Learn how to leverage infrastructure as code with Azure Resource Manager (ARM) and the best practices to build, test, debug, and deploy your applications in Microsoft Azure using ARM templates and the new domain-specific language Bicep. As organizations consider moving partially or fully to the cloud, infrastructure as code (IaC) has become a key component to improving time to market for their applications. However, it is critical that enterprise infrastructure professionals use the right resources and strategies to build the infrastructure required to run applications in the cloud. Azure cloud-native components and capabilities automate the build and deployment process, offering a myriad of compelling reasons to leverage IaC to build your applications in Azure. Starting with the evolution of the software-defined approach and building on the basic concepts of infrastructure as code, this book provides you with comprehensive guidance to learn Azure Resource Manager from the ground up. You will learn the best practices for deploying and maintaining application infrastructure, such as template authoring tooling enhancements, Azure DevOps integrations, and updates to the deployment platform. After reading this book, you will understand the breadth and use cases of ARM capabilities and tooling within Microsoft Azure. You will be able to build, test, debug, and deploy your ARM templates and know how to use infrastructure as code to better manage the life cycle of your applications in Azure. What You Will Learn Introduces the concepts of infrastructure as code and how to leverage it using Azure Resource Manager Teaches how to enable and deploy Azure Resource Manager templates Covers the basic core elements of an ARM template to start authoring your templates and building your applications in the cloud Dives into core components such as parameters, variables, functions, dependencies, deployment modes, loops, conditions), enabling nested templates Reveals the built-in services and features in Azure, allowing the debugging process and validation process of the ARM templates Discusses "Bicep" the language for ARM templates and the DevOps integration to deploy ARM templates Who This Book Is For People who build, install, repair, or maintain the hardware and software associated with computer systems on-premises and who want to learn about the deployment and provisioning process of applications in the Microsoft Cloud using an infrastructure as code approach through Azure Resource Manager. Readers should have an Azure account and be familiar with the main Azure services (storage, compute, networking, management). Basic knowledge of PowerShell is also useful.

Any IT professional can tell you that managing security is a top priority and even more so when working in the cloud. Access to accurate and timely security information is critical, but governance and control must first be enabled. This guide shows you how to take advantage of Azure's vast and powerful built-in security tools and capabilities for your application workloads.Pro Azure Governance and Security offers a comprehensive look at the governance features available with Microsoft Azure and demonstrates how to integrate them with your hybrid and Azure environments, drawing on the author's experiences from years in the field. Learn about the array of controls implemented within Microsoft Azure from two valuable perspectives: the customer and Microsoft operations. Beginning with the top-level subscription hierarchy, learn about the most important built-in Azure security services and features, as well as how to use Azure Policies and Blueprints as a means for security and governance. A series of hands-on exercises teaches you the concepts of Azure Governance: how to enable and deploy Azure Security Center, integrate RBAC (role-based access control), and set up Azure Operations and Monitoring. Get introduced to the new Azure Sentinel solution that offers SIEM as a service for security incident management and proactive hunting. What You'll Learn Understand different architectural designs for implementing Azure Security Operate and monitor an Azure environment Deploy Azure Governance, Policies, and Blueprints Discover key Azure features that enhance security Implement and confidently access Azure Security Center Get to know Azure Sentinel Who This Book Is For Technical engineers, consultants, solution and cloud architects, IT managers, and SecOps teams who need to understand how to integrate governance, security, and compliance in hybrid and Azure environments. A basic understanding of Azure or other public cloud platforms is beneficial, but not required.