Which of the following are ways to organize your account and resources in Azure?
AZ-900 Guide: Control and organize Azure resources with Azure Resource ManagerSeptember 13, 2020 Show
5 min read
Principles of resource groupsWhat are resource groups?Resource groups are a fundamental element of the Azure platform. A resource group is a logical container for resources deployed on Azure.
Create a Resource Group
Explore a resource group and add a resourceWhen creating resources, you usually have the option to create a new resource group as an alternative to using an existing resource group. This simplifies the process a bit, but as you see in your new organization, can lead to resources spread across resource groups with little thought as to how to organize them. Use resource groups for organization
Use tagging to organize resourcesWhat are tags?Tags are name/value pairs of text data that you can apply to resources and resource groups. Tags allow you to associate custom details about your resource. Apply tags to resourcesNot all resource types support tags, and tags can’t be applied to classic resources. Use tags for organizationYou can retrieve all the resources in your subscription with a specific tag name or value. Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management. Use policies to enforce standardsWhat is Azure Policy?Azure Policy is a service you can use to create, assign, and manage policies. These policies can enforce these rules when resources are created, and can be evaluated against existing resources to give visibility into compliance. Create a policyPolicies can be created and assigned through the Azure portal, Azure PowerShell, or Azure CLI.
Use policies to enforce standardsYou’ve seen how you could use policies to ensure that our resources have the tags that organize our resources. There are other ways policies can be used to our benefit. Secure resources with role-based access controlRBAC provides fine-grained access management for Azure resources, enabling you to grant users the specific rights they need to perform their jobs. RBAC is considered a core service and is included with all subscription levels at no cost. Using RBAC, you can:
How RBAC defines accessRBAC uses an allow model for access. When you are assigned to a role, RBAC allows you to perform specific actions, such as read, write, or delete. Therefore, if one role assignment grants you read permissions to a resource group, and a different role assignment grants you write permissions to the same resource group, you will have both read and write permissions on that resource group. Best Practices for RBAC
Use resource locks to protect resourcesWhat are resource locks?Resource locks are a setting that can be applied to any resource to block modification or deletion. Resource locks can set to either Delete or Read-only.
Resource locks can be applied to subscriptions, resource groups, and to individual resources, and are inherited when applied at higher levels. Check your Knowledge
Summary
TagsWhich of the following is used to manage resources in Azure?Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure account.
Which two of the following are ways to create resources in Microsoft Azure?How To Create Azure Resource Group?. Sign in to your Microsoft Azure Account.. On the Azure portal, search for and select Resource Groups.. Select Add.. Enter the following details: ... . Select Create. ... . The Azure resource group is now created.. Which is a way of grouping multiple resources to be used to see and manage Azure resources that are related to one another such as a website and a database?Azure role-based access control (Azure RBAC) is the way that you manage access to resources in Azure.
Which feature of Azure would you use to help logically organize resources into a taxonomy?Tagging is a feature that has been introduced into the Azure Resource Manager model (ARM). They can be used to Logically group and track resources. The old (Classic) version of Azure was Azure Service Manager. You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy.
|