Cloud Journey

Azure - Cross region service endpoints for azure storage (GA) #cloud #azure Hi All! To bring an azure storage under virtual network and/or restrict storage account to be only accessed from VNet/not allowing to publicly accessible, we have private endpoint and service endpoint. We typically use either private endpoint or service endpoint. Herebefore azure has service endpoint for storage only allows to access/connect to VNet from the same or paired region. As per the latest feature Cross region service endpoints for azure storage generally available, service endpoint can be configured to allow access to an Azure Blob or Data Lake storage account from VNets in any region. The earlier service endpoint type is Microsoft.Storage The new service endpoint type is Microsoft.Storage.Global The only and main thing is we can't have both type of above service endpoint in a subnet at a time. (i.e. If Microsoft.Storage chosen, Microsoft.Storage.Global cannot be cho

Azure Devops - work items bulk import-update-publish to Devops using Excel #cloud #azure #devops Hi All! As a azure devops guys and work on scrum or any other methodologies, we have many chances to update our tasks in devops. There are chances that project manager and/or project lead need to work on consolidated work items for presentation. We can update our task one by one individually which takes more time and Consider the below scenaio. Project lead or we need to modify the state of 100 work items. More than 15 work items title need to be modified. To achieve the above with minimal effort and time, we have Azure Devops Office Integration feature which will help us to work on excel and update the work items altogether from excel to Devops all at once. Here before, we used query in Devops and then we would export into CSV. Now with the help of above software, we can work in an excel for updation very easily. Please look into the below images. In th

Azure - DDoS IP Protection #cloud #azure Hi All! Security is one of the main pillar and inevitable in cloud irrespective of providers (Microsoft, Amazon, Google). Attackers do attacks mostly on publicly accessible resources which all are easily reachable than private resources. There are many type of attacks. Azure gives us the IP Protection SKU Generally Available for DDoS Protection to defend our public IP(s) Let's recall what is DDoS attack? Attackers send request from multiple/various sources against our resource. So that resource would be flooded or overwhelmed by large amount of requests. By this attack, legitimate users could not access the system which is inaccessible. We can apply Azure DDoS IP protection on individual IP or organizational level (VNet). It incurs some cost. so before implement, we need to pay attention but it is fixed mostly per resource. Note: This feature is only available for Standard SKU , not for Basic as of now. Az

🤠 ChatGPT - Use ChatGPT for cloud 🤠 #cloud #azure #chatGPT Hi All! ChatGPT is a nice tool/extension for learning. In this post we're not going to learn ChatGPT. Instead learn using ChatGPT. Let me share my experience that I used an extension called ChatGPT: write and improve code using AI in visual studio code. To survive in IT world, we need to update and upgrade our knowledge often and we could not say I won't do this one as I don't know. If we come out of it, we can miss a wonderful oppurtunity/growth of your future Here we should accept the challenge as well as learn parallely. Even though we could get KT from the team, we need to dig into the concept well to do better. Here ChatGPT appears infront of us to help. Consider a scenario that you joined in a company as cloud developer or deploying into new team in existing company and tasked of terraform or AKS or something else which is new to you. Let's say I joined into a new tea

Azure Generally Available(GA) missing 🧐 - Are you not able to see the latest release of an azure service? #cloud #azure Hi All! When we come to know an update from azure, we may need to implement in the existing resource or creating a new azure resource. For example, You have an azure app service running with Premium SKU which need to be upgraded to the latest released GA or need to create a new App service with latest release SKU. Let's take one of the latest GA of the below premium V3 (PV3) SKU. Premium SKU are good for web app / app services which are production based workloads. P0V3 - Cost effective P*mv3 - Memory optimized P1mv3 P2mv3 P3mv3 P4mv3 P5mv3 Ok. Let's jump into the topic Now you're trying to create an app service with either P0V3 or P1mv3 but you were not able to find that SKU even after multiple tries like changing resource groups or creating new resource groups, and changing some regions. At one point of time, yo

Azure Logic app - When to choose which plan (Consumption vs Standard)? #cloud #azure Hi All! When we want to perform some workloads without worry about an environment in our hand and need serverless architecture (i.e Microsoft Managed), we can go for either Azure function App or Logic App. In both of Logic App and Function App, we need not to worry about the infrastructure. Microsoft will take care of it at that time of workload(s) running. i.e. for example, If we choose Azure function app .NET based, MS will take care of OS and its necessary packages installation to run etc.., One who likes code part can go for Function app and Some who likes visual designer to create flow/connectors can go for Logic App. In this article we will see which plan type we have to choose for our workloads. Azure Logic App service provides a way to automate workflow (i.e Workflow is a series of steps that defines a task, business process, or workload). We need to pay attention ca

Azure - Shared Access Signature (SAS) - Account key vs User Delegation #cloud #azure Hi All! I would say Azure storage account is a long last service. Whatever the services overcome one another, azure storage stays active. For example, we can take a .NET web application which can be hosted in IIS of a Azure VM, App service with or without Docker, Function app for event based. Here based on requirements App service sometimes overcome VM and function app overcomes rest of others and so on. When we use any of the cloud service, security is one of the main pillar need to consider. Here we are going to talk about Blob storage account access granting to customer or somebody else who requires it. Consider a scenario that customer application place a file, it would be csv or JSON or XML what ever it may be but a single type. Let's take JSON here. We need to allow some people to access that file. Here we have two questions as below Who are those some people whether

Azure Static Web Apps - Plan Comparison #cloud #azure Hi All! Azure Static web app is a good service when we have static web apps like javacript frameworks and libraries applictions (Ex: Angular, React, Svelte, Vue, Blazor). It also supports Python 3.10 based static web app as well as per the latest azure news. Other advantage of it is coupled with your Azure AD. so that your code can be directly pushed to azure static web app via either Azure DevOps or Github whenever code push occurs. At the time of azure static web app creation, it asks for deployment source as any one of the below. Based on the selection, it allows you to select the organization, project and repositories from the source. Azure DevOps - Azure AD connected Devops organizations will be listed out Github Other - For ex: If you want to deploy code from other organization. Below table will be helpful to choose the best pricing plan for your workload. Plan/Feature Free Standard

Terraform format - tips & tricks #cloud #terraform Hi All! As many of us know that terraform is one of the popular Infrastructure as Code (IaC) tool/mechanism which is cloud agnostic as well. We had already seen about the usage of terraform console in my one of the posts. In today's post we're going to see about terrafor fmt Some of the times when we do minor change on terraform files, there may alignment issues happen. Even it won't harm the process of deployment but due to disordered format, difficult to read the file(s) by user. Some/most of us use the below commands typically terraform init terraform plan terraform validate terraform apply Even though, we play with above main commands, terraform fmt (format) is also an additional command helps to align terraform files. So hereinafter we will use terraform fmt as the first command in our devops pipeline. Please look into the below image.

Azure - Alert Rule Duplication saves some time #cloud #azure Hi All! Apart from resource(s) provisioning, it is responsibility of admins to enable some monitor mechanishm for resorce(s) health too as per customer need. When some unexpected or predicted conditions met, it should alert the customer to take some precautions and avoid the whole resource/application becomes inacccessible. This article is not going to describe about creating alert(s) instead we are going to see the Duplicating Alert in azure portal. Some of you would have a question that why should I duplicate it? I can create it instead right? Your thought is correct. Below are the main components we need to consider while creating alerts Scope - single resource level or resource group level or subscription level Condition - Signals - Http errors or health check or Http 4xx etc., Actios - Notification to Action Group - email or SMS or voice etc and Actions - trigger function app or logic app