Book description
How do you deal with the problems you face when using Azure? This practical guide provides over 75 recipes to help you to work with common Azure issues in everyday scenarios. That includes key tasks like setting up permissions for a storage account, working with Cosmos DB APIs, managing Azure role-based access control, governing your Azure subscriptions using Azure Policy, and much more.
Author Reza Salehi has assembled real-world recipes that enable you to grasp key Azure services and concepts quickly. Each recipe includes CLI scripts that you can execute in your own Azure account. Recipes also explain the approach and provide meaningful context. The solutions in this cookbook will take you beyond theory and help you understand Azure services in practice.
You'll find recipes that let you:
- Store data in an Azure storage account or in a data lake
- Work with relational and nonrelational databases in Azure
- Manage role-based access control (RBAC) for Azure resources
- Safeguard secrets in Azure Key Vault
- Govern your Azure subscription using Azure Policy
- Use CLI code to construct your application or fix a particular problem
Publisher resources
Table of contents
- Preface
-
1. Security
- Workstation Configuration
- Creating a New User in Your Azure Account
- Creating a New Custom Role for Our User
- Assigning Allowed Azure Resource Types in a Subscription
- Assigning Allowed Locations for Azure Resources
- Connecting to a Private Azure Virtual Machine Using Azure Bastion
- Protecting Azure VM Disks Using Azure Disk Encryption
- Blocking Anonymous Access to Azure Storage Blobs
- Configuring an Azure Storage Account to Exclusively Use Azure AD Authorization
- Storing and Retrieving Secrets from Azure Key Vault
- Enabling Web Application Firewall (WAF) with Azure Application Gateway
-
2. Networking
- Workstation Configuration
- Creating an Isolated Private Network by Provisioning an Azure Virtual Network
- Creating a Network Layout in Azure Virtual Networks Using Subnets
- Routing Network Traffic Using User-Defined Routes
- Securing Azure Virtual Networks with Azure Firewall
- Securing Azure Virtual Networks with Network Security Groups
- Connecting Two Azure VNets Using Azure Network Peering
- Verifying Azure VNet Connectivity Using Azure Network Watcher
-
3. Storage
- Workstation Configuration
- Using Azure Key Vault Keys to Configure Azure Storage Encryption at Rest
- Controlling Azure Storage Network Access
- Granting Limited Access to Azure Storage Using SAS Tokens
- Granting Azure Function Apps Access to Azure Storage Using Managed Identity and RBAC
- Creating and Storing Snapshots of Blob Objects
- Creating and Accessing New File Versions
- Using a Lifecycle Management Policy to Save Storage Account Costs
- Using AzCopy to Upload Multiple Files to Azure Storage Blobs
- Using AzCopy to Upload Multiple Files to Azure Storage File Shares
- Protecting Azure Storage Blobs from Accidental Deletion
- Protecting an Azure Storage Account from Deletion Using Azure Locks
-
4. Persisting Data
- Workstation Configuration
- Creating a Cosmos DB NoSQL API Account
- Creating a Cosmos DB Apache Gremlin (Graph) API Account
- Configuring Azure Cosmos DB Firewall
- Configuring Azure Cosmos DB Private Access
- Granting Function Apps Access to Cosmos DB Using RBAC
- Storing Tabular Data in Azure Storage Tables
- Configuring Autoscale for an Azure Cosmos DB NoSQL API Container
- Saving Costs on Multiple Azure SQL Single Databases with Varying and Unpredictable Usage Demands
- Configuring Serverless Compute Tier for Azure SQL Single Databases
- Configuring Azure SQL Firewall IP Rules
- Configuring Azure SQL Firewall VNet Rules
- Backing Up Azure SQL Single Databases into Azure Storage Blobs
-
5. Messaging and Events
- Workstation Configuration
- Ingesting Streaming Data at Scale Using Event Hubs
- Ingesting Telemetry Data from IoT Devices Using Azure IoT Hub
- Implementing Communication Between Services Using Azure Storage Queues
- Implementing Communication Between Services Using Azure Service Bus Queues
- Implementing a Publish-Subscribe Pattern Using Azure Service Bus Topics
- Queuing Newly Uploaded Blobs for Further Processing Using Azure Event Grid
-
6. Big Data
- Workstation Configuration
- Processing Live Data Streams Using Azure Stream Analytics
- Querying CSV File Content Using Azure Synapse Analytics Serverless Pool
- Saving Costs on Idle Azure Synapse Dedicated SQL and Spark Pools
- Processing Datafiles Using Azure Databricks
- Performing ETL/ELT Operations on Big Data Using Azure Data Factory (ADF)
-
7. Azure Functions and Serverless Services
- Workstation Configuration
- Implementing a Web API Using Azure Functions
- Invoking an Azure Function on a Schedule Using the Timer Trigger
- Invoking an Azure Function on Blob Upload Using the Blob Trigger
- Inserting Function App Output into Azure Cosmos DB
- Establishing Communication Between Azure Functions Using the Service Bus Queue Trigger
- Restricting Network Access to Azure Function Apps
-
8. Azure App Service
- Workstation Configuration
- Deploying a Web Application to Azure App Services Using ZipDeploy
- Deploying a Web Application to Azure App Service Using FTP
- Deploying a Web Application from a Public GitHub Repository to Azure App Service
- Configuring Autoscaling for Your Azure App Service Plan
- Restricting Network Access to an Azure App Service
- Hosting Static Websites in Azure Storage
-
9. Containers
- Workstation Configuration
- Chapter Prerequisites
- Building and Pushing a Container Image to Azure Container Registry
- Pulling and Running a Docker Image in Azure Container Instances
- Pulling and Running a Containerized Website in Azure App Services
- Pulling and Running a Containerized Website in Azure Container Apps
- Limiting Azure Container Registry Public Network Access
-
10. Azure Cognitive Services
- Workstation Configuration
- Postman Collection
- Provisioning a Multi-Service Azure Cognitive Services Resource
- Converting Text to Speech
- Translating Text
- Performing Sentiment Analysis on Text
- Detecting Objects in Images
- Creating Captions for Images
- Extracting Text from Images Using OCR
- Detecting PII in Text
- 11. Management and Monitoring
- Index
- About the Author
Product information
- Title: Azure Cookbook
- Author(s):
- Release date: June 2023
- Publisher(s): O'Reilly Media, Inc.
- ISBN: 9781098135799
You might also like
book
Azure Databricks Cookbook
Get to grips with building and productionizing end-to-end big data solutions in Azure and learn best …
book
Azure Architecture Explained
Enhance your career as an Azure architect with cutting-edge tools, expert guidance, and resources from industry …
book
Azure DevOps Explained
Implement real-world DevOps and cloud deployment scenarios using Azure Repos, Azure Pipelines, and other Azure DevOps …
book
Terraform Cookbook
Cloud services and SaaS software permeate every company's IT landscape, requiring a shift from manually provisioned …