Learn Microsoft Azure

How Azure organizes everything: a tenant, management groups, subscriptions, resource groups and resources.

Where Azure resources physically run, and how zones and paired regions protect you from failures.

Azure Resource Manager is the single API behind the portal, CLI and IaC; learn resource IDs, providers, tags and locks.

Sign in, pick a subscription, create resources and shape output with --query and -o.

Declare resources in Bicep files with params, outputs and modules, and deploy them repeatably.

Enforce and audit rules on resources with policy definitions, initiatives, effects and remediation.

How ARM actually applies templates: PUT semantics, incremental vs complete mode, what-if, deployment stacks and limits.

Design a multi-subscription Azure estate: management group hierarchy, platform landing zones, hub-spoke and subscription vending.

Users, groups, app registrations and service principals: the identities Azure authenticates.

Grant least-privilege access with role assignments: who (principal), what (role) and where (scope).

Give Azure-hosted code an Entra identity with no secrets to store, rotate or leak.

Store secrets, encryption keys and TLS certificates centrally, accessed through RBAC and managed identities.

Let GitHub Actions, Kubernetes pods and other clouds get Entra tokens by exchanging their own OIDC tokens, with no secrets.

Create and manage Linux VMs: images, sizes, disks, SSH access and what you pay for.

Host web apps and APIs on a managed platform: plans, runtimes, app settings and deployment slots.

Run event-driven code that scales automatically, wired to HTTP, timers, queues and more with triggers and bindings.

Run containers serverlessly with ingress, revisions and KEDA autoscaling, pulling images from Azure Container Registry.

Run many identical VMs behind a load balancer, spread across zones, with autoscale and automatic repair.

Managed Kubernetes: control plane tiers, node pools, networking, identity and upgrades.

Build private networks with address spaces and subnets, and filter traffic with network security groups.

Reach PaaS services over a private IP in your VNet, and get the DNS right so names resolve to it.

Global layer-7 entry point with caching, WAF and failover across regions, and how it compares to other load balancers.

One storage account hosts blobs, queues, files and tables; choose its kind, performance and redundancy.

Store objects in containers, pick hot/cool/cold/archive tiers, and grant temporary access safely.

Managed SQL Server in the cloud: purchasing models, serverless, Entra authentication and high availability.

A globally distributed NoSQL database: accounts, containers, items, partition keys and request units.

Simple, cheap message queues and managed SMB/NFS file shares inside a storage account.

Design partition keys for scale, avoid hot partitions, and choose among the five consistency levels and multi-region writes.

How Azure bills you, how to estimate costs, and how to watch spending with cost analysis and budgets.

Collect metrics, logs and traces: Log Analytics workspaces, diagnostic settings and Application Insights.

Query Log Analytics with KQL and turn signals into actionable metric, log and activity alerts.

Cut spend with reservations, savings plans, Spot and rightsizing, and run cost as an engineering discipline.

Set RTO/RPO targets and build zone-redundant, multi-region architectures with tested failover.

Enterprise messaging with queues, publish/subscribe topics, sessions, dead-lettering and transactions.

Push-based events with Event Grid, and when to pick it over Service Bus, Event Hubs or Queue Storage.

Put a managed gateway in front of your APIs for security, throttling, transformation and a developer portal.