Microsoft Azure - 3.1 and 3.2 - Describe Cost Management and Features and Tools for Governance and Compliance in Azure

Resource Type

Consumption

Maintenance

Geography

Subscription Type

Azure Marketplace

The OpEx cost can be impacted by many factors including (6)

Type

Setting

Azure Region

What will have an impact on resource cost? (3)

Pay as you go

Buy upfront for a set amount of cloud resources

Characteristics of Consumption Costs (2)

You can rapidly adjust resources based on demand

Resource groups help with organization

Characteristics of Maintenance costs (2)

Costs include power, labor, taxes and fees depending on the global location

Costs vary based on deployed region

Network traffic and bandwidth costs going outbound is based on zones

Characteristics of Geography costs (3)

Zone

A geographical grouping of Azure regions for billing purposes.

Some Azure subscription types also include usage allowances, which affect costs.

Characteristics of Subscription costs

Lets you purchase Azure-based solutions and services from third-party vendors

Characteristics of Azure Marketplace costs

Pricing Calculator

Total Cost of Ownership (TCO)

What two calculators that help you understand potential Azure expenses?

Pricing Calculator

Designed to give you an estimated cost for provisioning resources in Azure and allows you to get estimates for individual resources and build out a solution

Total Cost of Ownership

Designed to help you compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure

Cost Management

Provides the ability to quickly check Azure resource costs, create alerts based on resource spend, and create budgets that can be used to automate management of resources.

Cost Analysis

A subset of Cost Management that provides a quick visual for your Azure costs a subset of Cost Management that provides a quick visual for your Azure costs

Cost alerts

Provide a single location to quickly check on all of the different alert types that may show up in the Cost Management service

Budget

Credit

Department spending quota

Three types of Cost Alerts

Budget Alerts

Notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget.

Credit Alerts

Notify you when your Azure credit monetary commitments are consumed.

Department Spending Quota Alerts

Notify you when department spending reaches a fixed threshold of the quota

Budget

Where you set a spending limit for Azure.

Place them in their own subscriptions

Resource Groups

Resource Tags

What are some ways to organize resources? (3)

Resource Tags

Provide extra information, or metadata, about your resources

Resource management

Cost management

Operations management

Security

Governance and regulatory compliance

Workload optimization and automation

Metadata from resource tags are useful for (6)

Microsoft Purview

A family of data governance, risk, and compliance solutions that helps you get a single, unified view into your data

Automated data discovery

Sensitive data classification

End-to-end data lineage

With Microsoft Purview, you can stay up-to-date on your data landscape thanks to: (3)

risk and compliance

unified data governance.

Two main solution areas comprise Microsoft Purview:

Protect sensitive data across clouds, apps, and devices.

Identify data risks and manage regulatory compliance requirements.

Get started with regulatory compliance

Microsoft Purview, by managing and monitoring your data, is able to help your organization: (3)

Create an up-to-date map of your entire data estate that includes data classification and end-to-end lineage.

Identify where sensitive data is stored in your estate.

Create a secure environment for data consumers to find valuable data.

Generate insights about how your data is stored and used.

Manage access to the data in your estate securely and at scale.

Microsoft Purview’s unified data governance helps your organization: (5)

Azure Policy

A service in Azure that enables you to create, assign, and manage policies that control or audit your resources. These policies enforce different rules across your resource configurations so that those configurations stay compliant with corporate standards.

Highlights non-compliant resources

Policies are inherited

Prevents non-compliance resource creation

Characteristics of Azure Policies (3)

Initiatives

Enables you to define both individual policies and groups of related policies and contains all of the policy definitions to help track your compliance state for a larger goal

Resource lock

Prevents resources from being accidentally deleted or changed.

Can be applied to a resource, a resource group, or an entire subscription

Inherited

Characteristics of Resource Locks (2)

Delete

Read Only

There are two types of resource locks:

Delete Resource Lock

Means authorized users can still read and modify a resource, but they can't delete the resource

Read Only Resource Lock

Means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role

Microsoft Service Trust Portal

A portal that provides access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices