| Identity/users · Users, groups, licences, guests and SSPR |
01 Microsoft Entra ID and Azure RBAC |
| Identity/access · Roles, scopes and effective assignments |
01 Microsoft Entra ID and Azure RBAC |
| Governance · Subscriptions, management groups, policy, tags, locks and costs |
02 Subscriptions, Policy and Cost Governance |
| Storage/access · Firewalls, SAS, keys and identity-based file access |
03 Storage Access, Encryption and Redundancy |
| Storage/accounts · Redundancy, replication, encryption and transfer tools |
03 Storage Access, Encryption and Redundancy, 04 Blob Storage and Azure Files |
| Storage/data · Files, blobs, tiers, lifecycle, versions and deletion recovery |
04 Blob Storage and Azure Files |
| Compute/IaC · ARM and Bicep interpretation, modification and deployment |
05 ARM Templates and Bicep |
| Compute/VMs · VMs, disks, encryption, placement, moves and scale sets |
06 Virtual Machines, Disks and Scale Sets |
| Compute/containers · ACR, Container Instances and Container Apps |
07 App Service and Container Platforms |
| Compute/apps · App Service plans, scaling, TLS, DNS, backup, networking and slots |
07 App Service and Container Platforms |
| Network/core · VNets, subnets, peering, addresses and routes |
08 Virtual Networks, Routes and Secure Access |
| Network/security · NSGs, ASGs, Bastion and endpoints |
08 Virtual Networks, Routes and Secure Access |
| Network/delivery · DNS and public/internal load balancing |
09 DNS and Load Balancing |
| Monitoring · Metrics, logs, queries, alerts, Insights and Network Watcher |
10 Azure Monitor, Logs and Alerts |
| Recovery · Vaults, backup policies, restores and Site Recovery |
11 Azure Backup and Site Recovery |
