Posts

Showing posts with the label ARM

Governance & Manageability (part 2)

Image
  Azure Resource Manager Templates Templates are known for providing unique benefits comparing to the traditional deployment methods that rely on the GUI or scripting and programming languages. Similar to the scripts, they can facilitate the deployment of the multicomponent solutions in an automated manner but don't specify the individual steps required to provision these solutions by simply defining their intended end state. All this results in the minimized deployment deployment time and reduces the potential for errors.  You can easily deploy the templates multiple times to the same resource group with the same outcome which is useful when you want to recreate an original deployment or remediate any issues resulting from post-deployment changes. Templates also supports VM extensions, allowing you to configure operating systems within Azure VMs as a part of their deployment. These extensions includes configuration management services, such as Power-Shell Desired State Config...

Governance & Manageability (part 1)

Image
  Azure Resource Manager It is the deployment and management service of Azure providing a consistent management layer that enables you to create, update, and delete resources in your Azure subscription. The core concept of an Azure Resource Manager is a resource which is an elementary building block of the services and solutions that you can deploy into Azure.  Every resource exist in one and only one resource group which is a logical container that can easily simplify managing multiple resources. Resources in the same resource group generally shares the same life cycle, while you will have full fexibility in choosing your own criteria for grouping resources. For example, you can delegate permissions, identify costs, and audit events for all resources within a group in a single step. You can also remove them by deleting the group in which they can reside.    Role-Based Access Control (RBAC) RBAC gives you the capability to grant appropriate access to the Azure AD use...

Identity Services (part 1)

Image
  Active Directory Domain Services (AD DS) AD DS is widely known for providing a variety of business-related and technological benefits by serving as an identity as well as access management solution for on-premises, independently managed isolated environments and the most of its characteristics reflects this underlying premise. There are three main scenarios that involves AD DS and Azure VMs: AD DS deployed to Azure VMs without cross-premises connectivity- This deployment results in the creation of a new forest, with all domain controllers residing in Azure. You can use this approach if you plan implement the Azure-resident workloads hosted on Azure VMs that rely on Kerberos authentication or GROUP Policy but have no on-premises dependencies. Existing on-premises AD DS deployment with cross-premises connectivity to an Azure virtual network where the Azure VMs reside- This scenario uses an existing on-premises AD environment to provide authentication for Azure VM-resident work...