Once you have your Azure Subscription, I think the planning and implementing Resource Groups should be first on your list. Because if this is not done, then when you go to deploy anything in the new Azure portal in ARM mode, then a default Resource Group will be created for you. If you pre-make a few to start with, then once you create storage, network and compute resources, then you can assign those resources to Azure Resource groups, per Azure Region, as you see fit. There are many ways to do this e.g. by dev/test environments or by resource types such as domain controllers or web servers. At a high level, most Azure pages will say to create these according to managed lifecycles of Azure Resources. By default the subscription administrators will have access to all of these, so if you make a bunch, then later, you can create groups to assign RBAC to delegate administration.
Overview
- Design patterns for Azure Resource Manager templates when deploying complex solutions
- World Class ARM Templates Considerations and Proven Practices | Download THE Whitepaper!
- Azure enterprise Scaffold – prescriptive subscription governance
- Identity all existing RBAC roles available | http://aka.ms/Azure/Roles
- Using tags to organize your Azure resources | http://aka.ms/Azure/tags
- Use Policy to manage resources and control access | http://aka.ms/azure/policy
- Lock resources with Azure Resource Manager | http://aka.ms/Azure/Lock
- Determine Naming Convention | http://aka.ms/azure/naming
- Tuesdays with Corey: Azure Resource Policy
- Authenticating a service principal with Azure Resource Manager
ARM Templates
- Azure Resource Manager JSON Templates overview -understand them better!
- Azure Resource Manager DevOps Jump Start Microsoft Virtual Academy online class!
- Ignite 2016 Fully Integrated Azure Resource Manager Deployments
- Build 2017 Azure Resource Manager templates: Life after (first) deployment
- Ignite 2016 Manage and control your applications with Microsoft Azure Resource Manager
- Azure Resource Manager Templates | On Channel 9
- Azure Quick Start Templates! | As mentioned on Channel 9 above | Use the same template repeatedly
Operational Guidance
Task Name Task Link
- Authoring ARM Templates This self-paced session will run through a sequence of bite-sized labs that build on each other.
- Deploy a Resource Group through command line or the Azure Portal | http://aka.ms/Azure/RG
- Manage access using the Azure portal | http://aka.ms/Azure/RBAC/Manage
- Manage Role-Based Access Control with Azure PowerShell | http://aka.ms/azure/rbac/ps
- Manage Role-Based Access Control with the Azure Command Line Interface | http://aka.ms/azure/rbac/cli
- Managing Role-Based Access Control with the REST API | http://aka.ms/Azure/RBAC/RestAPI
- Identify Role-based access control in Azure Automation | http://aka.ms/Azure/RBACA/Automation
AllergicToCode 