VMs, Blob Storage, Entra ID, ARM/Bicep & AZ-305 prep
Run IaaS VMs and PaaS App Service web apps. Use Virtual Machine Scale Sets for elastic compute and understand when to pick managed PaaS over raw VMs.
A Storage Account hosts Blob, Queue, Table and File services. Learn Hot/Cool/Archive access tiers and redundancy options (LRS, ZRS, GRS).
Build a Virtual Network with subnets, secure it with Network Security Groups, and route traffic with Azure Load Balancer (L4) and Application Gateway (L7 + WAF).
Microsoft Entra ID (formerly Azure AD) is Azure's identity backbone. Assign RBAC roles at the right scope, enforce Conditional Access + MFA, and use PIM for just-in-time admin.
Pick the right data store: Azure SQL (relational, managed), Cosmos DB (globally distributed NoSQL with tunable consistency), and Cache for Redis for low-latency reads.
Build event-driven serverless apps with Azure Functions, orchestrate SaaS connectors with Logic Apps, and route events at scale with Event Grid.
Run Kubernetes on AKS, quick one-off containers on ACI, and store images in Azure Container Registry. Understand node pools, scaling, and ingress.
Collect metrics and logs with Azure Monitor, query them with KQL in Log Analytics, and trace application performance with Application Insights.
Harden your estate with Microsoft Defender for Cloud secure score, store secrets in Key Vault, and protect public endpoints with DDoS Protection.
Deploy infrastructure declaratively with ARM JSON, then with cleaner Bicep syntax. Compare with Terraform for Azure.
Design for resilience with Availability Zones, route globally with Traffic Manager / Front Door, and plan disaster recovery with Azure Site Recovery.
Track spend with Cost Management, set budgets + alerts, and commit to Reserved Instances / Savings Plans for predictable workloads.
Build CI/CD pipelines with Azure DevOps and GitHub Actions: build, test, scan, and deploy to App Service / AKS with approvals and environments.
Ingest with Azure Data Factory, store in ADLS Gen2, and analyze at scale with Synapse Analytics. Foundation for enterprise data + ESG reporting platforms.
Design an enterprise-grade architecture: App Gateway (WAF) → App Service / AKS → Azure SQL with geo-replication, secured by Entra ID + Key Vault, deployed via Bicep, observed with Azure Monitor.