Microsoft Azure in Action (Lars Klint)（Z-Library）

📄 File Format: PDF

💾 File Size: 8.0 MB

📖 Read Online ⬇️ Download

Registered users can read the full content for free

Register as a Gaohf Library member to read the complete e-book online for free and enjoy a better reading experience.

📄 Page 1

M A N N I N G Lars Klint Foreword by Scott Guthrie

📄 Page 2

(This page has no text content)

📄 Page 3

MANN I NG Shelter ISland Lars Klint Microsoft Azure in Action Foreword by Scott Guthrie

📄 Page 4

For online information and ordering of this and other Manning books, please visit www.manning.com. The publisher offers discounts on this book when ordered in quantity. For more information, please contact Special Sales Department Manning Publications Co. 20 Baldwin Road PO Box 761 Shelter Island, NY 11964 Email: orders@manning.com © 2026 Manning Publications Co. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by means electronic, mechanical, photocopying, or otherwise, without prior written permission of the publisher. Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in the book, and Manning Publications was aware of a trademark claim, the designations have been printed in initial caps or all caps. Recognizing the importance of preserving what has been written, it is Manning’s policy to have the books we publish printed on acid- free paper, and we exert our best efforts to that end. Recognizing also our responsibility to conserve the resources of our planet, Manning books are printed on paper that is at least 15 percent recycled and processed without the use of elemental chlorine. ∞ Manning Publications Co. 20 Baldwin Road PO Box 761 Shelter Island, NY 11964 ISBN 9781617299650 Printed in the United States of America The author and publisher have made every effort to ensure that the information in this book was correct at press time. The author and publisher do not assume and hereby disclaim any liability to any party for any loss, damage, or disruption caused by errors or omissions, whether such errors or omissions result from negligence, accident, or any other cause, or from any usage of the information herein. Development editor: Doug Rudder Senior technical development editor: Brian Hanafee Review editor: Radmila Ercegovac Production editor: Kathy Rossland Copy editor: Julie McNamee Proofreader: Katie Tennant Technical proofreader: Milan Šarenac Typesetter: Tamara ŠveliÊ SabljiÊ Cover designer: Marija Tudor

📄 Page 5

Development editor: Doug Rudder Senior technical development editor: Brian Hanafee Review editor: Radmila Ercegovac Production editor: Kathy Rossland Copy editor: Julie McNamee Proofreader: Katie Tennant Technical proofreader: Milan Šarenac Typesetter: Tamara ŠveliÊ SabljiÊ Cover designer: Marija Tudor To Christian, who inspires me to try that extra bit harder to create a better future, and to Fiona, without whom I could never have completed this project—or any other

📄 Page 6

iv brief contents Part 1 Getting started with Microsoft Azure ...................1 1 ■ What is Microsoft Azure? 3 2 ■ Using Azure: Azure Functions and image processing 24 Part 2 Cloud infrastructure with compute, networking, . and storage ................................................................67 3 ■ Using virtual machines 69 4 ■ Networking in Azure 107 5 ■ Storage 128 6 ■ Security 151 7 ■ Azure AI 192 Part 3 Modern application development ........................ 223 8 ■ Serverless 225 9 ■ Optimizing storage 259 10 ■ Relational databases 282 11 ■ Azure Cosmos DB 311

📄 Page 7

v contents foreword xii preface xiii acknowledgments xv about this book xvii about the author xxi about the cover illustration xxii Part 1 Getting started with Microsoft Azure ....1 1 What is Microsoft Azure? 3 1.1 What is cloud computing? 5 1.2 Azure in the real world 6 Hosting a web application 6  ■  Running a hybrid network 8 Mitigating risks and outages 9  ■  Automating infrastructure with Azure Resource Manager templates 10 1.3 Why move to the cloud? 11 Scalability 11  ■  Reliability 11  ■  Expanding infrastructure 12 Support 13  ■  Compliance 13 1.4 Costs 14 Free account 14  ■  Pay as You Go 14  ■  Reserved instances 15 Spot pricing 15  ■  Billing 15

📄 Page 8

vi contents 1.5 What are the alternatives? 16 On premises 16  ■  Other cloud providers 16 Multicloud approach 16 1.6 Interacting with Azure 17 Azure Portal 17  ■  Azure command-line interface 18 PowerShell 19  ■  Software development kits 20 1.7 Creating an Azure account 20 2 Using Azure: Azure Functions and image processing 24 2.1 Understanding the problem 25 2.2 Creating the architecture 25 What is a resource group? 26  ■  Creating a resource group 27 Azure Blob Storage: The basics 29  ■  Creating a storage account 30  ■  Storage account: Networking 31  ■  Storage account: Data protection 32  ■  Creating a storage container 33 What is an Azure Logic App? 37  ■  Creating a Logic App 38 Logic App riggers and connectors 39  ■  Configuring a Logic App connector 41  ■  Logic App operation: Storing data from email to Blob Storage 42  ■  Testing the Logic App workflow 45 What is an Azure Function? 46  ■  Creating a storage container for resized images 47  ■  Creating a Function App 47 Monitoring Function Apps 51  ■  Creating an Azure Function 52 Adding integrations to an Azure Function 54  ■  Writing code in a function 56  ■  Referencing code libraries in Azure Functions 57 2.3 Exploring the solution in Azure 61 Scaling 61  ■  Performance 61  ■  Fault tolerance 62 This isn’t production 62  ■  Cost savings 62 2.4 Deleting the solution 63 Part 2 Cloud infrastructure with compute, networking, and storage ..........................67 3 Using virtual machines 69 3.1 What is a virtual machine? 70 Infrastructure as a service 72  ■  Ingress and egress 72 Remote Desktop Protocol 73  ■  Managing software on a VM 74 3.2 Creating a VM 76 Location 77  ■  Operating system 81  ■  Size 82 Other resources 83  ■  Disks 84

📄 Page 9

viicontents 3.3 Networking 85 Virtual network 86  ■  Public IP address 86  ■  Network security group 87  ■  Load balancing 87 3.4 Managing a VM 88 Identity 89  ■  Optimizing costs 89  ■  Introducing Azure command-line interface 90 3.5 Getting the most out of a VM 91 Changing VM type and size 92  ■  Maintenance and updates 93 Policies 94  ■  Azure Bastion 94 3.6 Azure Monitor 95 Detecting problems 96  ■  Drilling into logs with Log Analytics 98 Creating smart alerts 99 3.7 Logs 103 Using logs effectively 103  ■  Using health-monitoring agents 104 4 Networking in Azure 107 4.1 What is a virtual network? 108 4.2 Subnets 110 Classless Inter-Domain Routing 112  ■  Logical separation 114 Routing optimization 115 4.3 Network security groups 116 4.4 Connecting networks 119 VNet peering 119  ■  VPN Gateway 120  ■  ExpressRoute 122 Which connection to use when? 123 4.5 Distributing network traffic with Azure Load Balancer 124 Public IP address 124  ■  Backend pool and VM scale sets 125 Health probes 125  ■  Load balancing rules 126 Putting it all together to create a Load Balancer 126 5 Storage 128 5.1 Storage paradigm 129 5.2 Storage accounts 130 Replicating your storage 132  ■  Storage type = Kind + SKUName 133 5.3 Blob 134 Access tiers 134  ■  Containers 135  ■  Blob types 136

📄 Page 10

viii contents 5.4 File 139 Premium files 141  ■  Large files 142 5.5 Queue 142 5.6 Table 145 Schema-less 146  ■  Inserting data 147 5.7 Managed disk 148 6 Security 151 6.1 A secure foundation 152 Defense in depth 153 6.2 Shared responsibility model 155 On premises 156  ■  IaaS 156  ■  PaaS 157  ■  SaaS 158 Compliance and data classification 158  ■  Using cloud-enabled security 158 6.3 The Zero Trust approach and Entra ID 159 6.4 Microsoft Defender for Cloud 162 Security recommendations 164  ■  Secure Score 166 Security alerts 167 6.5 Multifactor authentication 169 Passwordless 174 6.6 Managing users with Entra ID 177 Understanding tenants, subscriptions, users, and more 178 Creating service principals for application access to Azure resources 179  ■  Managed identity 181 6.7 Role-based access control 183 Security principal 183  ■  Role definition 183  ■  Scope 184 6.8 Azure Key Vault 186 Creating a Key Vault 187  ■  Adding and retrieving a secret 188 7 Azure AI 192 7.1 Natural language processing and OpenAI 193 7.2 Azure Speech services 197 Speech to Text 198  ■  Text to Speech 199 Speech Translation 200

📄 Page 11

ixcontents 7.3 Azure Vision services 201 Computer Vision 201  ■  Custom Vision 203  ■  Face API 204 Content Moderator 205 7.4 Azure AI Foundry 207 Starting with AI Foundry 208  ■  Configuring a data source 210 Selecting a model 212  ■  Model fine-tuning 214  ■  Deployment pipelines and operational governance 215 7.5 Responsible AI 217 Fairness 217  ■  Transparency 218  ■  Privacy 219 Part 3 Modern application development ......... 223 8 Serverless 225 8.1 Alpaca-Ma-Bags web shop and nonfungible tokens 226 8.2 Azure Functions 229 Triggers 233  ■  Bindings 233  ■  Hosting 236 8.3 Azure Logic Apps 239 Connectors 241  ■  Triggers 241  ■  Actions 244 8.4 Azure API Management 248 API gateway 250  ■  Management plane 251  ■  Developer portal 252  ■  Connecting the Azure Function 253 Connecting the Logic App 255 8.5 Is serverless just platform as a service? 257 9 Optimizing storage 259 9.1 Banning Books dials up its storage game 260 9.2 Static website in Azure Storage 260 AzCopy 261  ■  SAS tokens 263  ■  $web folder and static website 265  ■  Custom domain 267 9.3 Data protection 269 Blob version tracking 270  ■  Azure Storage account lock 271 Soft delete 272 9.4 Object replication 273 Data redundancy and availability 274  ■  Geo-distribution and latency reduction 275

📄 Page 12

x contents 9.5 Life cycle management 275 Tier transitioning 275  ■  Cleaning up 278 10 Relational databases 282 10.1 The Banning Books ordering system 283 10.2 Database design 283 Normalization and denormalization 284  ■  The Banning Books ordering schema 286 10.3 Choosing the right database service 289 Azure SQL Database 289  ■  Azure Database for MySQL 291 Azure Database for PostgreSQL 293  ■  Choosing a database for Banning Books 294 10.4 Performance tuning 296 Indexing and Automatic Tuning 296  ■  Query optimization 297 Partitioning 298  ■  Scaling 300 10.5 Disaster recovery 302 Geo-replication 303  ■  Failover groups 304 10.6 Database security 306 Authentication via Entra ID 306  ■  Securing data at rest 307 Securing data in transit 307  ■  The principle of least privilege 308 11 Azure Cosmos DB 311 11.1 Guaranteed speed at any scale 312 Scalability 314  ■  Speed with multi-region replication 315 Pitfalls of enabling autoscaling and multi-region for Cosmos DB 316 11.2 Simplified application development 317 Introduction to Cosmos DB APIs 317  ■   SDKs for enhanced development 318 11.3 Advanced data modeling and partitioning 321 Core principles of data modeling in Cosmos DB 321 Understanding partitioning in Cosmos DB 323 Advanced partitioning strategies 325 11.4 Consistency, availability, and concurrency 327 Consistency 327  ■  Availability 329  ■  Concurrency 330

📄 Page 13

xicontents 11.5 Near-real-time analytics and integration with Azure services 331 Using Azure Synapse Analytics 331  ■  Integrating with Azure Functions 332  ■  Using Azure Stream Analytics 333 11.6 Managing costs and performance optimization 333 Provisioned throughput vs. autoscale 334  ■  Monitoring and optimization 334  ■  vCore usage considerations 336 index 339

📄 Page 14

xii foreword I’ve been a part of Azure’s journey since its earliest days. In those formative years, we weren’t just building a product, we were helping shape a new way for developers and businesses to think about computing. Today, Azure is growing and evolving faster than ever. AI is being woven into every layer of the stack, services are scaling globally in seconds, and millions of developers around the world are now able to solve in weeks complex problems that once took years. Behind each of these projects is a team of engineers making thoughtful decisions about architecture, performance, security, and cost. This is why cloud engineers are more essential than ever. Azure provides the build- ing blocks, but it’s your expertise that transforms them into solutions that were never possible before. I first met Lars at TechEd Sydney in 2014, where he was doing what he does best: making complex technology feel approachable and energizing. That same clarity and enthusiasm run through every page of this book. Lars doesn’t just explain what Azure can do; he offers a hands-on guide to making Azure work for you and your customers. It’s a great road map to navigating the cloud with confidence and purpose. I can’t wait to see what you build. —Scott Guthrie Executive Vice President of the Microsoft Cloud + AI Group

📄 Page 15

xiii preface The hardest thing I have done is write this book. It took me four and a half years, and I never gave up. I’ve been working with Azure since 2012, back when the cloud felt like an exciting new frontier—full of promise, potential, and, frankly, a whole lot of confusion. Over the years, I’ve built everything from data pipelines to AI-powered apps and from websites to sprawling distributed microservices. Each project was a reminder of just how much Azure could do—and how overwhelming the endless list of services, regions, and fea- tures could feel. That tension—the excitement and the overwhelm—is what led me here. I wanted to create a resource that felt real, practical, and human—not another dry academic tome, not a thousand pages of jargon and buzzwords, but something you could actually use. I wanted to write a book that I would want to read myself, and something that could meet you at the keyboard, not just in the classroom. In truth, part of writing this book was personal. I wanted to prove to myself that I could do it—that I could take more than a decade of late nights, customer projects, conference talks, and, yes, a few llama-related metaphors, and turn them into some- thing useful for others. My hope is that as you read, you’ll feel like you’re learning from a colleague who’s been there, tried that, and is willing to share both the shortcuts and the scars. This book is hands-on, straight to the point, and sprinkled with a bit of Aussie humor. You won’t find marketing slides or consultant buzzwords here. You will find practical examples, relatable explanations, and a guide to the best parts of Azure—the ones that actually matter when you’re trying to ship something real.

📄 Page 16

xiv preface If there’s one thing I’d love for you to take away, it’s that Azure doesn’t have to be intimidating. Yes, it’s big. Yes, it moves fast. But with the right mindset, a few guideposts, and a willingness to experiment, you can harness Azure’s power without losing your sanity. That’s what Microsoft Azure in Action is all about. So, whether you’re just getting started or deep into your own cloud journey, thanks for picking up this book. I hope it helps you, teaches you, and maybe even makes you smile along the way. And if nothing else, may it reassure you that the cloud isn’t as scary as it looks—especially if you have a llama or two by your side.

📄 Page 17

xv acknowledgments Writing a book is never a solo effort, even if most of it happens alone at a keyboard late at night. This one certainly wasn’t. First and foremost, to my wife, Fiona—thank you for your endless patience as I spent countless evenings and weekends tapping away at this manuscript. Your support made the long nights possible, and your encouragement kept me going when I wondered if I’d ever finish. To David Neal, whose incredible artwork brings this book to life—your illustrations don’t just decorate the pages, they capture the spirit of learning and discovery that I wanted the book to embody. To fellow authors Henry Been, Gerald Versluis, and Jeremy Morgan—thank you for the encouragement, advice, and constant positive reinforcement. You somehow always knew when to push me forward and when to lighten the mood with a joke about the writing process. That balance kept me going through the toughest stretches. To Doug Rudder, my developmental editor and the main reason this book actually exists—you challenged me, guided me, and most of all, reminded me not to quit. I couldn’t have asked for a steadier hand at the wheel. To Mike Stephens from Manning, who never looked for someone to blame when I fell behind, but instead always looked for solutions—that kind of support is rare, and I’m deeply grateful. To Scott Guthrie from Microsoft, for so generously writing the foreword—your per- spective on Azure’s journey adds a depth and authenticity to this book that I could never have provided on my own. To the entire Manning team and everyone who supported the MEAP (Manning Early Access Program)—your feedback, patience, and enthusiasm shaped this book into something far better than I could have produced alone.

📄 Page 18

xvi acknowledgments And finally, to all the reviewers—your suggestions helped make this a better book: Adarsh Kumar, Alain Couniot, Alain Lompo, Bob Clingan, Daniel Oscar Frink, Dar- ren Gillis, Deshuang Tang, Ernesto Cardenas Cangahuala, Filipe Teixeira, George Boteanu, George Onofrei, Harini Shankar, Jan Vinterberg, Javid Asgarov, Jelte Derk- sen, Jeremy Caney, Johan Weterings, John Zoetebier, Ian Stirk, Kalyan Chanumolu, Kay Engelhardt, Kelvin Meeks, Ken Dason, Kyle Peterson, Martin Dimovski, Maxim Volgin, Michael Heil, Muralidharan T R, Norm Collins, Olivier Stas, Pankaj Verma, Prashan- thi Chinthala, Prashant Dwivedi, Rainer Jeschor, Renato Gentile, Rob Ruetsch, Roman Levchenko, Stanley Anozie, Stefan Turalski, Steve Goodman, Sudeep Batra, Sveta Natu, Swathi Jannapureddy, Sweetha Jannapureddy, Thomas Van Laere, and Vaibhav Tyagi. Thank you all—this is as much your book as it is mine.

📄 Page 19

xvii about this book Azure is a massive platform. From compute to storage, AI to networking, there are hundreds of services and thousands of ways to stitch them together. When I started with Azure back in 2012, I was both excited and completely overwhelmed. This book exists to take that feeling of “Where do I start?” and turn it into “I know what to do next.” The goal of Microsoft Azure in Action is to give you a practical, hands-on path into Azure. You won’t just learn what the services are—you’ll learn how to apply them in real-world scenarios. This book avoids heavy academic writing and instead focuses on being engaging, straightforward, and useful. You’ll see how I use Azure every day, with examples that are as relevant and relatable as possible. Who should read this book This book is for developers, engineers, students, and IT professionals who want to build real solutions in the cloud: ¡ If you’re a developer, you’ll learn how to design and run applications that take advantage of Azure’s services. ¡ If you’re a systems or data engineer, you’ll get a solid foundation in infrastruc- ture, storage, networking, and security. ¡ If you’re a student or new to cloud, this book will give you a guided tour of the essentials so you can hit the ground running. You don’t need to be a seasoned cloud architect to benefit; a working knowledge of basic software or IT concepts is enough. The only thing you need is curiosity and a will- ingness to get your hands dirty.

📄 Page 20

xviii about this book How this book is organized: A road map The book is divided into three parts, with 11 chapters in total. Each part builds on the previous one, but you don’t have to read in strict order—after the fundamentals, you can jump to the chapters that are most relevant to your work. part 1: getting started with azure ¡ Chapter 1: What is Microsoft Azure?—Explains what Azure is, why it exists, and how its global infrastructure of regions and services creates opportunities for scale and innovation. ¡ Chapter 2: Using Azure: Azure Functions and image processing—By building an image resizing tool, this chapter shows how identity, organization, and resource man- agement fit together to form the foundation of every Azure solution. part 2: cloud infrastructure with compute, networking, and storage ¡ Chapter 3: Virtual machines—Covers how to create and configure VMs, how to access them remotely, optimize costs, as well as use monitoring and logs to keep your VM healthy. ¡ Chapter 4: Networking in Azure—Learn what a virtual network is, how to set up subnets as well as securing your network and connecting to it. Do it all with a real- world scenario. ¡ Chapter 5: Storage—Get the basics on how to create and manage storage accounts. Understand the various types of storage, replication, and managing a storage account. ¡ Chapter 6: Security—Covers the shared responsibility model, zero-trust security, multifactor authentication, Entra ID user management, and role-based access control. This chapter is all things security basics. part 3: managing data with azure ¡ Chapter 7: Azure AI—You’ll learn how to approach AI on Azure using natural lan- guage processing, speech services, vision services, and then using the Azure AI Foundry platform to create your very own project. ¡ Chapter 8: Serverless—Azure Functions, Logic Apps, and API Management com- bined make for a powerful serverless force of Azure services. You’ll build an NFT generator using only serverless. ¡ Chapter 9: Optimizing storage—Learn how to use SAS Tokens, AzCopy, and static websites to take full advantage of cloud storage on Azure. We’ll also cover version tracking, replication, and life cycle management of your storage account. ¡ Chapter 10: Relational databases—By building an ordering system, we’ll cover data- base design, how to choose the right database type, performance tuning, disaster recovery, and database security.