AZ-900 Azure Governance, Compliance, and Monitoring

Azure Cost Factors

Services Used, Workloads, Networking Needs, and Storage Requirements

Total Cost of Ownership Calculator (TCO)

helps understand cost savings of operating solution on Azure compared to on-premises datacenter

Pricing Calculator

help determine which Azure service best fits your budget; designed to give you an estimated cost for provisioning resources in Azure - for information purposes only

CapEx (Capital Expense)

costs of building out and maintaining infrastructure and facilities

Op Ex (Operational Expense)

cost of renting infrastructure as you need it, whether it's compute, storage, networking, etc.

OpEx cost factors

Resource type, consumption, maintenance, geography, subscription type, Azure Marketplace

Pay-as-you-go

cloud payment model where you pay for the resources that you use during a billing cycle

Bandwidth

data moving in and out of Azure datacenters

inbound data transfer

free transfer of data going into Azure datacenters

outbound data transfer

data leaving Azure datacenters - pricing is based on zones

zone

geographical grouping of Azure regions for billing purposes

Azure Marketplace

lets you purchase Azure-based solutions and services from third-party vendors

Cost Management

provides the ability to quickly check Azure resource costs, create alerts based on resource spend, and create budgets that can be used to automate management of resources

Cost analysis

subset of Cost Management that provides a quick visual for your Azure costs - you can view by billing cycle, region, resource, etc.

Cost Alerts

provide a single location to check on all of the different alert types that may show up in Cost Management Service

Budget Alerts, Credit Alerts, Department Spending quota alerts

Cost Alert Types

Budget alerts

notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition

Credit Alerts

notify you when your Azure credit monetary commitments are consumed - generated automatically at 90% and at 100% of your Azure credit balance

Department spending quota alerts

notify you when department spending reaches a fixed threshold of the quota (think percentages)

budget

where you set a spending limit of Azure

Resource Tags

another way to organize resources to provide extra information, or metadata about your resources

Microsoft Purview

family of data governance, risk, and compliance solutions that help you get a single, unified view into your data - brings insights about your on-premises, multicloud, and software-as-a-service data together

Solution Areas of Microsoft Purview

Risk and Compliance and Unified Data Governance

Azure Policy

service in Azure that enables you to create, assign, and manage policies that control or audit your resources - the policies enforce different rules across your configurations so that those configurations stay compliant with corporate standards

initiatives

individual policies and groups of related policies

Azure Policy initiative

way of grouping related policies together

Azure Policy Initiative Definitions

Monitor unencrypted SQL Database in Security Center, Monitor OS vulnerabilities in Security Center, and Monitor missing Endpoint Protection in Security Center

Resource Lock

prevents resources from being accidentally deleted or changed

Delete and ReadOnly

Types of Resource Locks

Delete Resource Lock

authorized users can still read and modify a resource, but they can't delete the resource

ReadOnly Resource Lock

authorized users can read a resource, but they can't delete or update the resource

Microsoft Service Trust Portal

portal that provides access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices

Azure portal , Azure PowerShell, Azure Command Line Interface (CLI)

tools for managing Azure environment

Azure Portal

web-based, unified console that provides an alternative to command-line tools - for creating, configuring, and controlling all Azure services and subscriptions

Azure Cloud Shell

browser-based shell tool that allows you to create, configure, and manage Azure resources using a shell

Azure PowerShell and Azure Command Line Interface

what Azure Cloud shell supports

Azure PowerShell

shell with which developers, DevOps, and IT professionals can run commands called command-lets (cmdlets)

Azure CLI

shell with which developers, DevOps, and IT professionals can run Bash commands

Azure Arc

lets you extend your Azure compliance and monitoring to your hybrid and multi-cloud configurations - simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform

Azure Resource Manager (ARM)

deployment and management service for Azure - provides a management layer that enables you to create, update, and delete resources in your Azure account

Infrastructure as code

concept where you manage your infrastructure as lines of code - can use to manage entire deployments using repeatable templates and configurations

ARM templates and Bicep

examples of using infrastructure as code with the Azure Resource Manager to maintain your environment

ARM templates

describe the resources you want to use in a declarative JSON format - with this the deployment code is verified before any code is run; has parallel deployment and repeatable results

Bicep

language that uses declarative syntax to deploy Azure resources; the file defines the infrastructure and configuration; has parallel deployment and repeatable results

Azure Advisor

evaluates your Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce cost - designed to help you save time on cloud optimization

Azure Advisor Recommendation Categories

Reliability, Security, Performance, Operational Excellence, and Cost

Azure Status, Service Health, Resource Health

Azure Service Health services

Azure Status

broad picture of the status of Azure globally; global view of the health of all Azure services across all Azure regions

Service Health

provides a narrower view of Azure services and regions; focuses on the Azure services and regions you're using

Resource Health

tailored view of your actual Azure resources; provides information about the health of your individual cloud resources

Azure Monitor

platform for collecting data on your resources, analyzing that data, visualizing the information, and even acting on the results; can monitor resources an all types of cloud providers

Azure Log Analytics

tool in the Azure portal where you'll write and run log queries on the data gathered by Azure Monitor; robust tool that supports both simple, complex queries, and data analysis

Azure Monitor Alerts

automated way to stay informed when Azure Monitor detects a threshold being crossed; can even attempt corrective action on trigger

Application Insights

Azure Monitor feature that monitors your web application; capable of monitoring applications that are running in all kinds of cloud environments