The document discusses strategies for monitoring and managing infrastructure and resources in Azure. It describes how to organize resources using resource groups categorized by environment, department or other attributes. Tags and policies can be used to organize resources and enforce standards. Resource locks prevent accidental deletion or modification of critical assets. Azure Monitor collects data from various sources and services and allows users to visualize monitoring data through dashboards, views and Power BI. Azure Security Center and Azure Sentinel help manage security across infrastructure.

1. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Flash Card – Architect
Infrastructure Operation
in Azure
Prepared by Lai

2. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Resource Group Grouping
By resources
By environment
By department

3. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Use Tag to
organize resources
Tag - Name/value
pair
For billing data
Use Policies to
enforce standard
For monitoring
Azure Policy – to create,
assign & manage
Create – Assignment-
Secure resouces
with RBAC
Grant specific rights

4. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Use resource lock to
protect resources
Prevent mistaken
deletion
Block modification/
deletion
Set Delete / Read
only

5. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Policy

6. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Policy
Focus on resource properties
during deployment & already
existing resources
RBAC
Focus on user action at
different scopes
Default Allow & Explicit deny
Create Policy definition ->
Assign definition to resources
-> View result

7. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Management
Group
Container for managing
access, policies &
compliance across multiple
Azure subscription

8. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Monitor
Monitor Service Health
Comprehensive solution for
collecting, analyzing & acting
on telemetry
Application Insight- monitor
availability, performance &
sage of web app
Azure monitor for
container – monitor
performance of
container workload
Azure monitor for VM
– monitor
performance VM
Visualize monitoring data
1. Dashboard
2. View
3. Power BI

9. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Service
Health
Monitor Service Health
Provide personalized guidance & support when issue
Azure Status – provide
global view of the health
state of Azure Services
Service health –
customizable
dashboard that track
the status of Azure
services
Resource Health –
diagnose & obtain
support when azure
service issue affect
resources

10. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Design Monitoring
Strategy

11. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Security
Center
Manage security of your infra from centralized location

12. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Application
Insight
Monitor & manage the performance of your application
Install package to
monitor app & send log
to Log Analytic
workspace
Use continuous
monitoring gateway to
monitor release pipeline
Use availability test to
monitor app performance
after it’s live

13. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Sentinel Collect data on devices, user, infra & application
Have data connector to
monitor

14. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Monitor Collecting metric & log data, combining & analyzing
data from different sources

15. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Azure Monitor

16. © 2019 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Thank You