serverless, and CaaS, deploying web apps and databases like SQL Server, MariaDB, Postgres, and Cosmos DB, along with containers and secure networking.
Learn to start with a free azure subscription, including a 200 usd credit for one month, plus options like the github student developer pack and msdn for training.
Explore the Azure portal dashboard, switch between multiple subscriptions and directories, customize appearance and startup views, view resources and subscription costs, and use Cloud Shell for command line.
Discover how Azure App Service plan defines compute resources, region, and scale-out, and how pricing tiers from free to isolated shape features for deploying web apps via the Azure portal.
Create an Azure app service via the portal, configure a resource group and app service plan, publish code with a runtime stack, and access the web app URL.
Explore multiple deployment options for app service, including deployment center with GitHub actions, VS Code extensions, FTP upload, and Azure CLI, plus ARM templates and DevOps pipelines.
Demonstrates deploying a .NET 6 web app to Azure App Service via Deployment Center, using GitHub Actions to build, publish, and deploy artifacts to production.
Update your web app hosted on Azure App Service by modifying the GitHub repository and triggering the deployment pipeline via a master branch push in Deployment Center.
Learn to automate Azure deployments using the Azure CLI cross-platform, creating a resource group, app service plan, and web app, then view resources and the app URL.
Learn to deploy Azure resources with ARM templates by defining a web app and app service plan in JSON, parameterizing settings, and deploying via Azure CLI with what-if previews.
Create a web app and app service plan with Azure Bicep, deploy via Azure CLI or Cloud Shell, preview changes with what-if, and manage resource groups, parameters, and pull requests.
Learn to create an Azure App Service with Terraform by deploying a resource group, app service plan, and app service using a GitHub template, variables, and outputs.
Discover Azure container apps, a fully managed serverless on Kubernetes for containerized microservices, with Envoy, KEDA, and Dapper enabling event-driven scaling.
Create an Azure container apps environment and deploy a sample container, selecting consumption plan or workload profiles, enabling public ingress, and viewing the app at its containerapps.io URL.
Deploy and connect backend and frontend containers in Azure container apps, using DNS, public ingress, and environment variables to expose the two containers' API and power the frontend.
Explore the container apps environment in the Azure portal, including overview, access control, certificates, custom domains, Azure Files mounts, app deployments, monitoring, and template export.
Explore container apps in azure, including ingress and public endpoints, authentication with OpenID Connect providers, secrets and key vault references, and scalable deployment with GitHub workflows.
Explore Azure SQL Database services to host customer data in the Azure cloud with fully managed, highly available, scalable options, automated backups and updates, and serverless or hyperscale capabilities.
Learn to create an Azure SQL server in the portal by configuring a resource group, server name, location, authentication, firewall rules, reviewing, and creating, then access the server URL.
Create an Azure SQL database on an existing server, name it, select production standard, configure backups and networking, adjust security settings, and finalize to obtain the connection string.
Learn to create tables in Azure sql database using transact sql in the Azure portal query editor, configure firewall rules for your ip, and insert and edit data in dbo.persons.
Create an Azure VM in the portal by selecting your subscription and resource group, configuring OS and data disks, networking, and a public IP for access via RDP or SSH.
Connect to an Azure VM via RDP by downloading the RDP file, validating port 3389 access, and authenticating with credentials to view VM performance and the C drive.
Create and attach a 512 GB data disk to the Azure VM via the portal. Initialize the disk, assign drive letter E, and persist data instead of the temporary disk.
Configure an Azure virtual machine and connect using RDP or SSH, then secure access with Azure Bastion that exposes only a private IP and configures the bastion subnet.
Scale up a virtual machine in the Azure portal by resizing to 32 gigabytes of memory and 2 vcpus, noting the restart and Azure Bastion access.
Learn how to stop or allocate (deallocate) an Azure virtual machine using the portal, Azure CLI, or PowerShell to control cpu and memory usage and reduce costs while preserving storage.
Learn how to delete an Azure virtual machine and its associated resources, including the OS and data disks, and how to remove all resources by deleting the resource group.
Learn how Azure managed identities provide secure resource access without passwords or expiry maintenance. Compare system and user identities, attach to resources, and use in hybrid scenarios with service principals.
Take a hands-on demo of creating a user-assigned Azure managed identity, attaching it to an app service, assigning roles, and using it to obtain access tokens for resource graph.
Learn to create and manage Azure service principals granting machine and app access to subscriptions or resource groups using roles such as reader and contributor, with lifetimes.
Explore Azure Key Vault as the central secure store for secrets, certificates, and keys, using Azure AD identities, managed identities, and the policies applied to the key vault.
Discover how Azure Key Vault manages keys, secrets, and certificates, supports 12-factor configuration, and enables per-application and per-environment vaults with managed identities and object-level access via rbac.
Learn to create an Azure Key Vault, manage secrets, keys, and certificates, and apply access control with policy-based and rbac approaches, including secret creation and role assignment.
Manage Azure Key Vault with policies for secret and certificate expiration, near-expiration events and automated authorization, enable soft delete and purge, and implement versioning and cross-region backups with read-only period.
Apply best practices for Azure Key Vault: one vault per application and environment, migrate to Azure Airbag, use user-managed identity, and auto rotate certificates alongside private endpoints.
Apply the airbag model to Azure Key Vault, with roles like Azure Key Vault administrator and certificates officer to control access and data plane operations.
Enable log analytics for an Azure service, view logs and metrics like secret get latency, and pin insights to dashboards or share them with the application team via workbooks.
Explore Azure Key Vault pricing, noting the vault is free, with costs per transaction, rotation, and renewals; for example, 1 million requests cost $3.
Discover how to implement Azure Key Vault backup with multi-region failover, per-environment vaults, and airbag-based access control, using managed identities to access secrets, keys, and certificates.
Learn how Azure services impose request limits and version caps: up to 4000 requests per 10 seconds across all objects in a vault, and up to 500 versions per object.
Apply Azure policies to control key vault deployment and compliance. Enforce private endpoint access, private link connectivity, and certificate and secrets validity, with audit, deny, or disable actions on violations.
Generate, import, and rotate key vault certificates and secrets, set automatic renewal and expiration alerts, and grant managed identity access via RBAC for secure use.
Learn to create and configure an Azure Kubernetes Service cluster, deploy pods, deployments, and services, and explore networking, RBAC, private clusters, and registry integration.
Explore how a managed Azure Kubernetes cluster is organized by resource groups, virtual networks, and IPs. Learn to connect to the cluster, download kubeconfig, and view node details.
Deploy a pod in a Kubernetes cluster by generating a minimal yaml with kubectl, run an engine x container, and inspect the pod, its IP address, and the default namespace.
Create a deployment object to manage and scale multiple pods, set three replicas, deploy via the command line, and spread pods across nodes for availability.
Access a pod in an Azure Kubernetes cluster with kubectl exec to open a shell and explore container, then learn pod-to-pod communication via IP addresses and Calico network policies.
Scale the Engine X deploy replicas to five with kubectl, verify via get deployments and get pods, then scale back to three pods.
Learn to expose a Kubernetes deployment as a stable internal service that routes traffic to pods by selector, using a DNS-like name and round-robin load balancing.
Learn how to switch a Kubernetes service from cluster ip to load balancer to expose a public ip, observe the external ip and access the service.
View Kubernetes resources by inspecting services, addresses, and the engine service in the cluster. Inspect pods and deployments across namespaces, and confirm the public IP created for the load balancer.
Acquire and configure custom domains with Azure App Service Domain, manage them via the Azure DNS zone, and learn about €11 per year with a five-day refund.
Create and configure an app service domain as a custom domain in Azure, verify availability, provide contact info, and configure DNS with Azure DNS for container apps.
Discover how to build low-code workflows in Azure Logic Apps with a visual drag-and-drop designer, using triggers and connectors to automate processes.
Create a logic app in the Azure portal using the Logic Apps designer, set up an HTTP request trigger, and send an email via Outlook from a POST payload.
Deploy an Azure Logic Apps workflow with Terraform, including an HTTP trigger and email action. Configure the API connection for authentication and run Terraform plan and apply to provision resources.
Important notice: The current version of this course is a preview, thus it is not yet complete. However more modules will be added each week.
Microsoft Azure cloud is a cloud platform for deploying enterprise applications. It have very rich set of services organized around categories like PaaS (Azure App Service, fully managed database services like Azure SQL Database for SQL Server, for Postgres, and even no SQL database like Cosmos DB), IaaS (like virtual machines...), CaaS (like Web App for containers, ACI, ACR, Container Apps, Azure Kubernetes Service AKS, ACR) and Serverless (like Azure Functions, Logic Apps...).
Course intro
What is the cloud
Create a subscription
Azure portal
Tour of the portal
Azure subscription (RBAC, cost)
Azure App Service & Plan
Introduction
Demo: Create Web App
Deploy .NET 6.0 Web App using VS Code
Azure CLI
IaC with ARM templates
IaC with Azure Bicep
IaC with Terraform
Cost of Azure services
Cost management
FinOps for cloud
DevOps for Azure
DevOps with Azure Pipelines
DevOps with Github Actions
Container services
Web App for containers
ACI
Container apps
AKS
ACR
Storage services
Storage account
SQL Server & Database
Cosmos DB
MySQL
Postgres
Compute services
Virtual machine
Network services
VNET & Subnet
Load Balancer
Traffic Manager
Front Door
Application Gateway
Security Services
Key Vault
Defender for Cloud
DDOS protection
Azure Firewall
Azure Arc
Arc enabled for Servers
Arc enabled for Kubernetes
Arc enabled for Database
Governance
Mannagement group
Subscription
Resource group
AuthN & AuthZ with Azure AD & RBAC
Intro to Azure AD
Service Principal
Managed Identity
Azure AD users & groups
Assign roles
Custom roles
Cloud Adoption Framework (CAF) & Landing Zone
Resources
Architecture center