Azure Resource Manager (ARM)

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with

Already have an account? Sign In »

23 hours 16 minutes
Video Transcription
Hello and welcome back to Cyber Aires. Microsoft Azure Administrator A Z one of three course. I'm your instructor. Will Carlson. This is Episode six Azure Resource Manager and today's episode We're gonna discuss what, the Azure Resource Manager or the arm A P I is.
We're gonna discuss some of the containers that it gives us to organized assets or resource is in our azure environment. And we're also going to discuss the concept of scope
gonna get started here by talking about what arm A p I is, and it's alternative. The classic deployment
classic deployment was the original deployment model, and it had some limitations. Primarily the fact that resource is were all deployed independently. So, for example, if you wanted to launch a virtual machine, you had to make sure to provision the MIT card and storage and any other supporting features before you launch the virtual machine.
Imagine launching a virtual machine with no storage attached. That's not going to work, but you had to deploy all of us things in the correct order one at a time.
These individual deployments also made it hard to control access because you would have to manage access control at the resource level, so a virtual machine that may have five associated assets you multiply that out, and all of a sudden you've got a lot of access control to manage on one individual device for resource. At the time,
it was also hard to organize things within the classic deployment model because there was no tagging. We'll talk about tagging in an upcoming episode, and that will make more sense
now. Cloud Service is is still a classic deployment model service.
You will see it done that way. Um, that is the only way to deploy Cloud service is
also know that virtual machines, storage accounts and virtual networks can be deployed using the classic deployment model. But unless you have a compelling reason to do so in your organization, I would recommend that you forget Classic deployment model exists altogether.
What alternative does that leave us? Well, that leaves us the arm. A pia. It was released in 2014 to solve a number of the limitations of the classic deployment level. So lack of organization independently deployed resource is you having to know what order to do it in the arm. A p I solves all of that for us
now. I just want to remind you that virtual machines, storage accounts and virtual networks can be deployed either way, but stick with the Army P I.
All of the other resource is, and service is in azure are going to use the arm a P I for deployment, but it's good that you learn it and learn all that you can about in the Army. A p I
some of the containers or organizational structures that the Army p I provides us start out with a concept called Attendant
when you sign up for your azure free account. What you were doing was signing up for an azure active directory tenant. So think of the tenant is the highest level hierarchy of organization with and your azure environment. So attendant is the big container that contains everything that you're wanting to do with an azure.
Now a relatively new organizational constructs to the group is gonna be a management group.
Management group really exists to help you further control policy and governance within your azure environment. We'll talk more about management groups as we know, but understand that ultimately,
a management group is one of the highest level organization structures within Asher.
You can nest management groups. You can have multiple management groups
and down below a management group. Typically, it's going to be a subscription.
What's really unique about a subscription is that it is the primary building resource within the azure environment. So
imagine if you had a subscription for marketing and a subscription for development. They may get billed out differently. One, maybe an enterprise agreement one. Maybe pay as you go. 1 may use one credit card in the company. 1 may use a completely different credit card within the company. Subscriptions are primarily about billing
Downbelow subscriptions. You'll see the concept of resource groups
and resource groups are strictly a logical function to help you and the arm. A P I
keep things that go together all together, but resource groups were typically made up of any combination of resource is and our example. Here we have a virtual machine and a sequel server.
There's one other concept here that has to do with these organizational pieces of azure, and that's the concept of policy. And policy is important as it relates to this management hierarchy, because that's how you create scope for policy and scope is just gonna be the concept of
what particular level in the hierarchy and my applying this policy to. So you may want to apply policy just to a resource. You may want to apply a policy all the way at the top of the organization at the management group so that a policy applies to everybody within the organization. So policy is for governance and
thes organizational units help you apply that policy in a more meaningful way. And I also help you organize your resource is and keep heads or tails of everything going on in your azure environment.
So today we talked briefly about how, as your resource is air gonna be deployed. The old method, the classic deployment model versus the new method. The Army p I.
We talked about the organizational structures that Azure provides us via the arm, a p I, and we also talked about the concept of scope, which is how we limit what we're wanting to do. What resource is it's actually applied to those are gonna be really important concept as we go forward throughout the course, so please keep them in mind to make notes
coming up Next, though,
we're gonna talk about how the arm a p I does the magic that it does four deployments And how pervasive the army p. I is within the azure environment that we're also gonna learn how you can kind of become an arm a p I wizard to leverage that template ing power for your administrative goals going forward.
Thanks so much for joining me today. I'm really excited about the next episode on armed templates and base lining.
Up Next
AZ-103 Microsoft Azure Administrator

This Microsoft Azure AZ-103 Certification training course teaches students to perform tasks like managing Azure subscriptions and resources, implementing and managing storage, deploying and managing virtual machines (VM) and networks, and managing identities!

Instructed By