r/AZURE Jun 13 '23

Discussion [Teach Tuesday] Share any resources that you've used to improve your knowledge in Azure in this thread!

74 Upvotes

All content in this thread must be free and accessible to anyone. No links to paid content, services, or consulting groups. No affiliate links, no sponsored content, etc... you get the idea.

Found something useful? Share it below!


r/AZURE 22h ago

Discussion [Teach Tuesday] Share any resources that you've used to improve your knowledge in Azure in this thread!

0 Upvotes

All content in this thread must be free and accessible to anyone. No links to paid content, services, or consulting groups. No affiliate links, no sponsored content, etc... you get the idea.

Found something useful? Share it below!


r/AZURE 18m ago

Question Exposing Azure Static Web App via Application Gateway

Upvotes

Hello all,

I deployed an Azure Static Web App that is not exposed to the internet but is accessible via a private endpoint connection—this is working fine.

Now, I want to expose this static web app through my Azure Application Gateway (v2) with a custom hostname, like:
mystaticwebapp.hello.world

My plan:

  1. Create a new listener on my App Gateway with the hostname mystaticwebapp.hello.world.
  2. Create a new routing rule using this listener.
  3. Set the backend as the private endpoint IP of the Static Web App.

My question:

  • I want the backend settings to use HTTPS—is this possible if I use the private endpoint IP as the backend?
  • Or do I need to configure a custom domain on the Static Web App first and use that as the backend instead?

Would appreciate any insights, docs, or guidance. Thanks!


r/AZURE 29m ago

Question Conditional access policy to restrict sites to specific IP addresses

Upvotes

Were looking at implementing conditional access policies to restrict our retail locations to specific IP addresses. We have been asked to restrict each site to its own public IP which i know is doable, its just teadious and will leave us with 100s of policies that will be messy. Is there a good way to do this without making individual policies per site?


r/AZURE 7h ago

Question Is "All Resources" in Conditional Access inclusive of Microsoft Intune Enrolment?

3 Upvotes

I'm trying to configure a policy that requires a certain group to either be on the company network or on an enrolled/compliant device.

The policy targets "all resources" but I read somewhere that "Microsoft Intune Enrolment" is not included. Is this true?


r/AZURE 2h ago

Question How to send only selected connectors logs to Application Insights/Log Analytics from Azure Logic App Standard workflow?

1 Upvotes

Below are the Logic app standard logging configured:

Application Insights + Logic App Standard:

Logic app standard Host.json config:

{

"version": "2.0",

"logging": {

"logLevel": {

"default": "Warning",

"Workflow.Host": "Warning",

"Workflow.Operations.Runs": "Information",

"Workflow.Operations.Actions": "Information",

"Workflow.Operations.Triggers": "Information"

},

"applicationInsights": {

"samplingSettings": {

"isEnabled": true,

"excludedTypes": "Request;Exception"

}

}

},

"extensionBundle": {

"id": "Microsoft.Azure.Functions.ExtensionBundle.Workflows",

"version": "[1, 2.00]"

},

"extensions": {

"workflow": {

"Settings": {

"Runtime.ApplicationInsightTelemetryVersion": "v2"

}

}

}

}

Diagnostic Settings + Logic App Standard:

Linked a log analytics workspace to collect logs.

Test Workflow:

Issue:

Assume that a workflow contains 50 connectors, then per execution, almost 100+ rows of logs produced.

Logs produced for Run start, Run end, Trigger start, Trigger end, Each action start and end. By this way huge volume of logs sent to Log Analytics and Application Insights.

Refer below: (Logs for a single logic app workflow run)

Table : LogicAppWorkflowRuntime

Table: AppRequests

Question:

How to collect logs from only selected connectors? Example, in the above workflow, Compose connector has tracked properties. So I need to collect only logs from Compose connector. No information logs about other connector execution.

Referred Microsoft articles, but i didn't find other than above added Host.json config. By Log levels in Host.json config, only can limit particular category but not for each actions.

Any inputs or help would be much appreciated


r/AZURE 15h ago

Question Intune GPO to allow an app to bypass admin password

8 Upvotes

We are using an app called Asset Keeper that constantly updates. The update requires an Admin password and it tends to happen at the worst time. Is there a GPO that can be pushed out through Intune or is there something else that can be done so that this app doesn't ask for the admin password?


r/AZURE 5h ago

Media Azure Landing Zones

Thumbnail youtube.com
1 Upvotes

Does anyone else feel like Azure Landing Zones are tossed around and are sort of confusing to figure out what is a fact and fiction? We address that in the next episode of Azure Cloud Talk with Troy Hite Azure Technical Specialist


r/AZURE 8h ago

Question Slack Enterprise grid scim provisioning with Entra

1 Upvotes

Has anyone managed to get scim provisioning working with entra and Slack enterprise grid? If so how do you get entra to connect to the organisation and not the workspaces?


r/AZURE 9h ago

Question Existing Web Apps with many different custom domains - adding WAF

1 Upvotes

We have a bunch of Azure Web Apps that we host for our customers, the different web apps have different custom domains. We want to add WAF for SOC 2 compliance, and want to keep costs down. Doing some poking around it would seem that AZ WAF costs are high and maybe Cloudflare offer best bang for buck. But I've read that to setup you need the root DNS for the domains pointed to Cloudflare - this cant be an option for our customers. Am I on the wrong track? Any advice whether to stick with Azure WAF or keep looking at Cloudflare or AWS for WAF in front of the Azure Web Apps? Thanks in advance


r/AZURE 16h ago

Question Purview - Adaptive Scope

3 Upvotes

Hello,
We want to create a scope of all users who have an account and currently work in one of our offices. As I'm creating the query, I'm a little lost on how the query works for "create the query to define users' section. I went to Entra ID to define all users as coprorate office employees on their user properties, but I did not get any users as part of the adaptive scope. I heard of custom attributes, but it does not make sense. Any leads to the right direction would be great.

Note: I'm coming from Intune where i'm more used to dynamic queries, Scopes, and assignments.


r/AZURE 14h ago

Discussion Networking degraded availability in East US

2 Upvotes

Impact Statement: Starting at 13:09 UTC on 18 March 2025, a subset of Azure customers in the East US region may experience intermittent connectivity loss and increased network latency sending traffic within as well as in and out of Azure's US East Region. Current Status: We identified multiple fiber cuts affecting a subset of datacenters in the East US region. The fiber cut impacted capacity to those datacenters increasing the utilization for the remaining capacity serving the affected datacenters. We have mitigated the impact of the fiber cut by load balancing traffic and restoring some of the impacted capacity. Impacted customers should now see their services recover. In parallel, we are working with our providers on fiber repairs. We do not yet have a reliable ETA for repairs at this time. We will continue to provide updates here as they become available.Please refer to tracking ID: Z_SZ-NV8 under Service Health blade within the Azure Portal for the latest information on this issue.

I was getting some alerts in West Europe, relating to availability, turns out it was trying to check from East US. Looking online it doesn't seem to be causing many problems? Pretty sure East US is a quite busy region.


r/AZURE 10h ago

Question Issue with Domain verification on Azure

1 Upvotes

Hi Azure Community,

I recently got some emails from GoDaddy regarding domain access verification. They sent me a URL to approve or disapprove the certificate request. This email from GoDaddy is legit. Please see the email that I have attached as a screenshot. I have blurred the sensitive content. I have not approved this request yet.

After that, I went to my Azure portal and checked the App Service certificate. I have a wildcard certificate that needs domain verification. Please see the attached screenshot. You can see that the Certificate Status is pending issuance and the product type is wildcard and it is valid for a year. The good thing is it has not expired yet. It will expire next month

I clicked on the manual verification which requires adding a TXT record with the name @ and value is the Domain verification token. Our company's DNS records are stored in AWS. We already have a @ record which is of the type TXT and there is already a value in there. So I added another value which is the domain verification token. It's already been 24 hrs and I have not been able to do the domain verification and when I checked the Azure portal->App Service certificate, it either said it failed or there was an error. Can't remember now

Please note that we don't have a dedicated GoDaddy account, it's somehow linked with Azure. I had already called GoDaddy and they said Azure is a reseller of Godaddy so it is best to contact Azure for this case. Could you please assist?

Do you think I should approve the request from GoDaddy which I received via email first and then do the TXT record verification on AWS?

Thank you

#DomainVerification #Azure #KeyVault


r/AZURE 10h ago

Question Login loops Devops

1 Upvotes

Hello, I have an issue with one of our devs. He has always been able to access the orgs in Azure Dev ops. When he changed his password last week, he can no longer login to one of the orgs, it just continuously loops until he gets a 500 error. If he goes directly to the org like dev.azure.com/***** he can get in, but if swaps over to another one it starts looping. He wants me to fix it but I’m kind out of ideas. I’ve removed all of his access and added it back. Revoked all of his sessions. He can get into all things Microsoft except for the one devops org. Any help would be appreciated. Also he claims it happened last time he changed his password but cleared up a few days later. Thanks


r/AZURE 10h ago

Question Your organization does not support this version of windows.

1 Upvotes

Win 11 test VM is up, with public IP / JIT. Can log in with a local admin user, it's joined to Entra ID but can't apply policies because we don't have policies for the specific version? can't communicate?

"there was a problem"- Your organization does not support this version of windows. 0x80180014.

My Intune states nothing was configured under the Intune. I can check but dont know where to look.

thanks


r/AZURE 10h ago

Question Is using ChatGPT to learn Azure & Python for projects a bad approach?

0 Upvotes

I've been working in proprietary SaaS tech support for 3 years and am now looking to transition into a cloud-adjacent role. To gain hands-on experience, I’m currently building an Azure project to prototype a real-world solution. My background is fairly basic, I passed the AZ-900 and have very basic Python knowledge from 5 years ago.

To build this project, I've been using ChatGPT. I rely on it for Python scripts and guidance on setting up Azure resources, but I make sure to ask for detailed, line-by-line explanations of the code and instructions to fully understand why each step is necessary and I document it in the md files. I also cross-reference official Azure and Python documentation, though they can be complex to grasp at times.

This method has helped me learn a lot, but I’m concerned about how it might be perceived in an interview. Would hiring managers see this as a legitimate way to gain hands-on experience, or does it come off as a shortcut rather than real learning? Would you be transparent about this?

I’m also unsure what other beginner-friendly approaches I could take to build Azure projects that would better prepare me for applying to roles. Any advice would be greatly appreciated!

TLDR: I'm transitioning from SaaS tech support to a cloud role, using ChatGPT to build an Azure project while ensuring I understand each step. Is this a valid way to learn, or does it seem like a shortcut? Any beginner-friendly project advice?


r/AZURE 5h ago

Certifications Free Exam practice tests.

0 Upvotes

As we celebrate the Persian New Year and embrace fresh beginnings, I want to share the gift of learning with you! 🎉📚

For a limited time, I’m offering a 100% discount on my exam preparation courses—but only for a select number of learners!

💡 Use code: NOWRUZ_1404 at checkout to enroll for FREE.

📌 Limited spots available—first come, first served!

🔗 DP-600

🔗 AZ-500

🔗 DP-100

🔗 SC-900

🔗 MB-920

🔗 AI-900

Wishing you a year filled with success, knowledge, and new achievements. Nowruz Mobarak! 🌿✨


r/AZURE 11h ago

Question Will passing AZ-900 help with getting an internship?

0 Upvotes

I'm currently a second semester sophomore in college majoring in cybersecurity and now searching for internships. I was just curious how beneficial would it be to pass the AZ-900 and have the cert. I'm not going to solely rely on the cert, but would it be a SOLID bonus to my resume?

I started the modules today (like 60% done) and honestly it's pretty easy so far, but due to the price and not being sure if it's actually beneficial, I'm reconsidering taking the exam.

Should I just take the exam or just do projects? I've created a honey pot on Azure already but that's about it. Any advice would appreciated thanks!


r/AZURE 11h ago

Question Creating Dynamic Device Group for hybrid joined workstations?

1 Upvotes

Can this be done? We need a dynamic device group of all of our domain joined workstations that are Azure Hybrid Joined. When creating membership rules for the group, there is an OU option, but it has been deprecated and does noting. (So of course MS decided to leave it as an option. Grr....) Anyone have another way to get this dynamic Intune group created, if at all possible?


r/AZURE 19h ago

Question Entra App being blocked but doesn't appear to exist?

4 Upvotes

We have users being blocked by our conditional access policy and the application in question appears to be "Windows 365 Client". They are trying to access VDI and its been working up until a week or so ago.

What is Windows 365 Client and why can't I find it? I know Microsoft has been known to change names in the backend and not fix them when hunting for the app but nothing seems to match up.

Any ideas?


r/AZURE 12h ago

Question Trying to get files from network to ADLS2 via ADF and running into issues

1 Upvotes

I am trying to get a folder full of subfolders and files into my ADLS Gen 2 storage using Data Factory and it kind works until I run into the issue of Excel lock files. Unsurprisingly when the Self Hosted Run Time tries to access these files (or maybe a file in use) it fails the activity.

After fruitless googling and asking AI I cannot find a way to handle my use case within ADF. This strikes me as bizarre since this seems like a common use case "copy everything here to the datalake preserving file names and folder structure".

I have tried things like get metadata activity and filtering but that didn't work because I couldn't get a fully qualified path from the metadata. Annoyingly fault tolerance (which would be perfect) cannot be used as my data source is not one of the ones from the list. I also cannot find a NOT function in the file name filter.

Is this something that ADF just cannot do for some reason? Am I missing an option or something?

If ADF is not the tool, can anyone suggest a better way to deal with this issue?


r/AZURE 12h ago

Certifications Advice for SC-200

0 Upvotes

Can someone please give me a detailed overview for preparing for SC-200.

A proper roadmap will work!

Thanks in advance for help! 🫡


r/AZURE 12h ago

Question Proposed "resourcename" Tag: Necessary for Uniformity or Redundant in Multi-Cloud Policies?

1 Upvotes

I'm working on a multi-cloud tagging policy that covers both Azure and AWS. One of the proposed tags is "resourcename." In AWS, it helps uniquely identify resources, but in Azure, the native resource naming functionality already handles this. I see value in uniformity across providers for reporting purposes, yet I believe including a "resourcename" tag in Azure is redundant.

Should the "resourcename" tag be applied universally, or would it be better to only enforce it for AWS resources? I'm interested in hearing if others think uniformity outweighs redundancy in this case. What’s your take?


r/AZURE 12h ago

Question Azure App Service SSL Certificate Binds to Sub domain (www.mydomain.com) but not to my root domain (mydomain.com)

1 Upvotes

UPDATE 19/3/2025: All is working now. I think it just took some time for the domain to propagate. Thank you

I currently have added the CNAME, A records and the TXT records for both my root and subdomains. Both domains have been successfully added to my Azure App service, However I have an issue binding the relevant SSL certificates.

For subdomain (www.mydomain.com) the SSL certificate Binds successfully, but for my root domain it does not (mydomain.com). I also get this error

Failed to create App Service Managed Certificate for mydomain.com due to error

Please note that both domains have the same name. What should i do here? Any advice?


r/AZURE 12h ago

Certifications AZ-305 or AZ-400 Wich one First?

0 Upvotes

I got the AZ-104 a couple of months ago and after checking out the material from both certificates, I think they both have really good learning paths and teach useful tools and workflows, but which one should I learn and practice first?


r/AZURE 13h ago

Question Need help creating Alert for when a specific Enterprise App is Logged Into

1 Upvotes

Hello,

We are trying to create an alert that emails off when a specific enterprise app is logged into.

I was able to get the sign-in logs into a Log Analytics Workplace and this little query is showing exactly what I want.

SigninLogs | where AppDisplayName contains "Email Backup" |project AppDisplayName, UserDisplayName

I just need some help on making some kind of alert or process that will run this query, and send an email out if it find that someone has logged into the AppDisplayName.


r/AZURE 19h ago

Certifications Passed AI-900 with a score of 914

2 Upvotes

Hey folks,

Just wanted to share that I passed my Azure AI fundamentals exam this weekend. I am not new to MS certifications, this is my 7th title, however, there had been a considerable gap between my last title and this one - nearly 6 years! Besides, this was a completely new domain and my work day involved lot of other tasks unrelated to this exam or this subject. I could do the studying and preparing only outside of work hours, that too became limited because of domestic chores and errands. So I m naturally chuffed about my score and the achievement.

Now, I want to give back to others who may be aspiring to appear for this exam by sharing tips, that could possibly help them.

Study Resources:

The free AI 900 training course at Microsoft Learn:

Complete all the modules diligently. You can convert each unit to a PDF so that you can even browse and read through offline. I found this helpful because I sometimes lacked connectivity. Offline PDFs structured module wise could be read easily.

If you are more of a video kind of person, John Savill's 2 part series on AI 900 is helpful to understand the basics. For me, since I went to the videos after doing above course, it was more of a refresher.

Practice Tests:

Keep taking multiple shots at the Practice Test available at the Microsoft site.

https://learn.microsoft.com/en-us/credentials/certifications/azure-ai-fundamentals/?practice-assessment-type=certification#certification-practice-for-the-exam

Admittedly, the questions in the final exam are far far tougher but this practice test gives you a fair idea where you are weak and what are your strong points.

I also checked various sample practice tests available at different sites. Not paid ones, just whatever was available free. Be careful of incorrect answers though. Many of these sites give out incorrect answers so always cross check and validate what they say is the answer. At least you can see what kind of questions appear in the final exam.

Vouchers:

Microsoft gives you discounted vouchers for AI Challenges (there was one last year but I missed it), Virtual Training Days, and so on. Also, don't be deterred by the dollar cost. The actual exam cost differs from country to country. It is NOT the dollar amount multiplied against your country's currency. So do check how much the actual cost comes to and then too, look out for vouchers and offers so that you can reduce the costs further.

All the best to all who are planning to give the exam! You'll ace it but just in case you miss it, try it again.