Azure Cookbook

Preface
Who Should Read This Book
Why I Wrote This Book
Navigating This Book
What You Will Need
Getting Started
Azure Account Setup
General Workstation Setup Instructions
Conventions Used in This Book
Using Code Examples
O’Reilly Online Learning
How to Contact Us
Acknowledgments

1. Security
Workstation Configuration
Creating a New User in Your Azure Account
Problem
Solution
Discussion
Creating a New Custom Role for Our User
Problem
Solution
Discussion
Assigning Allowed Azure Resource Types in a Subscription
Problem
Solution
Discussion
Assigning Allowed Locations for Azure Resources
Problem
Solution
Discussion
Connecting to a Private Azure Virtual Machine Using Azure Bastion
Problem
Solution
Discussion
Protecting Azure VM Disks Using Azure Disk Encryption
Problem
Solution
Discussion
Blocking Anonymous Access to Azure Storage Blobs
Problem
Solution
Discussion
Configuring an Azure Storage Account to Exclusively Use Azure AD Authorization
Problem
Solution
Discussion
Storing and Retrieving Secrets from Azure Key Vault
Problem
Solution
Discussion
Enabling Web Application Firewall (WAF) with Azure Application Gateway
Problem
Solution
Discussion

2. Networking
Workstation Configuration
Creating an Isolated Private Network by Provisioning an Azure Virtual Network
Problem
Solution
Discussion
Creating a Network Layout in Azure Virtual Networks Using Subnets
Problem
Solution
Discussion
Routing Network Traffic Using User-Defined Routes
Problem
Solution
Discussion
Securing Azure Virtual Networks with Azure Firewall
Problem
Solution
Discussion
Securing Azure Virtual Networks with Network Security Groups
Problem
Solution
Discussion
Connecting Two Azure VNets Using Azure Network Peering
Problem
Solution
Discussion
Verifying Azure VNet Connectivity Using Azure Network Watcher
Problem
Solution
Discussion

3. Storage
Workstation Configuration
Using Azure Key Vault Keys to Configure Azure Storage Encryption at Rest
Problem
Solution
Discussion
Controlling Azure Storage Network Access
Problem
Solution
Discussion
Granting Limited Access to Azure Storage Using SAS Tokens
Problem
Solution
Discussion
Granting Azure Function Apps Access to Azure Storage Using Managed Identity and RBAC
Problem
Solution
Discussion
Creating and Storing Snapshots of Blob Objects
Problem
Solution
Discussion
Creating and Accessing New File Versions
Problem
Solution
Discussion
Using a Lifecycle Management Policy to Save Storage Account Costs
Problem
Solution
Discussion
Using AzCopy to Upload Multiple Files to Azure Storage Blobs
Problem
Solution
Discussion
Using AzCopy to Upload Multiple Files to Azure Storage File Shares
Problem
Solution
Discussion
Protecting Azure Storage Blobs from Accidental Deletion
Problem
Solution
Discussion
Protecting an Azure Storage Account from Deletion Using Azure Locks
Problem
Solution
Discussion

4. Persisting Data
Workstation Configuration
Creating a Cosmos DB NoSQL API Account
Problem
Solution
Discussion
Creating a Cosmos DB Apache Gremlin (Graph) API Account
Problem
Solution
Discussion
Configuring Azure Cosmos DB Firewall
Problem
Solution
Discussion
Configuring Azure Cosmos DB Private Access
Problem
Solution
Discussion
Granting Function Apps Access to Cosmos DB Using RBAC
Problem
Solution
Discussion
Storing Tabular Data in Azure Storage Tables
Problem
Solution
Discussion
Configuring Autoscale for an Azure Cosmos DB NoSQL API Container
Problem
Solution
Discussion
Saving Costs on Multiple Azure SQL Single Databases with Varying and Unpredictable Usage Demands
Problem
Solution
Discussion
Configuring Serverless Compute Tier for Azure SQL Single Databases
Problem
Solution
Discussion
Configuring Azure SQL Firewall IP Rules
Problem
Solution
Discussion
Configuring Azure SQL Firewall VNet Rules
Problem
Solution
Discussion
Backing Up Azure SQL Single Databases into Azure Storage Blobs
Problem
Solution
Discussion

5. Messaging and Events
Workstation Configuration
Ingesting Streaming Data at Scale Using Event Hubs
Problem
Solution
Discussion
Ingesting Telemetry Data from IoT Devices Using Azure IoT Hub
Problem
Solution
Discussion
Implementing Communication Between Services Using Azure Storage Queues
Problem
Solution
Discussion
Implementing Communication Between Services Using Azure Service Bus Queues
Problem
Solution
Discussion
Implementing a Publish-Subscribe Pattern Using Azure Service Bus Topics
Problem
Solution
Discussion
Queuing Newly Uploaded Blobs for Further Processing Using Azure Event Grid
Problem
Solution
Discussion

6. Big Data
Workstation Configuration
Processing Live Data Streams Using Azure Stream Analytics
Problem
Solution
Discussion
Querying CSV File Content Using Azure Synapse Analytics Serverless Pool
Problem
Solution
Discussion
Saving Costs on Idle Azure Synapse Dedicated SQL and Spark Pools
Problem
Solution
Discussion
Processing Datafiles Using Azure Databricks
Problem
Solution
Discussion
Performing ETL/ELT Operations on Big Data Using Azure Data Factory (ADF)
Problem
Solution
Discussion

7. Azure Functions and Serverless Services
Workstation Configuration
Implementing a Web API Using Azure Functions
Problem
Solution
Discussion
Invoking an Azure Function on a Schedule Using the Timer Trigger
Problem
Solution
Discussion
Invoking an Azure Function on Blob Upload Using the Blob Trigger
Problem
Solution
Discussion
Inserting Function App Output into Azure Cosmos DB
Problem
Solution
Discussion
Establishing Communication Between Azure Functions Using the Service Bus Queue Trigger
Problem
Solution
Discussion
Restricting Network Access to Azure Function Apps
Problem
Solution
Discussion

8. Azure App Service
Workstation Configuration
Deploying a Web Application to Azure App Services Using ZipDeploy
Problem
Solution
Discussion
Deploying a Web Application to Azure App Service Using FTP
Problem
Solution
Discussion
Deploying a Web Application from a Public GitHub Repository to Azure App Service
Problem
Solution
Discussion
Configuring Autoscaling for Your Azure App Service Plan
Problem
Solution
Discussion
Restricting Network Access to an Azure App Service
Problem
Solution
Discussion
Hosting Static Websites in Azure Storage
Problem
Solution
Discussion

9. Containers
Workstation Configuration
Chapter Prerequisites
Building and Pushing a Container Image to Azure Container Registry
Problem
Solution
Discussion
Pulling and Running a Docker Image in Azure Container Instances
Problem
Solution
Discussion
Pulling and Running a Containerized Website in Azure App Services
Problem
Solution
Discussion
Pulling and Running a Containerized Website in Azure Container Apps
Problem
Solution
Discussion
Limiting Azure Container Registry Public Network Access
Problem
Solution
Discussion

10. Azure Cognitive Services
Workstation Configuration
Postman Collection
Provisioning a Multi-Service Azure Cognitive Services Resource
Problem
Solution
Discussion
Converting Text to Speech
Problem
Solution
Discussion
Translating Text
Problem
Solution
Discussion
Performing Sentiment Analysis on Text
Problem
Solution
Discussion
Detecting Objects in Images
Problem
Solution
Discussion
Creating Captions for Images
Problem
Solution
Discussion
Extracting Text from Images Using OCR
Problem
Solution
Discussion
Detecting PII in Text
Problem
Solution
Discussion

11. Management and Monitoring
Workstation Configuration
Managing Azure Resource Tags
Problem
Solution
Discussion
Estimating Costs for Azure Resources
Problem
Solution
Discussion
Monitoring Costs of Provisioned Azure Resources
Problem
Solution
Discussion
Collecting Platform Logs for an Azure Resource
Problem
Solution
Discussion
Analyzing Azure Monitor Platform Logs
Problem
Solution
Discussion

Index
About the Author