Account
- An account has at least one subscription
- types: Free, pay-as-you-go, student, enterprise
- access control and billing occur at subscription level
- Microsoft 365 subscription is different from Azure subscription
- 365 can be linked with Azure by sharing an Active directory allowing users to access both
- Subscriptions are billing units.
- Management Group can group multiple subscriptions or other management groups
- can specify policies that can be enforced across subscriptions
- ability to create repeatable set of Azure resources
- declarative way to orchestrate deployment of Roles, Policies, ARM Templates, Resource groups
- Unlike ARM templates, Blueprint templates are maintained beyond initial deployment
- Helps with auditing and tracking
Compliance Manager
- Trust Center web-site offers information about security, privacy, compliance offering, policies across Azure
- Service Trust Portal STP hosts Compliance Manager service that publishes audit reports and other compliance reports
- Compliance Manager is risk-assessment dashboard to track regulatory compliance activities
- provides recommendations only
- monitor service health by collecting monitoring data from applications, OS, Azure resources, Azure subscriptions, Azure tenant
- Application Insights: Monitor for Containers, Monitor for VM
- Monitor can, send out alerts or autoscale
- Provide visualizations: Dashboards, Views, Power BI
- Some of the metrics require Diagnostic and Logs to be turned on for the VMs
Azure Service Health
- Includes these views:
- Azure Status: global health of all services
- Service Health: dashboard of a particular service in the region it's running
- Resource Health: provides historical state of resources that help with diagnosis