Cloud, Networking, and Professional Topics – Listen | Learn | Forward
In the first post on this topic, Learning Azure (Python) Functions, I provided some introductory reading on Azure Functions to give a background on what they can do and how your Python code interacts with Azure services. Now we’re going to use that knowledge to implement a simple Function App. Later we may build on this simple app to learn about the other triggers and bindings available with Functions.
Serverless has been around for several years and continues to generate significant buzz. Simply put, it means someone provides an environment where you upload and run your function code. Providers offer serverless environments for many popular languages such as Java, Node.js, C#, and Python.
I practice Python as a side project. I do not code at a developer level but learn enough to perform useful work. As I further explore Azure services I want to employ my knowledge of Python to create practical Azure Functions for a deeper understanding of serverless capabilities. If you share an interest in these complimentary tools, read on as I experiment and learn.
Do you have a project or web site that you need to get online quickly and easily? I was recently on-the-cheap and needed a fast, inexpensive way to host some static content on a custom domain while still providing access via HTTPS. This post describes one method of hosting such content using Azure Storage Accounts and Azure CDN. Not only does it provide one practical method for future projects, it is an opportunity to learn a bit more about integrating Azure services together for a product.
Continue reading “Create a Static Website with Azure Storage”
My impressions of the AZ-301 Microsoft Azure Architect Design exam. Continue reading “AZ-301 Exam Experience”
I should be digging deeper into Azure Active Directory authorization concepts today for my upcoming AZ-301 exam. To be honest, I just wasn’t feeling it. I felt the urge to sink my teeth into something with more immediate practical applications at my job. We use Azure Resource Manager (ARM) templates for consistent resource deployment. We’re expanding our library of templates to include for customer deployment of supporting resources to connect with our network. Customers with less experience in Azure or specific resources appreciate receiving a template they can deploy quickly after customizing a small parameters file.
I pulled up the ARM template reference and started running a few deployment scenarios using Network Security Groups (NSG) – one of the simpler resources to template. I soon found some curious rabbit trails in the template parameters that drew my mind into pursuit.
Azure Monitor enables creation of alerts based on a variety of metrics and log search results. This year Azure added the ability to enable a ‘common alert schema’ for notifications when configuring Action Groups. This post aims to explain a bit about what the common alert schema does, including some examples for clarity.
Consumers of commercial cloud Infrastructure-as-a-Service solutions need methods to manage their cloud-based assets. One method employs Bastion Hosts – secure jump boxes that provide remote access to your environment while limiting attack surface. I’ve typically employed a Linux VM for this task, hardened and configured for the single purpose of accessing the environment via ssh. Azure now has in preview the Azure Bastion. It is positioned as a Platform-as-a-Service (PaaS) resource for securely accessing virtual machines in your Azure environment. Let’s take a look at deployment and usage of Azure Bastion (preview) and compare to roll-your-own Linux server bastion hosts.
I run a single, free-license ESXi server at home for various virtual machines. After recently deploying a new home PKI system (using off-line root and subordinate issuing CAs) I had difficulty getting the VMware Host Client (web GUI) to present the chain certificate to the client. Apparently the ESX host client does not accept the issuing certificate part of the chain and just presents the server certificate. However it can be accomplished with a little extra work.
My impressions of the AZ-300 Microsoft Azure Architect Technologies exam Continue reading “AZ-300 Exam Experience”
I’ve been reading more into Azure security lately and explored the topic of Azure Stored Access Policies. These addressed issues inherent in ad hoc Shared Access Signatures and were a tool I wanted in my knowledge base. Available documentation on the Stored Access Policies was good as far as discussing their need and how to create them, but quite lean on actually implementing them. I finally learned that implementing Stored Access Policies requires a method other than Azure Portal but they are quite simple to deploy.
Continue reading “Azure Shared Access Signatures with Stored Policies”
Blog of Ed Summers 