3. Agenda  Why Azure Resource Manager  What has already been enabled  Questions/Feedback

4. Today’s Challenge It’s difficult to…  Deploy or update a group of resources, repeatedly  Manage permissions on a group of resources  Visualize a group of resources in a logical view, including monitoring/billing

5. Singleton s  Deploy becomes more complex  Proper use of resources becomes more abstract  Isolation makes communication a challenge VIRTUAL MACHINE STORAGE SQLDATABASE

6. Resource Centric Views 6

7. Introducing Resource Manager Application Lifecycle Container Declarative solution for Deployment and Configuration Consistent Management Layer

8. Resourc e Groups  Tightly coupled containers of multiple resources of similar or different types  Every resource *must* exist in one and only one resource group  Resource groups can span regions

9. Coupling for Resources Resource Group is a unit of management  Lifecycle: deployment, update, delete, status  Identity: resources can talk to each other  Grouping: Metering, billing, quota: applied & rolled up to group  Access Control: Scope for RBAC permissions

10. Resource Group Lifecycle Question: Should these resources be in the same group or a different one? Hint: Do they have common lifecycle and management? Answer: Up to you.

11. Azure Templates can: Ensure Idempotency Simplify Orchestration Simplify Roll-back Provide Cross-Resource Configuration and Update Support Azure Templates are: Source file, checked-in Specifies resources and dependencies (VMs, WebSites, DBs) and connections (config, LB sets) Parametized input/output Instantiation of repeatable config. Configuration  Resource Group Power of Repeatability SQL - AWebsite Virtual Machines SQL-A Website [SQL CONFIG] VM (2x) DEPENDS ON SQL SQLCONFIG

12. Add your own Power Some resources can be extended allowing more code or data inside the resource AV agent inside a VM WordPress Webdeploy package on a Website Allow for Scripting or Imperative configuration of resources Extensible solution (Windows and Linux): VMM Agent DSC (in-VM PowerShell) Chef Puppet 12

13. Consistent Management Layer AZURE RESOURCE MANAGER API

14. So, what does this all mean… Application Lifecycle Container  Deploy and Manage your application as you see fit Declarative solution for Deployment and Configuration  Single click deployment of multiple instantiations of your application Consistent Management Layer  The same experience of deployment and management whether you go from the Portal, Command Line, or Tools

15. Demo Let’s see that work

16. Azure RM Capabilities Centralized auditing of operations Simple tagging and grouping of resources Consistent access control (e.g. RBAC) 16

17. Supported Resources and Roadmap Websites SQL Azure DB Classic Compute Classic Network Classic Storage Redis Cache … all existing Azure services are coming on-line 17

18. Audited Management Operations Create / Update / Delete operations are audited Rich querying capabilities Available at subscription, resource group and resource 18

19. Detailed Audits 19 Rich information about the who, what and when Correlation id groups related operations (e.g. templates)

20. Resource Tags Name-value pairs assigned to resources or resource groups Subscription-wide taxonomy and complete for tag consistency Each resource can have up to 15 tags

21. Tagging Tips Notes: attach notes to resources via tags Creator: track who is the “owner” or responsible for a resource Department/Cost center: record who is responsible for paying for a resource Environment: group resources in production vs. pre-production vs. test

22. 22 Organizational concepts Resource groups Tightly coupled to a container of resources Follows RBAC rules 1 resource group Tags Loosely coupled user or system defined categorization Arbitrary boundaries 15 tags to use as needed Resource groups and tags are the building blocks from which users define applications.

23. Access Control: RBAC Allows secure access with granular permissions to resources Assignable to users, groups or service principals Built-in roles make it easy to get started 23

24. Two Key Concepts 24 Role Definitions describes the set of permissions (e.g. read actions) can be used in multiple assignments Role Assignments associate role definitions with an identity (e.g. user/group) at a scope (e.g. resource group) always inherited – subscription assignments apply to all resources

25. Role Based Access Control

26. Granular Scopes /subscriptions/{id}/resourceGroups/{name}/providers/…/sites/{site} subscription level – grants permissions for all resources in the sub resource group level – grants permissions for all resources in the group resource level – grants permissions to the specific resource

27. Demo Let’s see that work

28. Recap  Next generation of Azure management  Templates provides predictability / efficiency  Audits, Tags, Access Control & more  Works Everywhere (public + private clouds) 28

29. References MVA Azure RM session: http://aka.ms/arm-devopshttp://aka.ms/arm-devops API docs on MSDN: http://aka.ms/armmsdnhttp://aka.ms/armmsdn Template docs on MSDN: http://aka.ms/templatemsdnhttp://aka.ms/templatemsdn Azure RM cmdlets: http://aka.ms/armpowershellhttp://aka.ms/armpowershell Available on twitter: @clamanna and @gautamthapar 29

30. Questions/Feedback 30

32. www.microsoft.com/learning http://microsoft.com/technet http://channel9.msdn.com/Events/TechEd http://developer.microsoft.com