azure

Scope

Covers Azure as a control plane and as a set of architectural choices: resource orchestration with Bicep, Azure Verified Modules and the Azure Developer CLI; naming and the management group / subscription / resource group hierarchy; Microsoft Entra ID identities and Azure RBAC; selecting and configuring App Service, Container Apps, Functions and virtual machines; the AKS control plane; diagnosing a resource through Resource Health, the Activity Log and diagnostic settings; quotas, capacity and cost; and Well-Architected reviews.

Written against the current generally available services. Rules that depend on a specific version carry a gate such as (Bicep 0.47+), and facts reproduced on this machine are marked [verified]; everything else is [official], taken from Microsoft's documentation rather than from a running subscription.

Not covered: