Download to read offline
![Demo: Tag included in an ARM Template
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2015-06-15",
"name": "mystorage4321",
"location": "[resourceGroup().location]",
"tags": {
"Department": "RnD"
},
"properties":
{
"accountType": "Standard_LRS"
}
}
]](https://image.slidesharecdn.com/itcamp2018-magnusmartensson-armftw-azureresourcemanagerforthewin-180715124742/75/ITCamp-2018-Magnus-Martensson-Azure-Resource-Manager-For-The-Win-44-2048.jpg)
![{
"if" : {
"not" : {
"field" : "location",
"in" : ["westeurope", "northeurope"]
}
},
"then" : {
"effect" : "deny"
}
}
Policy – Geo Compliance: Ensure resource locations](https://image.slidesharecdn.com/itcamp2018-magnusmartensson-armftw-azureresourcemanagerforthewin-180715124742/75/ITCamp-2018-Magnus-Martensson-Azure-Resource-Manager-For-The-Win-50-2048.jpg)
![{
"if": {
"allOf": [
{
"field": "tags",
"exists": "true"
},
{
"field": "tags.costCenter",
"exists": "false"
}
]
},
"then": {
"effect": "append",
"details": [
{
"field": "tags.costCenter",
"value": "RnD"
}
]
}
}
Chargeback modify resources by appending departmental tag.](https://image.slidesharecdn.com/itcamp2018-magnusmartensson-armftw-azureresourcemanagerforthewin-180715124742/75/ITCamp-2018-Magnus-Martensson-Azure-Resource-Manager-For-The-Win-52-2048.jpg)
Uploaded byITCamp
ITCamp 2018 - Magnus Mårtensson - Azure Resource Manager For The Win
The document discusses Azure Resource Management (ARM) and its capabilities for managing cloud resources effectively, including organizing resources into groups, controlling access, and using templates for deployment. It highlights the use of role-based access control (RBAC), tagging for cost visibility, and defining resource policies for governance. Additionally, it emphasizes the importance of automation and infrastructure as code for improved resource management and cost control in the cloud.
More Related Content
Similar to ITCamp 2018 - Magnus Mårtensson - Azure Resource Manager For The Win
ITCamp 2018 - Magnus Mårtensson - Azure Resource Manager For The Win
- 1. ARM FTW (Azure ResourceManagement For The Win)
- 2. @ITCAMPRO #ITCAMP18Community Conferencefor IT Professionals Many thanks to our sponsors & partners! GOLD SILVER PARTNERS PLATINUM POWERED BY
- 4.
- 5.
- 6. ~288 locations @global.azurebootcamp.net #GlobalAzure Bootcamp April 21, 2018!
- 7. Platform Services Security & Management InfrastructureServices Web Apps with Web Jobs Mobile Apps API Management API Apps Logic Apps Notification Hubs Content Delivery Network (CDN) Media Services HDInsight Machine Learning Stream Analytics Data Factory Event Hubs Mobile Engagement Active Directory Multi-Factor Authentication Automation Portal Key Vault Biztalk Services Hybrid Connections Service Bus Storage Queues Store / Marketplace Hybrid Operations Backup StorSimple Site Recovery Import/Export SQL Database DocumentDB Redis Cache Search Tables SQL Data Warehouse Azure AD Connect Health AD Privileged Identity Management Operational Insights Cloud Services Batch Remote App Service Fabric Visual Studio Application Insights Azure SDK Team Project VM Image Gallery & VM Depot Azure Functions
- 8. Challenges with managingresources ?
- 9. Infrastructure & Configurationas Code + Continuous Delivery
- 10.
- 11.
- 12. What can youdo with Azure Resource Manager? Deploy app resources
- 13. What can youdo with Azure Resource Manager? Organize resources
- 14. What can youdo with Azure Resource Manager? Control access to resources
- 15.
- 16. Resource Groups: Startas empty “buckets”! RESOURCE GROUP
- 17.
- 18. Behold the simplestpossible template! Demo
- 19. Declarative templates Idempotent Multi-service, multi-region– easy! Deploying with Azure Resource Manager
- 20. How do Iplace my Resources in Resource Groups?
- 21. Development Test (multiple) Staging Production (multipleregions) All of those environments…
- 22. Do I needone Template for each Environment? :(
- 23. Use the sameTemplate for all Environments! Create one Parameter file for each Environment! Template Parameter Files
- 24. Deploy many environmentsin one go! Demo
- 26.
- 27.
- 28.
- 29. VS Code Demo Learn it– Love it – it will give you wings! Great Extensions that keep getting better!
- 30. Azure PowerShell aka.ms/powershellopensource &on Linux(!) Azure Command-Line Interface aka. Azure CLI, aka. xplat-cli Two OSS command line options for management of Azure.
- 31.
- 32. resources.azure.com The secret Azure-bluesauce “Ain’t nothing going on but the REST!” Magnus Mårtensson
- 33. github.com/azure/ azure-quickstart-templates Demo: Resources toget you started!
- 34. ARM is an“enabler” RBAC Tags Policies etc.
- 35. Role Based AccessControl (RBAC)
- 36. Role Based AccessControl Allows secure access with granular permissions. Assignable to users, groups, or service principals. Built-in roles make it easy to get started. Custom roles offer greater flexibility.
- 37. Access Inheritance andResource Hierarchy
- 38. Role Based AccessControl Click on “the little people”!
- 39. Key Learnings fromEnterprise Customers
- 40. Grant the wholedepartment read access to all the app resources! Department_Foo_Grp App1_Readers_AG
- 41. Grant the teamcontributor access to the their resources! Team_Bar_Grp Service1_Contributors_AG
- 42.
- 43. Visibility, metadata ofcloud assets Growing Service Catalog Cost Control Geo-Compliance issues … Challenges with all of those easy to deploy services
- 44. Demo: Tag includedin an ARM Template "resources": [ { "type": "Microsoft.Storage/storageAccounts", "apiVersion": "2015-06-15", "name": "mystorage4321", "location": "[resourceGroup().location]", "tags": { "Department": "RnD" }, "properties": { "accountType": "Standard_LRS" } } ]
- 45. Filtering to allresources with a certain tag. Finding out who owns what resource? Grouping your costs for the Excel people! Tags are used for…
- 46. Policies for yourAzure
- 47. Let’s you definecustomized rules which governs the shape of your resources. What is a Resource Policy?
- 48. Enforce naming conventionon resources. Limit which types and instances can be deployed. Specify which regions can be used. Require tag for department chargeback. ... What type of Policy?
- 49. { "if" : { <condition>| <logical operator> }, "then" : { "effect" : "deny | audit | append" } } Policy Definition structure
- 50. { "if" : { "not": { "field" : "location", "in" : ["westeurope", "northeurope"] } }, "then" : { "effect" : "deny" } } Policy – Geo Compliance: Ensure resource locations
- 51. { "if" : { "not": { "field" : "tags", "containsKey" : "costCenter" } }, "then" : { "effect" : "deny" } } Policy – Chargeback: Require departmental tags
- 52. { "if": { "allOf": [ { "field":"tags", "exists": "true" }, { "field": "tags.costCenter", "exists": "false" } ] }, "then": { "effect": "append", "details": [ { "field": "tags.costCenter", "value": "RnD" } ] } } Chargeback modify resources by appending departmental tag.
- 53. What happens aftera policy evaluation? A request may be blocked or modified. An audit event is generated. An alert can be generated based on events.
- 54.
- 55. A simplified PolicyEvaluation Result { "authorization": { "action": "Microsoft.Resources/deployments/validate/action", "caller": "magnus@loftysoft.com" }, "level": "Error", "operationName": { "value": "Microsoft.Authorization/policies/deny/action", }, "resourceType": { "value": "Microsoft.Resources/deployments", }, "status": { "value": "Failed", }, }
- 56. Who initiated theoperation. When the operation occurred. What operations were taken on the resources. The status/result of the operation. ... Through activity logs, you can determine:
- 57. Portal view ofActivity Logs Demo
- 59. Remove human error. Securitycontrol. Cost savings by spend control. Environment parity. Automation! (automation, automation) Why do I want ARM and Infrastructure as Code?
- 60. @ITCAMPRO #ITCAMP18Community Conferencefor IT Professionals
- 62. magnus@loftysoft.com Azure Resource ManagementWizardry This course is about the proper way to handle resources in Azure, access for users, cost control in the Cloud and much more! After this course you will approach Azure in a more conscious, controlled and confident way!
- 63.