Azure Cookbook Recipes to Create and Maintain Cloud Solutions in Azure (Reza Salehi)（Z-Library）

# Azure Cookbook: Recipes to Create and Maintain Cloud Solutions in Azure ## 【One-Line Pitch】 A practical, hands-on guide with 75+ Azure recipes covering security, networking, storage, databases, and serverless services—perfect for cloud engineers and developers who want to solve real Azure problems using CLI scripts rather than reading theory. ## 【Book Arc】 - **Opening (~0%–9%)**: Introduces the book's structure across 11 chapters, from Security and Networking to Cognitive Services and Management/Monitoring, with a clear promise of CLI-driven, practical recipes for everyday Azure scenarios. - **Early (~9%–25%)**: Dives into security fundamentals—creating users, custom RBAC roles, connecting to private VMs via Azure Bastion, disk encryption, and Key Vault secrets—establishing a pattern of "Problem → Solution → Steps → Discussion" for each recipe. - **Early-to-Middle (~25%–38%)**: Expands into networking (VNet peering, user-defined routes) and storage (encryption at rest with Key Vault keys, SAS tokens, blob snapshots, lifecycle management policies for cost optimization). - **Middle (~38%–47%)**: Covers data persistence with Azure SQL and Cosmos DB, including API selection (SQL/Core, Table), private access via endpoints, and custom role definitions for database access control. - **Late (~47%–end)**: Continues with messaging, big data, Functions, App Service, containers, Cognitive Services, and monitoring—though excerpts only partially cover these later chapters. ## 【Key Takeaways】 - **RBAC custom roles are the backbone of Azure security** (Early): Creating custom roles with specific Actions/DataActions (like blob read-only) lets you enforce least-privilege access; the book shows JSON definitions and CLI assignment commands. - **Azure Bastion solves the private VM access problem** (Early): For VMs without public IPs, Bastion provides secure RDP/SSH through the Azure portal without exposing endpoints to the internet. - **Key Vault centralizes secret management** (Early): Store passwords, connection strings, and encryption keys in one place; recipes show how to create vaults, generate keys, and grant client access for retrieval. - **Storage encryption at rest is configurable via Key Vault keys** (Early): Use customer-managed keys (CMK) in Key Vault to encrypt Azure Storage, giving you control over key rotation and lifecycle. - **SAS tokens provide time-limited, scoped access** (Early): Generate tokens with specific permissions (read/write), services (blob/table/file), and expiry times—critical for secure App Service-to-Storage integration. - **Lifecycle management policies automate storage cost optimization** (Middle): Define rules to move blobs from Hot to Cool to Archive tiers based on age, and delete old data—reducing costs without manual intervention. - **Cosmos DB offers multiple APIs for different needs** (Middle): Choose SQL (Core) for JSON documents, Table API for Azure Table Storage migration, and others; each has distinct consistency, distribution, and security features. - **Private endpoints are essential for production data stores** (Middle): Restrict Cosmos DB (and other services) to private traffic only, using IP rules for static clients and VNet rules for Azure-deployed resources. ## 【Reading Tips】 - **Skim the "Discussion" sections first**: Each recipe ends with context explaining why the solution works—read these to understand the "why" before diving into CLI commands. - **Deep-read Chapters 1–3**: Security, Networking, and Storage recipes are foundational and heavily covered in excerpts; master these before moving to databases and serverless. - **Use the CLI scripts as templates**: Copy and adapt the `az` commands for your own environment; replace placeholder variables like `<key-vault-name>` and `<rgName>` with your values. - **Watch for prerequisites**: Many recipes assume Owner role access and a configured workstation—check the preface's "General Workstation Setup Instructions" before starting. - **Skip ahead if you're experienced**: If you already know RBAC and VNet peering, jump to Chapters 4+ for Cosmos DB, Functions, and App Service recipes. ## 【Coverage Limits】 This guide is based on excerpts covering roughly the first half of the book (Chapters 1–4). Later chapters on messaging, big data, Functions, App Service, containers, Cognitive Services, and monitoring are mentioned in the preface but not detailed in the available material. ##