Azure Cloud Projects E-Book

Hamid Sadeghpour Saleh

• Herausgeber: Packt Publishing
• Kategorie: Wissenschaft und neue Technologien
• Sprache: Englisch

Seitenzahl: 370

Veröffentlichungsjahr: 2025

Beschreibung

Want to get hands-on with Azure and boost your cloud solution skills by working on real-world projects? Azure Cloud Projects is your go-to resource. Written by a seasoned Microsoft Cloud Technologies Architect renowned for his expertise in crafting innovative solutions, this hands-on guide will empower you to build real-world applications using Microsoft Azure.
Through hands-on projects, you’ll explore core cloud concepts and gain the experience needed to confidently launch your cloud career. The chapters help you build a strong foundation in cloud computing and Azure services, including how to set up your Azure account and navigate the portal. You’ll learn how to develop increasingly complex solutions as you progress—from configuring networks and deploying web apps to managing databases and containers. Advancing through the chapters, you’ll learn how to implement identity and access controls with Entra ID, automate workflows using Azure Functions, build a CI/CD pipeline with Azure DevOps, and optimize cloud costs for scalable growth.
By the end of this book, you’ll have a solid grasp of Azure’s capabilities and a portfolio of practical projects that showcase your job-ready skills and set you up for success in entry-level cloud roles.

Leseprobe

Azure Cloud Projects

Learn Microsoft Azure through hands-on, real-world projects

Hamid Sadeghpour Saleh

Azure Cloud Projects

Copyright © 2025 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

The author acknowledges the use of cutting-edge AI, such as ChatGPT, with the sole aim of enhancing the language and clarity within the book, thereby ensuring a smooth reading experience for readers. It’s important to note that the content itself has been crafted by the author and edited by a professional publishing team.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing or its dealers and distributors will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

Portfolio Director: Kartikey Pandey

Relationship Lead: Prachi Rana

Project Manager: Sonam Pandey

Content Engineer: Arun Nadar

Technical Editor: Simran Ali

Copy Editor: Safis Editing

Proofreader: Arun Nadar

Indexer: Tejal Soni

Production Designer: Aparna Bhagat

Growth Lead: Shreyans Singh

First published: May 2025

Production reference: 1240425

Published by Packt Publishing Ltd.

Grosvenor House

11 St Paul’s Square

Birmingham

B3 1RB, UK.

ISBN 978-1-83620-423-7

www.packtpub.com

I want to thank the people who have been close to me and supported me in the process of writing this book.

Never stop dreaming and taking action to bring your dreams to life.

- Hamid

Foreword 1

Don’t rush up, rocket flying to the clouds!  

Rushing up to the cloud unprepared is not wise. Don’t rush up, rocket flying to the clouds is a phrase I often share when I speak about my cloud migration journey as a developer and cloud architect who had a mission to migrate and lift a .NET legacy application to a cloud platform – Microsoft Azure. The experience and the lessons learned (both technical and non-technical) from that cloud migration motivated me to write my first technical book. As someone who had never written a book then, that was one of the bravest things I did in my career and life.

As an internationally published technical book author, a known expert and Microsoft certified trainer in Microsoft Azure, a developer focused on cloud development in .NET, and a lead cloud infrastructure engineer, I’ve had the experience and privilege of growing my technical expertise in building and debugging applications on this cloud platform for the past decade.

Microsoft Azure has evolved into a powerhouse of innovation that is limitless and unstoppable, to which I relate, as I am such a person – both personally and in my own career journey. My experience solving problems and building solutions with the cloud platform Microsoft Azure – from planning, architecture, development, and deployment through DevOps to monitoring and security on the cloud infrastructure – has been a proven testament that learning the fundamentals is essential and vital (including being brave enough to accept that mistakes become lessons learned ) to everyone who wants to be limitless and unstoppable in learning new technologies and innovation all day.

When I was creating my O’Reilly on-demand video course, Breaking into Cloud Engineering: A Career Roadmap for Absolute Beginners, I realized and truly believed in the importance and value of continuous learning – regardless of whatever level you are at right now in your career path. If you are someone new to IT or cloud engineering, or perhaps someone who is breaking into the field, keeping yourself up to date with the technologies we have today is a great investment of your time and effort – especially the recent AI.

Innovation is essential for us to move forward, and it is important to educate ourselves on the responsible use of AI and modern tools, as well as build applications that solve problems and help us with our productivity. We need to use innovative technologies, and design and build them to help us, not work against us – and we should not be scared to learn from it, teach it, and adapt from it. I believe that if the people building the tech are inspired and driven to build something great, great things are the result. Productivity using tech and AI tools helps us save time. Time is precious – and it is all we need.

Hamid Sadeghpour Saleh, the author of this fantastic book, is a fellow Microsoft MVP, MCT, Microsoft Learn Expert, and a community leader like me. His experience and expertise in Microsoft Azure, which are written about in this book, are golden.

As someone with many years of experience in problem-solving and developing applications, I believe in learning by doing. As an author who spent almost 18 months writing my first published book, Learning Microsoft Azure, which is currently translated into at least six languages, I can testify that the effort that Hamid invested in each chapter, page, and word in this book, based on my own experience as an author, was invested and created from the time, heart, effort and experience he has had working with this platform.

This book provides knowledge of general concepts, projects, use cases, and all the essential things you need to know about Microsoft Azure, which will hopefully help you with your day-to-day tasks and work as a developer, cloud architect, or whatever role you get within the cloud today. When I was a kid, I learned that knowledge is power, and that’s how I succeed. Not because I have so much knowledge about Azure in my head but because I am a learner who shares knowledge and helps others. If you continue to learn about cloud computing and modern technologies as it evolves, you will never be left behind. You will be limitless, along with technology innovation.

As a fellow expert in the Microsoft Azure arena, I am genuinely delighted to recommend Hamid’s work in this book, as it discusses Azure’s essential principles and practical uses. It is also a great complementary book to mine, Learning Microsoft Azure.

Whether you’re someone who is just getting started on your cloud journey or someone who wants to refresh your technical skills on Azure, this book will inspire and equip you to empower the potential that Azure provides, which will help you grow in your career. So, dive in, explore, and don’t be scared to make mistakes. Learn by doing and pass it forward to others. You never know how it transforms and builds a lot of things!

Enjoy learning, and make sure you and your team are ready when you want to fly your rocket of amazing applications to the cloud! 

Jonah C. Andersson 

Senior Azure Consultant, Microsoft Certified Trainer, Microsoft MVP, Author

Foreword 2

I have known Hamid Sadeghpour as someone who is always eager to share what he learns. Over the years, he has built a strong track record of delivering real-world cloud solutions, and this book is a great reflection of that experience.

Each of the ten projects in this book is based on real scenarios that Hamid has worked on, combined with Microsoft’s recommended practices. Whether you’re just starting with Azure or already working on cloud-based systems, this book offers practical, hands-on examples that will help you learn and build better solutions.

What I appreciate about Hamid’s approach is how he focuses on what actually works in real environments, something that is often missing in theory-heavy resources. From setting up your first Azure project to building secure, scalable architectures and optimizing for cost, this book gives you the tools to succeed.

As someone with over two decades of experience in this industry, I know how valuable it is to have resources that go beyond the basics and bring together practical experience with best practices. This book does exactly that.

I hope you enjoy reading and learning from it as much as I did.

Sherry List

Senior Program Manager, Microsoft

Co-Founder & CEO, SyntheticAIdata

Foreword 3

As the Chief Technology Officer for Data & AI at Sogeti Sweden, I’ve been working hands-on with Azure for almost a decade. Hamid’s expertise in this field is truly impressive, and his work consistently demonstrates the vast potential of Azure for businesses looking to streamline their digital processes.

I remember a session where Hamid broke down the complexities of automation and integration in Azure. He pointed out that 25% of the challenges come from picking the wrong platform or service. This is a key insight for anyone wanting to make the most of Azure.

Hamid’s approach is both practical and insightful. He focuses on providing clear, actionable strategies that help businesses create secure, reliable, and scalable solutions. His real-world applications make his insights incredibly valuable for professionals at any stage of their Azure journey.

I’m confident that readers will find Hamid’s insights both enlightening and empowering. His ability to simplify complex concepts and provide actionable strategies is what makes his work helpful for anyone involved in running projects in Azure.

Get your bookmark ready and learn what Azure offers and take the first step towards transforming your digital processes. Hamid’s expertise is your guide to unlocking the full potential of Azure, and I’m excited to introduce his work to you.

Kim Berg

Chief Technology Officer, Data & AI

Sogeti Sweden

Recommendation 1

Hamid and I share a common passion for technology, programming, and the entire ecosystem of tools that make up what we call “the cloud.” We’ve been colleagues and have spoken at the same technology events multiple times. I have had the privilege of attending several of his sessions, and it doesn’t take long to realize that Hamid possesses deep knowledge and hands-on experience in Microsoft Azure architecture of the highest caliber.

Microsoft Azure is a vast platform offering a wide array of tools for building all kinds of solutions, with multiple ways to achieve the same goal. Knowing what to use, when, and why is anything but trivial—and that’s where Hamid’s expertise truly shines. He has been actively involved in designing many solutions used by millions of users and exposed to public audiences. Security, performance, and cost-efficiency are critical requirements, and it takes someone with Hamid’s competence to strike the right balance among them.

Thankfully, Hamid is also someone who shares his knowledge generously—and the book you’re about to read is a testament to that. Within these pages, you’ll find distilled insights drawn from real-world projects Hamid has contributed to. This is a far cry from reading raw documentation, which often requires additional research and interpretation before it can be applied to real-life scenarios.

The book covers the full breadth of cloud project development—from the earliest considerations, such as identity and access management with Microsoft Entra and networking, to deploying workloads in a containerized, cloud-native manner. Whether your project is large or small, this book provides the guidance you need to get started, get unstuck, or wrap up the final details of your Azure cloud journey.

Nikolaos Delis

Founder & CEO, Aristevin Consulting AB

Microsoft MVP for Microsoft Azure & IoT

Microsoft Certified Trainer 

Recommendation 2

I have known and worked with Hamid Sadeghpour for more than 10 years. He is one of the most talented and knowledgeable technical experts I have ever met. Hamid is not just a great problem solver – he is also passionate about helping others grow and learn new technologies.

In his book, Azure Cloud Projects, Hamid shares his deep understanding of Microsoft Azure, one of the top cloud service providers in the world. He has always been a big fan of Microsoft technologies and never stops learning. His dedication to technology and teaching makes this book a valuable resource for anyone who wants to gain real-world knowledge about Azure cloud projects.

This book is filled with practical insights, useful examples, and hands-on experience. Whether you are starting your journey with Azure or looking to expand your skills, you will find great topics that can help you in your career path. Understanding how Azure resources work together is key to mastering the cloud, and this book will guide you through that journey.

I highly recommend reading this book. It will help you build a strong foundation in Azure and open new opportunities in cloud computing.

Mohsen Akhavan

Cloud Security Architect

Recommendation 3

I have known and worked with Hamid for more than 15 years. I can confidently say he is a dedicated professional and an authority in the realm of cloud technologies.

In this comprehensive book, Hamid takes you on a learning journey through 10 dynamic chapters that cover various Azure project use cases, including identity and access management, automation, DevOps, and security on Azure. Tailored specifically for cloud engineers and architects, this book is an essential resource for those looking to deepen their understanding of Azure’s powerful capabilities.

Through Azure Cloud Projects, Hamid demonstrates how easy it is to implement a wide range of solutions using Azure. His practical examples and best practices enable organizations to optimize their cloud services, enhancing productivity and security in their development processes.

As you navigate through this book, you’ll gain insights into the essential tools and methodologies required to build robust cloud architecture. Hamid’s hands-on approach ensures that you not only grasp theoretical concepts but also learn how to apply them effectively in real-world scenarios.

With Azure Cloud Projects, you will explore the latest techniques that empower cloud engineers and architects to build scalable and secure applications on Azure. Hamid encapsulates years of experience and knowledge, offering step-by-step instructions, detailed examples, and links to further resources, enabling you to continuously enhance both your skills and your projects.

Embrace the power of Azure and unlock your potential as a cloud professional with Hamid’s expert guidance through this valuable book.

Masoud Sabouri

Network Services Manager at Telcoset

Contributors

About the author

Hamid Sadeghpour Saleh is a Microsoft Cloud Technologies Architect with over a decade of experience turning visionary ideas into enterprise-ready cloud solutions. His passion for technology began early and has evolved into a career centered around designing innovative, secure, and scalable systems within the Microsoft Technologies ecosystem.

He specializes in streamlining complex business processes, optimizing workflows, and guiding organizations through digital transformation. In addition to his technical work, Hamid is a dedicated community leader within the Microsoft MVP Program communities. He actively contributes through event organization, mentorship, workshops, and open source collaboration.

Driven by curiosity and a deep belief in the power of technology to inspire and uplift, Hamid is committed to empowering others and building meaningful connections within the global tech community. His work reflects not only technical excellence but also a lifelong dedication to innovation and impact.

About the reviewers

Anuj Tyagi is a senior site reliability engineer with more than a decade of experience in building, scaling, automating, and managing production cloud infrastructure. He is an active open source contributor in the cloud-native community. He is co-founder of AITechNav, a non-profit community that provides mentorship to tech professionals in growing their careers.

Saeid Dahl is the Azure tech lead at Upheads, with over 17 years of distinguished experience driving innovation and transformation across the IT landscape. As a Microsoft Azure MVP, Microsoft Certified Trainer, and Microsoft Learn Learning Expert, he is widely recognized for his deep expertise, visionary leadership, and unwavering commitment to empowering others through technology.

As an Azure tech leader, Saeid shapes strategic cloud journeys, architects enterprise-grade solutions, and mentors technical teams to excellence. His work bridges the gap between cutting-edge cloud capabilities and practical business outcomes, making him a trusted advisor at the highest levels of enterprise IT.

Saeid is the co-founder of two influential communities, Microsoft Zero to Hero and MSFarsi, which have inspired and supported thousands of professionals across the globe, from early learners to seasoned engineers. His community leadership is not only impactful but also transformative, opening new doors and creating inclusive spaces for learning and growth.

As a Global Azure Board Member, international speaker, and authority on hybrid and multi-cloud strategies, automation and integration, AI and enterprise Azure service design, and PowerShell, Saeid is a driving force in shaping the future of cloud technology. His voice carries weight across conferences, leadership round tables, and technical forums, where innovation meets experience.

Table of Contents

Preface

1

Introduction to Azure and Cloud Computing

What is Microsoft Azure?

Features

Core Azure Services and Solutions

Exploring the Azure Portal

Getting Started

Customizing Your Dashboard

Navigating the Azure Portal

Using the Search Bar

Creating and Managing Resources

Using Azure Resource Manager Templates

Understanding Azure Regions and Availability Zones

Azure Regions

Availability Zones

Summary

2

Implementing Entra ID and Hybrid Connectivity

Technical requirements

Why use Entra ID?

Centralized identity management

Enhanced security

Microsoft Entra ID Internet Access versus Private Access

Seamless integration options

Improved user experience

Scalability and reliability

Understanding Microsoft Entra ID B2C and B2B capabilities

Working with Microsoft Entra ID

Plans and pricing

Setting up an Entra ID tenant

Synchronizing on-premises Active Directory

Implementing SSO and MFA

Establishing hybrid connectivity using a VPN gateway

Testing and validating the hybrid connectivity setup

Understanding the necessary soft skills

Communication

Stakeholder management

Collaboration

Best practices for implementing hybrid connectivity

Summary

Exercises

Exercise 1: Creating a user and group in Microsoft Entra ID

Exercise 2: Configuring SSO for an application

Exercise 3: Setting up a VPN connection

3

Implementing Azure Storage Solutions

Technical requirements

Why use Azure storage solutions?

Benefits and features

Making the most of Azure storage solutions

Project scenario – implementing a comprehensive Azure storage solution

Project objectives

Technical objectives

Essential best practices and key soft skills for success

Summary

Join the CloudPro Newsletter with 44000+ Subscribers

4

Understanding the Azure Network Topology, Design Principles, and Best Practices

Technical requirements

The importance of the Azure network topology

Key architectural concepts for designing and implementing networking in Azure

Project scenario for Azure networking

Company background

Current infrastructure

Migration goals

Objectives

On-premises data center

Network configuration

Security requirements

Implementing a comprehensive Azure network topology

Applying best practices in network design

Summary

5

Implementing a Serverless Solution

What are serverless technology and serverless solutions?

Understanding the core concepts and benefits of serverless computing

What is serverless computing?

Key concepts and features in serverless computing

Benefits of serverless computing

Creating and deploying serverless functions using Azure Functions

What is Azure Functions?

Advantages of Azure Functions

Application architecture overview

Setting up Azure Functions

Managing and scaling Azure Functions

Implementing event-driven architectures with serverless components

What is an event-driven architecture?

Types of Azure triggers

Designing an event-driven workflow

Example scenario – implementing an EDA for order processing

Exploring integration options for serverless solutions

Integrating with databases

Integrating with external APIs

Integrating with other Azure services

Monitoring and managing integration

Setting up monitoring and logging for serverless applications to ensure reliability and performance

Importance of monitoring and logging

Azure tools for monitoring and logging

Best practices for monitoring and logging

Best practices for security and scalability in serverless applications

Summary

6

Principles and Practices of Scalable Data Management

Why build scalable data solutions on Azure?

Designing scalable databases using Azure SQL Database and Cosmos DB

Features of Azure SQL Database

Setting up Azure SQL Database

Features of Azure Cosmos DB

Setting up Azure Cosmos DB

Building scalable data lakes and warehouses with Azure Data Lake

What is Azure Data Lake?

Building scalable data pipelines with Azure Data Lake

A sample scenario for building a scalable data lake for a smart city

Integrating data processing and analytics services to support real-time and batch workloads

Why integrate real-time and batch data processing?

Key Azure services

Building a unified data processing pipeline

A scenario for smart retail store analytics

Best practices for performance optimization and cost management in data solutions

Best practices for performance optimization

Best practices for cost management

Combining performance optimization with cost management

Ensuring security and compliance for large-scale data solutions

Best practices for ensuring security and compliance

Ensuring security and compliance for a global financial institution

Summary

7

Building a Continuous Integration and Continuous Delivery Pipeline

The importance of CI/CD pipelines

Understanding the core concepts and benefits of CI/CD

CI

CD

CD and continuous deployment: the next step

Building and configuring a CI/CD pipeline using Azure DevOps or GitHub Actions

CI/CD pipeline overview

Step 1 – setting up source code management

Step 2 – creating a CI pipeline

Step 3 – setting up CD

Step 4 – managing environment variables and secrets

Step 5 – automating approval and manual intervention

Integrating automated testing into your CI/CD pipeline to ensure code quality

Types of automated tests

Integrating tests into your pipeline

Adding integration and E2E tests

Implementing testing stages in the CI/CD pipeline

Configuring testing reports and notifications

Real-world example of automated testing for a food delivery application

Configuring build and release stages to automate application deployment to Azure services

Build stage – preparing code for deployment

Release stage – automating application deployment

Implementing deployment strategies

Configuring approval gates

Summary

Join the CloudPro Newsletter with 44000+ Subscribers

8

Designing and Building a Containerized Solution on Azure

Understand the basics of containers and their significance in modern application development

What are containers?

How containers differ from VMs

Benefits of using containers

How containers work

Best practices for containerization

Hypothetical use case – microservices in a retail application

Build and run Docker containers for application development and deployment

Why Docker containers?

Building Docker containers – a high-level overview

Running Docker containers

Best practices for Dockerfile and container management

Pushing Docker images to a registry

Deploying Docker containers to Azure

Hypothetical containerizing of a microservice architecture

Setting up and managing a Kubernetes cluster using AKS

Why use Kubernetes for orchestration?

Core Kubernetes concepts

Kubernetes architecture overview

Azure Kubernetes Service (AKS)

Deploying applications to AKS

Deploying, scaling, and updating containerized applications on AKS

Deploying applications on AKS

Scaling applications on AKS

Updating applications on AKS

Monitoring and managing AKS deployments

Summary

9

Enhancing Security and Compliance in an Azure Project

The importance of security and compliance

Understanding the Azure Security architecture

Implementing IAM

Ensuring data protection and encryption

Configuring compliance policies with Azure Policy

Summary

10

Developing a Cloud Cost Optimization Strategy

Why cloud cost optimization matters

Azure pricing models and cost management tools

Azure pricing models

Azure Cost Management and Billing: a comprehensive overview

Implementing resource monitoring and scaling for cost efficiency

Monitoring Resources with Azure Monitor

Scaling resources dynamically

Leveraging RIs, SIs, and Azure Hybrid Benefits

Understanding RIs

How RIs work

Understanding Azure SIs

Azure Hybrid Benefit

Combining RIs and Azure Hybrid Benefit

Best practices for leveraging RIs and Azure Hybrid Benefit

Implementing governance policies for effective cost control

Why governance policies matter in Cost Management

Key tools and techniques for governance in Azure

Azure Management Groups

Governance for a multi-team organization

Best practices for establishing governance policies

Summary

Stay Sharp in Cloud and DevOps – Join 44,000+ Subscribers of CloudPro

Index

Other Books You May Enjoy

Preface

Welcome to Azure Cloud Projects, a concise guide to real-world scenarios and best practices for navigating Microsoft’s Azure platform. From building reliable virtual machines to architecting complex microservices, this book dives into hands-on examples that will help you tackle a variety of challenges in the cloud. Whether you’re a seasoned professional or just starting your Azure journey, you’ll discover practical strategies for developing secure, scalable, and cost-effective projects. Each chapter presents a unique project scenario, highlighting key decision points and showcasing proven techniques to streamline implementation. Along the way, you’ll learn about critical topics such as security, performance, and DevOps processes, all tailored to help you excel in today’s fast-paced cloud environment. By the end of the book, you’ll have the knowledge and confidence needed to leverage Azure’s ecosystem for transformative results, ensuring your projects meet both current and future demands.

Who this book is for

This book is designed for technology professionals who aim to leverage Microsoft Azure to deliver secure, scalable, and efficient cloud solutions. Whether you’re a system administrator, solution architect, DevOps engineer, or project manager, the hands-on projects and best practices in these pages will empower you to plan, deploy, and optimize real-world scenarios in Azure. Even if you’re relatively new to cloud computing or transitioning from another cloud platform, you’ll find the examples accessible and the guidance practical. A basic understanding of cloud concepts and familiarity with common IT infrastructure tools is recommended, but comprehensive explanations will help you bridge any gaps. Ultimately, if your goal is to confidently integrate Azure services into your organization’s workflow and unlock the full potential of the platform, this book is for you.

What this book covers

Chapter 1, Introduction to Azure and Cloud Computing, introduces fundamental cloud computing concepts and shows how Azure fits into the broader ecosystem. You’ll learn about core Azure services, cloud deployment models, and key considerations for starting your journey in the cloud.

Chapter 2, Implementing Entra ID and Hybrid Connectivity, helps you set up Microsoft Entra ID for identity management and explore hybrid connectivity options that securely bridge your on-premises environments with Azure, ensuring seamless identity and access control.

Chapter 3, Implementing the Azure Storage Solutions, covers the core storage services in Azure—Blob, Files, Table, and Queue—and demonstrates how to configure, optimize, and secure them for various enterprise workloads.

Chapter 4, Understanding the Azure Network Topology, Design Principles, and Best Practices, delves into Azure’s networking fundamentals, exploring how to design resilient and secure network architectures. You’ll learn about VNet peering, network security groups, and proven strategies to optimize performance.

Chapter 5, Implementing a Serverless Solution, covers how to build and deploy applications without managing servers using Azure Functions and Logic Apps. This chapter illustrates serverless design patterns, cost optimization, and scaling.

Chapter 6, Principles and Practices of Scalable Data Management, teaches you how to handle data at scale in Azure, examining services such as Azure SQL Database, Cosmos DB, and Data Lake. You’ll explore best practices for ensuring performance, reliability, and compliance.

Chapter 7, Build a Continuous Integration and Continuous Delivery Pipeline, sets up a robust CI/CD pipeline using Azure DevOps or GitHub Actions. This chapter guides you through automating build, test, and deployment processes to accelerate delivery cycles.

Chapter 8, Designing and Building a Containerized Solution on Azure, covers how to package applications with Docker and orchestrate them using Azure Kubernetes Service (AKS). You will learn strategies for scalability, high availability, and efficient resource utilization.

Chapter 9, Enhancing Security and Compliance in an Azure Project, focuses on protecting your cloud resources by implementing Azure best practices for identity, governance, and threat protection. This chapter also addresses compliance requirements and security monitoring.

Chapter 10, Developing a Cloud Cost Optimization Strategy, explores methods to monitor and optimize your cloud spending. You’ll learn how to right-size resources, leverage Azure cost management tools, and establish long-term financial best practices.

To get the most out of this book

To fully benefit from Azure Cloud Projects, you should have a working knowledge of fundamental cloud computing concepts, networking principles, and at least one programming or scripting language (such as C#, PowerShell, or Python). You’ll also need access to an active Azure subscription and a computer with internet connectivity where you can install or access the necessary tools.

Hands-on exercises and practical examples are a key part of this book, so being comfortable with setting up local development environments and using command-line tools will help you follow along more effectively.

Software/hardware covered in the book

OS requirement

Azure CLI

Windows, Linux, or macOS

Azure PowerShell

Windows, Linux, or macOS

Visual Studio Code

Windows, Linux, or macOS

Docker/Docker Desktop

Windows, Linux, or macOS

Git

Windows, Linux, or macOS

.NET SDK/Node.js/Python

Windows, Linux, or macOS (optional)

Web browser

Windows, Linux, or macOS

The required software is listed in the Technical requirements section of the applicable chapter.

Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: “In this YAML file, the dotnet publish command creates a release build of the application, which is then stored as an artifact using the PublishBuildArtifacts task”

A block of code is set as follows:

jobs:   e2e:     runs-on ubuntu-latest     steps:     - name Checkout code       uses actions/checkout@v2     - name Set up Node.js       uses actions/setup-node@v2       with:         node-version 14     - name Install Cypress       run npm install cypress     - name Run E2E Tests       run npx cypress run

Any command-line input or output is written as follows:

kubectl set image deployment/web-app web-app=mycontainerregistry.azurecr.io/web-app:v2

Bold: Indicates a new term, an important word, or words that you see onscreen. For instance, words in menus or dialog boxes appear in bold. Here is an example: “Once all settings are configured, click Review + create and then Create to provision the function app.”

Tips or important notes

Appear like this.

Get in touch

Feedback from our readers is always welcome.

General feedback: If you have questions about any aspect of this book, email us at [email protected] and mention the book title in the subject of your message.

Errata: Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you have found a mistake in this book, we would be grateful if you would report this to us. Please visit www.packtpub.com/support/errata and fill in the form.

Piracy: If you come across any illegal copies of our works in any form on the internet, we would be grateful if you would provide us with the location address or website name. Please contact us at [email protected] with a link to the material.

If you are interested in becoming an author: If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, please visit authors.packtpub.com.

Reviews

Please leave a review. Once you have read and used this book, why not leave a review on the site that you purchased it from? Potential readers can then see and use your unbiased opinion to make purchase decisions, we at Packt can understand what you think about our products, and our authors can see your feedback on their book. Thank you!

For more information about Packt, please visit packt.com

Share Your Thoughts

Once you’ve read Azure Cloud Projects, we’d love to hear your thoughts! Please click here to go straight to the Amazon review page for this book and share your feedback.

Your review is important to us and the tech community and will help us make sure we’re delivering excellent quality content.

Stay Sharp in Cloud and DevOps – Join 44,000+ Subscribers of CloudPro

CloudPro is a weekly newsletter for cloud professionals who want to stay current on the fast-evolving world of cloud computing, DevOps, and infrastructure engineering.

Every issue delivers focused, high-signal content on topics like:

AWS, GCP & multi-cloud architectureContainers, Kubernetes & orchestrationInfrastructure as Code (IaC) with Terraform, Pulumi, etc.Platform engineering & automation workflowsObservability, performance tuning, and reliability best practices

Whether you’re a cloud engineer, SRE, DevOps practitioner, or platform lead, CloudPro helps you stay on top of what matters, without the noise.

Scan the QR code to join for free and get weekly insights straight to your inbox:

https://packt.link/cloudpro

Download a free PDF copy of this book

Thanks for purchasing this book!

Do you like to read on the go but are unable to carry your print books everywhere?

Is your eBook purchase not compatible with the device of your choice?

Don’t worry, now with every Packt book you get a DRM-free PDF version of that book at no cost.

Read anywhere, any place, on any device. Search, copy, and paste code from your favorite technical books directly into your application.

The perks don’t stop there, you can get exclusive access to discounts, newsletters, and great free content in your inbox daily

Follow these simple steps to get the benefits:

Scan the QR code or visit the link below

https://packt.link/free-ebook/9781836204237

Submit your proof of purchaseThat’s it! We’ll send your free PDF and other benefits to your email directly

1

Introduction to Azure and Cloud Computing

You land here! The world of Azure and cloud computing with real life scenarios and hands on experience! In this chapter, we will lay the foundation for your journey into cloud technologies by learning about the essential concepts of cloud computing and the Microsoft Azure platform, because I truly believe in a strong foundation and specially since in this book we will be covering different projects in an advance level. As businesses increasingly move to the cloud, understanding these basics is critical for anyone looking to work with modern IT infrastructure and services.

We will start by exploring the fundamentals of Microsoft Azure, one of the leading cloud platforms in the market, in brief We’ll learn about the features of Microsoft Azure, such as scalability, cost efficiency, and flexibility, which are driving its adoption across industries.

Next, we will dive into an overview of Microsoft Azure portal and learn about its core services and solutions, including computing, storage, networking, and databases. We’ll also discuss the global network of Azure data centers and the importance of regions and availability zones in ensuring high availability and resilience.

By the end of this chapter, we will have a solid understanding of cloud computing principles and the Azure ecosystem. This knowledge will serve as the foundation for the hands-on projects and advanced topics we’ll cover in the subsequent chapters. We’ll be ready to start building, deploying, and managing cloud solutions on Azure, harnessing the power of the cloud to meet modern business needs.

This chapter will cover the following topics:

What is Microsoft Azure?Exploring the Azure PortalOverview of Azure Core Services and SolutionsUnderstanding Azure Regions and Availability

What is Microsoft Azure?

Microsoft Azure is a comprehensive suite of cloud services designed to help organizations build, deploy, and manage applications through Microsoft-managed data centers. Launched in 2010, Azure has rapidly grown to become a leading cloud platform, offering a wide range of services including computing, analytics, storage, and networking (https://www.forbes.com/sites/janakirammsv/2020/02/03/a-look-back-at-ten-years-of-microsoft-azure/).

Azure provides a highly flexible, scalable and open platform, supporting a broad selection of operating systems, programming languages, frameworks, databases, and devices. This versatility allows businesses to use their preferred tools and technologies while leveraging the benefits of cloud computing. You can find more about Azure Fundamentals and Core Cloud Conceptson https://learn.microsoft.com/en-us/training/paths/microsoft-azure-fundamentals-describe-cloud-concepts/.

Features

Let’s look at some of its features:

Global reach: Microsoft operates data centers in numerous regions worldwide, ensuring that Azure services are available wherever you need them. This extensive network of data centers allows businesses to deploy applications closer to their customers, reducing latency and improving performance. For example, a global e-commerce company can use Azure’s data centers in different regions to ensure that their website loads quickly for users in Europe, Asia, and North America.Scalability: Whether you’re running a small web application or a large-scale enterprise solution, Azure can scale to meet your needs. You can easily adjust resources up or down based on demand, ensuring that you only pay for what you use. This elasticity is particularly beneficial for businesses with fluctuating workloads, such as retail companies that experience spikes during holiday shopping seasons.Security and compliance: Azure provides built-in security controls, identity management, and threat detection services. Additionally, Microsoft invests heavily in securing its infrastructure, ensuring compliance with numerous industry standards and regulations.

For example, Azure’s identity and access management (IAM) tools, such as Azure Active Directory, allow businesses to manage user identities and control access to resources securely. This is particularly useful for organizations with stringent security requirements, such as financial institutions or healthcare providers.

Integration: Azure seamlessly integrates with other Microsoft products and services, such as Office 365, Dynamics 365, and Active Directory. This integration simplifies the management of cloud and on-premises environments, providing a unified and cohesive experience. For instance, a business using Office 365 for productivity can easily integrate it with Azure Active Directory to manage user access and enhance security.Flexibility: Moreover, Azure supports a wide range of third-party tools and platforms, allowing businesses to use their preferred technologies while leveraging Azure’s powerful cloud capabilities. For example, developers can use popular development frameworks like .NET, Java, or Node.js, and integrate them with Azure’s services to build robust and scalable applications.

Next, we will explore Azure’s core services and solutions in greater detail, providing you with the knowledge and tools needed to harness the full potential of Microsoft Azure. This foundational understanding will prepare you for the hands-on projects and advanced topics covered in the subsequent chapters.

Core Azure Services and Solutions

Microsoft Azure offers a vast array of services that cater to various business needs, ranging from computing power and storage to advanced analytics and machine learning. In this section, we will explore some of the core services provided by Azure, giving you a comprehensive understanding of the platform’s capabilities and how you can leverage them for your projects.

Virtual Machines

Azure Virtual Machines (VMs) offer a flexible and scalable way to run applications in the cloud. You can create VMs with various operating systems, including Windows and Linux, and configure them with the resources needed for your applications. For instance, a development team can use VMs to create isolated environments for testing different software versions without impacting production systems.

Creating a VM in Azure is straightforward. You can select the desired operating system, VM size, and configuration through the Azure Portal or use an ARM template for automated deployment. Once deployed, you can manage your VM through the portal, including starting, stopping, and resizing as needed.

Azure App Services

Azure App Services is a fully managed platform for building, deploying, and scaling web apps, mobile backends, and RESTful APIs. With App Services, you can host applications written in various languages, such as .NET, Java, Node.js, PHP, and Python. The platform handles infrastructure management, allowing you to focus on developing your application.

For example, if you are developing a web application, you can use Azure App Services to deploy your app quickly, ensuring high availability and automatic scaling based on demand. The platform also integrates with popular development tools, such as Visual Studio and GitHub, to streamline your development workflow.

Azure Functions

Azure Functions is a serverless compute service that enables you to run code on-demand without managing the underlying infrastructure. This service is ideal for tasks that require short-lived processing, such as responding to HTTP requests, processing data from a queue, or running scheduled tasks.

Using Azure Functions, you can focus on writing code while Azure handles the infrastructure. For instance, an e-commerce website can use Azure Functions to process orders as they are placed, automatically scaling to handle varying loads without any manual intervention.

Storage Services

Azure’s storage services provide secure, scalable, and durable storage solutions for a wide range of data types and applications. You can learn more about Azure Storage Services and optionon https://learn.microsoft.com/en-us/azure/storage/common/storage-introduction

Here’s a few examples of Azure Storage Services:

Azure Blob Storage: Azure Blob Storage is designed for storing large amounts of unstructured data, such as documents, images, videos, and backups. It is highly scalable and cost-effective, making it suitable for applications that require extensive data storage.

For example, a media company can use Blob Storage to store and stream video content to users worldwide. Blob Storage supports various access tiers, allowing you to balance cost and performance based on your needs. You can also integrate Blob Storage with other Azure services, such as Azure CDN, to enhance content delivery performance.

Azure File Storage: Azure File Storage provides fully managed file shares in the cloud, accessible via the Server Message Block (SMB) protocol. This service is useful for scenarios where you need shared storage accessible from multiple virtual machines or applications.

For instance, a global team working on a software project can use Azure File Storage to collaborate on code and documents, ensuring all team members have access to the latest versions. Azure File Storage supports both standard and premium performance tiers, allowing you to choose the appropriate level of performance for your workloads.

Azure Disk Storage: Azure Disk Storage offers high-performance, durable block storage for use with Azure VMs. It is ideal for applications that require low-latency access to data, such as databases and enterprise applications.

When you create a VM in Azure, you can attach managed disks to provide persistent storage. Azure Disk Storage offers various disk types, including Standard HDD, Standard SSD, and Premium SSD, to meet different performance and cost requirements.

Networking services

Networking is a critical component of cloud infrastructure, and Azure provides a comprehensive suite of networking services to connect and manage your resources.

Azure Virtual Network (VNet): Azure Virtual Network (VNet) enables you to create isolated networks within the Azure cloud. You have full control over IP address ranges, subnets, routing, and security settings, allowing you to design and manage your network infrastructure.

For example, you can use VNet to segment your applications into different subnets for better security and management. You can also establish secure connections between your on-premises network and Azure VNet using VPN Gateway or ExpressRoute.

Azure Load Balancer: Azure Load Balancer distributes incoming network traffic across multiple resources, ensuring high availability and reliability. It is essential for applications that require high uptime and can scale to handle varying loads.

For instance, an online retail website can use Azure Load Balancer to distribute traffic across multiple web servers, ensuring that no single server becomes a bottleneck during peak shopping periods. This setup improves performance and provides fault tolerance.

Azure Content Delivery Network (CDN): Azure CDN is designed to deliver high-bandwidth content to users globally with low latency. It caches content at strategically located edge nodes around the world, ensuring fast delivery to users regardless of their geographic location.

A media streaming service can use Azure CDN to distribute video content efficiently, reducing load times and improving the user experience. The CDN integrates seamlessly with Azure Blob Storage, making it easy to set up and manage.

Azure VPN Gateway and Azure ExpressRoute: For secure and scalable connectivity between on-premises networks and Azure, Azure VPN Gateway and Azure ExpressRoute offer robust solutions. These services provide encrypted tunnels and dedicated private connections, ensuring secure data transfer between your on-premises infrastructure and Azure.

Database Services

Azure provides a variety of managed database services to support different types of data and workloads.

Azure SQL Database: Azure SQL Database is a fully managed relational database service built on SQL Server. It offers high availability, security, and performance, making it suitable for a wide range of applications, from small web apps to large enterprise solutions.

For example, a financial services company can use SQL Database to manage transaction data securely and efficiently. The service supports advanced features like automatic tuning, threat detection, and geo-replication to ensure optimal performance and security.

Azure Cosmos DB: Azure Cosmos DB is a globally distributed, multi-model database service that provides turnkey global distribution and horizontal scaling. It is designed for applications that require low-latency access to data across multiple regions.

For instance, a social media platform can use Cosmos DB to store user profiles and activity logs, ensuring fast access regardless of the user’s location. Cosmos DB supports multiple data models, including document, key-value, graph, and column-family, making it a versatile choice for various use cases.

Azure Database for MySQL and PostgreSQL: Azure offers managed database services for MySQL and PostgreSQL, providing scalable and secure database solutions for open-source database engines. These services are ideal for businesses that prefer using open-source databases but want to benefit from Azure’s management and scaling capabilities.

For example, a tech startup can use Azure Database for MySQL to manage their application’s backend database, leveraging built-in high availability and automated backups to ensure data integrity and uptime.