Getting started with Azure Cloud

Distinguish an App Service web app from its hosting plan and understand how the plan defines compute capacity, region, and pricing.

Create an App Service web app in the Azure portal and review the hosting plan, runtime, region, and deployment settings.

Explore the deployment options introduced for App Service and understand how application code or container images can be delivered to a web app.

Follow the recorded .NET 6 deployment example using App Service Deployment Center. The runtime shown is historical; use a currently supported .NET version for new deployments.

Update an existing web app through the configured Deployment Center integration and observe how application changes are deployed.

Use Azure CLI commands to provision the hosting resources for a web app and review the parameters needed for repeatable creation.

Explore an ARM template for web app infrastructure and deploy its resources using the template parameters.

Define web app infrastructure in Bicep and deploy it using a readable, parameterized infrastructure-as-code configuration.

Describe App Service infrastructure with Terraform and follow the provisioning workflow to review and apply the configuration.

Discover Azure Container Apps and how its managed hosting, ingress, revisions, and event-driven scaling support containerized applications.

Create a Container App, select its container image and environment, and configure the settings needed to run and access the application.

Deploy frontend and backend containers and configure how the two application components communicate within the Container Apps architecture.

Explore the role of a Container Apps environment and the shared configuration available for networking and observability.

Review Container Apps configuration options for revisions, scaling, ingress, and application settings.

Compare Azure database hosting options and distinguish managed database services from running a database server in your own virtual machine.

Create an Azure SQL logical server and review its administrative and connection settings before adding databases.

Add a database to an Azure SQL logical server and review compute, storage, backup redundancy, and network-access options.

Create tables in the Azure SQL database and review how their columns and data types define the structure used to store application data.

Provision an Azure virtual machine and review its operating system, size, storage, networking, and access settings in the portal.

Establish a Remote Desktop connection to the Windows VM using the connection details and credentials configured for the machine.

Attach additional storage to a virtual machine and review the data disk configuration separately from the operating system disk.

Use Azure Bastion to connect to a VM through its private network address without requiring a public IP on the target machine.

Resize a virtual machine to change its available compute capacity and review the size options offered for the VM.

Distinguish stopping a VM from deallocating its compute resources, and understand why retained disks and other resources can still incur charges.

Delete a lab VM and review its associated resources so that retained storage and networking components are not overlooked during cleanup.

Understand how managed identities let Azure workloads authenticate without storing an application password, and distinguish system-assigned from user-assigned identities.

Create a user-assigned managed identity, attach it to App Service, and grant the role used to read Azure resource information in the demonstration.

Explore Azure service principals and how application identities are used to authenticate and access Azure resources.

Visualize how Azure Key Vault protects secrets, keys, and certificates and how applications access these objects through an authenticated service.

Review Key Vault concepts, supported object types, and the access and management responsibilities involved in using the service.

Create a Key Vault and add a secret, then inspect the configuration needed to store and retrieve the protected value.

Explore Key Vault management concepts, including access, recovery protection, and the network paths applications use to reach a vault.

Review practices for organizing vaults, limiting permissions, using managed identities, and protecting application secrets.

Compare Azure RBAC with Key Vault access policies and understand how the selected permission model controls access to vault objects.

Locate Key Vault logging and metrics options and understand how operational visibility helps monitor vault activity.

Review the pricing considerations introduced for Key Vault and relate cost to service usage. Check current pricing before estimating charges.

Compare the backup and recovery options introduced for Key Vault objects and review the constraints that affect restoring protected data.

Review the lecture discussion of request throughput and object versions. Consult current Key Vault documentation for operation-specific limits and backup constraints.

Explore Azure Policy options for assessing and enforcing configuration requirements on Key Vault resources.

Manage secret and certificate objects in the portal and inspect their versions, properties, and lifecycle settings.

Create an Azure Kubernetes Service cluster and review the cluster, node pool, and networking settings used in the demonstration.

Inspect the Azure infrastructure associated with an AKS cluster and relate the managed resources to the cluster node pools and networking.

Deploy a container image as a Kubernetes Pod and inspect the resulting workload in the AKS cluster.

Create a Kubernetes Deployment and understand how its Pod template, labels, and replica count define the desired application workload.

Run commands inside a container in a Kubernetes Pod to inspect its runtime environment and troubleshoot application behavior.

Use kubectl to change the desired number of application Pod replicas and observe the updated workload.

Create an internal Kubernetes Service and use selectors and ports to provide a stable access point for matching application Pods.

Expose the application with the public LoadBalancer Service configuration shown and inspect the external address provisioned for access.

Explore the Kubernetes resources created in the cluster and inspect their configuration and current status.

Understand how App Service Domains supports custom domain registration and how Azure DNS records connect a domain to an application.

Configure a custom domain for the demonstrated Container App using the required DNS records and domain-ownership validation.

Explore how Logic Apps combines triggers, connectors, actions, and control flow to build integration workflows with a visual designer.

Build the demonstrated HTTP-triggered email workflow in the portal designer and configure the request data used by its actions.

Automate creation of Logic Apps resources with Terraform and review how workflow configuration is included in the deployment.