Cloud is for all. There's so much passion and convictions among people involved in Cloud Computing that we might forget how inclusive is the Cloud and Microsoft Azure in particular. We all have heard about the DevOps story, where developers and IT operators are working hand and hand to create more value for the customer, but it's much more than this.

1. Azure. Cloud for all.
@danvy

2. Session submited
#fingerscrossed

3. Best Practices Reliability and
Scalability on Azure

4. Keynote invitation
#thankyou

5. What is Azure?

6. TrustedProductive IntelligentHybrid

7. TrustedProductive IntelligentHybrid
Azure. Cloud for all.

8. TrustedProductive IntelligentHybrid
Azure. Cloud for all.

9. Cloud On premise

10. Azure
data services
SQL
Server
Azure Security
and Management
On-premises
infrastructure
Azure
services
Azure
Stack
Data
platform
Security and
management
Unified cloud
platform
Common
identity
Azure Active
Directory
Active
Directory
The only consistent, hybrid cloud

11. At the edge and
disconnected
Cloud application
model on-premises
Meet every regulatory
requirement

12. PaaS IaaS

13. Modern Legacy

14. PaaS IaaS

15. Azure Functions

16. Millions of devices feed
into Stream Analytics
Store data in
SQL Online
Transform to structured data

17. ACI provides infinite
container-based scale
The ACI Connector for
K8s brings them
together
Kubernetes provides rich
orchestration capabilities
Azure Container Instances (ACI)
ACI Connector for Kubernetes
PREVIEW

18. Azure Container Service (AKS)
A fully managed Kubernetes cluster
Managed
Azure infrastructure services
Docker
Kubernetes
• Managed control pane
• Automated upgrades, patches
• Easy cluster scaling
• Self-healing
• Cost savingsApplication
architect
Infrastructure
architect
Applications
Operations

19. © Microsoft Corporation
High productivity
development
Azure Service Fabric

20. © Microsoft Corporation
Proven platform powering core Azure
and Microsoft services
Microsoft has deep expertise in running global services such
as Cortana, Skype & Cosmos DB
Service Fabric is the foundational technology
powering these services & core Azure infrastructure
Sample scale of one of these services: 60 billion
events per day with millions of databases
About 30% of Azure’s cores run Service Fabric directly.
Service Fabric Manages Millions of Service upgrades weekly
within Microsoft alone
SQL
{ }Power BI
Dynamics
Intune
Cortana Skype
Cosmos DB
IoT Hub
Event Hub
SQL Database

21. New New New

22. Infrastructure
Managed
Containers
Clusterless &
Serverless
Service Fabric Container Service
AKS/Kubernetes
App Service
Functions
Logic Apps
VM
VM Scale Sets
Container
Instances

26. Big business Small business

27. 50Azure
regions

28. Free Paid

29. azure.com/free

32. Development Operations

33. Dev Ops

34. DevOps: the three stage conversation

35. People

36. Plan
1 Monitor + Learn
ReleaseDevelop + Test
2
Development Production
Process
4
3

37. DevOps
Visual Studio
Application Insights
DevOps is the union of people, process, and products
to enable continuous delivery of value to our end
users.

38. Code - Cloud first, then move on-premises
One code base with multiple delivery streams
Shared abstraction layer
Single master branch, multiple release branches
Update1
Update2
UpdateN
VisualStudioTeam Services
Team FoundationServer

39. Building confidence
Millions of users and most of Microsoft
22,781
23,462
26,080 28,068 29,487
32,061 32,956 33,830 35,138 36,452 36,964 37,851
41,024
44,438
48,033 50,108
53,367
57,727 58,493 60,768 61,760 62,169 62,804 61,362
65,392 66,037
69,405 68,194
70,974 73,101 73,452 75,713
75,197
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep
2015 2016 2017

42. Open Source Microsoft

43. Challenges with
IaaS/on-premises
offerings:
Tedious set-up and maintenance requirements
Expensive and complex HA solutions
Achieving end-to-end security
Over-provisioning of resources to achieve scale
Unpredictable costs
CUSTOMERS WANT ENTERPRISE-GRADE MANAGED SERVICES
FOR OPEN SOURCE DATABASES

44. More choices and full integration into Azure’s ecosystem and services
Managed community
MySQL, PostgreSQL,
and MariaDB
Scale in seconds with
built-in high availability
Secure and compliantLanguages and
frameworks of your choice
Industry-leading
global reach
AZURE DATABASE SERVICES FOR
MYSQL, POSTGRESQL, AND MARIADB
Easy Lift and Shift Enterprise Ready
My

45. MANAGED COMMUNITY
MYSQL, POSTGRESQL,
AND MARIADB
Focus on your apps by leaving the management
and patching of your infrastructure and database
to an enterprise-ready cloud service
- Automatic updates
- Automatic security fixes
- Automatic new feature updates
My

46. LANGUAGES AND
FRAMEWORKS OF YOUR
CHOICE
Build on your terms with a platform that
supports your application development needs
and offers a fully integrated Azure experience

47. SCALE IN SECONDS
WITH BUILT-IN HIGH
AVAILABILITY
Stay up and running without the need for
additional replicas
Meet the most demanding spikes by elastically
scaling performance
Rely on easy and cost effective disaster recovery
set up with a single click

48. SECURE AND
COMPLIANT
Protect your data with up-to-date security and
compliance features with the Azure IP Advantage
- SOC2 - Compliant
- ISO 27001:2013 - Compliant
- ISO 27018:2014 -Compliant
- CSA STAR Certification - Compliant
- PCI DSS Level 1 – February 2018
- HIPAA / HITECH Act – February 2018
- ISO 27017:2015 – March 2018
- ISO 9001:2015 – March 2018
- ISO 22301:2012 – March 2018
- ISO/IEC 20000-1:2011 – March 2018
- VNET *by Q2 2018
SOC 2
Type 2
CSA STAR
Certification
Level 1

49. INDUSTRY-LEADING
GLOBAL REACH
Span with Azure’s availability in more regions
worldwide than any other cloud provider
- Currently in 22 of Azure’s 42 regions
worldwide
- All Azure regions will be coming with new
Generation 5 hardware
Generation 4
Generation 5
Generation 4 & 5
Coming

50. AI Dumb

54. Apps + insights
Social
LOB
Graph
IoT
Image
CRM INGEST STORE PREP & TRAIN MODEL & SERVE
Data orchestration
and monitoring
Data lake
and storage
Hadoop/Spark/SQL
and ML
.
IoT
Azure Machine Learning
T H E A I D E V E L O P M E N T L I F E C Y C L E

55. What is the Data Science VM?
https://aka.ms/dsvm/overview

56. Windows and Mac based
companion for AI development
Full environment set up (Python,
Jupyter, etc)
Embedded notebooks
Run History and Comparison
experience
New data wrangling tools
What Is It?

57. AI Powered Data Wrangling
Rapidly sample, understand, and
prep data
Leverage PROSE and more for
intelligent, data prep by example
Extend/customize transforms and
featurization through Python
Generate Python and Pyspark for
execution at scale

58. Experiment
Manage job for local and cloud experiments
Find support for Spark + Python + R (roadmap)
Execute jobs locally, on remote VMs (scale up),
on Spark clusters (scale out), or SQL on-premises
Create with Git-backed experimentation tracking of code,
config, parameters, and data
Discover and compare with detailed historical metadata

59. Local machine
Scale up to DSVM
Scale out with Spark on HDInsight
Azure Batch AI (Coming Soon)
ML Server
Experiment Everywhere
A ZURE ML
EXPERIMENTATION
Command line tools
IDEs
Notebooks in Workbench
VS Code Tools for AI

60. Azure Machine Learning Studio
Platform for emerging data scientists to
graphically build and deploy experiments
• Rapid experiment composition
• > 100 easily configured modules for
data prep, training, evaluation
• Extensibility through R & Python
• Serverless training and deployment
Some numbers:
• 100’s of thousands of deployed models
serving billions of requests

61. Language
Speech
Search
Machine
Learning
Knowledge Vision
Spell
check
Speech API
Entity linking
Recommendation
API
Bing
autosuggest
Computer
vision
Emotion
Forecasting
Text to
speech
Thumbnail
generation
Anomaly
detection
Custom
recognition
(CRIS)
Bing
image search
Web language
model
Customer
feedback
analysis
Academic
knowledge
OCR, tagging,
captioning
Sentiment
scoring
Bing
news search
Bing
web search
Text analytics
Cognitive Services APIs

62. Zoom on cognitive services : build applications that understand people
• Faces, images, emotion recognition and video intelligence
• Spoken language processing, speaker recognition, custom speech recognition
• Natural language processing, sentiment and topics analysis, spelling errors
• Complex tasks processing, knowledge exploration,
intelligent recommendations
• Bing engine capabilities for Web, Autosuggest, Image,
Video and News
“on the shelf”
Intelligence
Cognitive
Services

63. Seeing AI

66. Secured Unsecured

67. Secured Unsecured

68. Securing and managing the cloud foundation
JOINT RESPONSIBILITYMICROSOFT’S COMMITMENT
Physical assets
Datacenter operations
Cloud infrastructure
Securing and managing your cloud resources
Virtual machines
Applications & workloads
Data

69. Built-in security and management in Azure
Azure

70. Secure your cloud resources

71. Protect your data in the cloud

72. Monitor your cloud health

74. Internet Things

75. © Microsoft Corporation
Connected devices create profoundly
better customer experiences.
How does a consumer know the compressor
in their fridge needs to be replaced?
Option 1
Melted ice cream
Option 2
Predictive maintenance
It will change your
relationships with your
customers

76. © Microsoft Corporation
Observations on October 21, 2016 Botnet Attack
And, expose your
business to unequalled
risks…
Device security is a socioeconomic concern
Day 1 the attack is Technology headline in NY Times
Day 2 the attack is Politics headline
The attack exploited well-understood weaknesses
Weak common passwords, no early detection, no remote
update, etc.
Future attacks could be much larger
This attack was small; just 100k devices
Imagine a 100M-device attack
Future attacks could create huge liability exposure
Hackers could ”brick” an entire product line in a day
Actuating devices could cause property damage or loss
of life

77. © Microsoft Corporation
The internet security battle.
We’ve been fighting it for decades.
We have experience to share.

78. Highly-securedconnecteddevicesrequire7properties
Hardware
Root of Trust
Is your device’s identity
and software integrity
secured by hardware?
Defense
in Depth
Does your device remain
protected if a security
mechanism is defeated?
Small Trusted
Computing Base
Is your device’s TCB
protected from bugs in
other code?
Dynamic
Compartments
Can your device’s
security protections
improve after
deployment?
Certificate-Based
Authentication
Does your device use
certificates instead
of passwords for
authentication?
Failure
Reporting
Does your device
report back about
failures and
anomalies?
Does your device’s
software update
automatically?
Renewable
Security
= Silicon support required = OS support required = Cloud Service support required

79. © Microsoft Corporation
A new Azure Sphere class of MCUs,
from silicon partners, with built-in
Microsoft security technology provide
connectivity and a dependable
hardware root of trust.
A new Azure Sphere OS secured by
Microsoft for the devices 10-year
lifetime to create a trustworthy
platform for new IoT experiences
The Azure Sphere Security Service guards
every Azure Sphere device; it brokers trust
for device-to-device and device-to-cloud
communication, detects emerging threats,
and renews device security.
Azure Sphere is an end-to-end solution for securing MCU
powered devices

80. © Microsoft Corporation
Azure Sphere OS Architecture
App Containers for
POSIX (on Cortex-A)
App Containers for
I/O (on Cortex-Ms)
On-chip Cloud Services
HLOS Kernel
Security Monitor
Azure Sphere MCUs
OS Layer 4
OS Layer 3
OS Layer 2
OS Layer 1
Hardware
The Azure Sphere OS is optimized for IoT, Security
and MCU agility
On-chip Cloud Services
Provide update, authentication, and connectivity
Custom Linux kernel
Empowers agile silicon evolution and reuse of code
Security Monitor
Guards integrity and access to critical resources
Secure Application Containers
Compartmentalize code for agility, robustness & security

81. © Microsoft Corporation
The Azure Sphere Security Service connects and
protects
every Azure Sphere device
Protects your devices and your customers with
certificate-based authentication of all communication
Detects emerging security threats through
automated processing of on-device failures
Responds to threats with fully automated
on-device updates of OS
Allows for easy deployment of software updates to Azure
Sphere powered devices

84. Azure. Cloud for all.
@danvy
♥