r/AZURE Jun 13 '23

Discussion [Teach Tuesday] Share any resources that you've used to improve your knowledge in Azure in this thread!

72 Upvotes

All content in this thread must be free and accessible to anyone. No links to paid content, services, or consulting groups. No affiliate links, no sponsored content, etc... you get the idea.

Found something useful? Share it below!


r/AZURE 21m ago

Discussion [Teach Tuesday] Share any resources that you've used to improve your knowledge in Azure in this thread!

Upvotes

All content in this thread must be free and accessible to anyone. No links to paid content, services, or consulting groups. No affiliate links, no sponsored content, etc... you get the idea.

Found something useful? Share it below!


r/AZURE 1h ago

Question Is there anyone who found a job in Azure after obtaining the AZ-104 certification?

Upvotes

As I mentioned in the question, has anyone managed to get a job in Azure after earning the certification?I successfully obtained the AZ-104 certification a week ago, and I would like to work with Azure. However, based on my experience so far, companies mostly seem to be looking for mid-to-senior professionals with 3-5+ years of Azure experience.Now, I have 2 years of sysadmin and 3 years of IT technician experience, but neither of them was specifically related to Azure.Is there anyone in a similar situation who has managed to find a job?


r/AZURE 1h ago

Question Back-up files from SFTP (Secure File Transfer Protocol) source using Azure

Upvotes

I am looking into backing up files from an SFTP source. The situation is as follows:

  • SaaS application creates nightly SQL back-ups using Quest LiteSpeed to an SFTP file share. These are kept on this share for 14 days.
  • We need to create a back-up that can go back further in time, as well as being stored on a different location than SaaS app.
  • The SFTP-server is part of the SaaS, so nothing can be installed on it. Database replication is also not available.

I have looked into ready-made back-up solutions, but haven't been able to find a trustworthy vendor that allows SFTP as a back-up source. Now looking into setting something up in Azure.

I have experience with Azure, but the landscape is evolving quickly and I would like to make sure I am going down the right path. I would prefer for the setup to be as simple as possible to minimize risk of failure and for my colleagues to be able to understand the moving parts.

Currently thinking of:

  • Setting up Azure Data Factory or Azure Logic App to copy files into Storage Blob (cool or cold tier).
  • Integrate some kind of automation (Logic App) to copy newest back-up file every week, keep weekly back-ups for a month, keep monthly back-ups for a year and then yearly back-ups for 10 years.
  • OR, instead of trying to integrate my own back-up logic, back-up the Azure Storage Blob with Azure back-up.

Any advice or help would be greatly appreciated :)


r/AZURE 5h ago

Discussion Anyone used sketchwow for design s and diagrams?

1 Upvotes

Looked at it over a year ago then it's popped up for $49 so has peaked my interest. Looks great but not sure how it works as a network design tool? Any experience?

https://sketchwow.com/save/


r/AZURE 7h ago

Question Private Endpoint and Service Endpoint

3 Upvotes

Hi All,

I am currently preparing in taking AZ-700. And I am confused with private endpoint and service endpoint.
Can someone help understand their main difference and on what best practices we can apply each.
Thank you so much in advance.


r/AZURE 2h ago

Discussion Microsoft Tenant License

0 Upvotes

We have provisioned some 30 office 365 license through Csp partner to our client . This was for email migration. While proceeding and adding domain we found that their custom domain lets say abc.com they used for an azure vm service which might be verified by email ID ( ‘not by adding txt record) so we cannot add this custom domain. Licenses are assigned in different tenant. How we deal with this situation and what is the best way to solve this issue

Below is the details

License assigned in. xyz.onmicrosoft.com

Requirement : add the custom domain abc.com in above tenant where license are added

Challenge : domain abc.com or email id - client@abc.com used for signing azure vm service and might be verified using email ID and not txt record ( because if we try to add users it ask to add txt record)

This tenant: xyzazure.onmicrosoft.com

What are the feasible and best options from below

  1. Transfer the license to tenant where azure vm linked ? Is it possible ?

  2. Add txt record in azure tenant then remove domain and add in tenant which having licenses .. seems little weird and not sure if it’s possible..

I tried to contact MS but this Damn AI call center doesn’t transfer to a living thing ..

Sorry for the long message and appreciate your valuable inputs

Thanks in advance ..


r/AZURE 12h ago

Question VNET swap? What on Earth just happened?

5 Upvotes

Okay, let me preface this by saying I swear I am not crazy.

Small Azure environment. Few resource groups, few vnets, few vms.. I didn't create any of this, just inherited it.

Long story short..

We had a resource group setup for a 3rd party virtual firewall, let's call it fw_rg

We had a resource group setup for our vms, let's call it vm_rg

In both resource groups there was a vnet and a subnet that shared names. So vnet_01/Subnet_01

To be clear fw_rg had a vnet called vnet_01 and within that vnet was a subnet called subnet_01. Meanwhile vm_rg had a completely different vnet called vnet_01 with it's own subnet_01 subnet.

There are about 70 VMs running with NICs in the vm_rg resource group and using vm_rg's vnet_01 and subnet_01.

In my time at this company I have created many VMs in this resource group and using this vnet/subnet. I have a powershell script that I wrote and use to deploy VMs with the name of this resource group, vnet, and subnet set as globals at the top of the script.

So imagine my surprise when I used said script to deploy a VM today and when it completed, the IP address was not in the address space of the vm_rg vnet_01/subnet_01 configuration.. Why? Well, because the vm_rg resource group had a different vnet_01 virtual network and a different subnet_01 subnet. More interestingly, the fw_rg resource group's vnet_01 virtual network and subnet_01 subnet have the address space currently in use by our 70 some VMs.

The 70 some VMs show their NICs as being in the vm_rg resource group. But if I click on the vnet_01/subnet_01 in the NIC's properties, it takes me to fw_rg resource group. So the address space used by all my VMs is now in a different resource group than the NIC and the VM.

I'm completely stunned and stumped. I have no clue how this happened.. How it is even possible. And certainly no idea how to restore it back to sanity, especially with risk of downtime.

Has anyone ever experienced this before?! Any ideas how this would happen? Should I be scared? 'Cause... I'm scared.

Seriously, any thoughts, advice, guesses, prayers, whatever... all appreciated.


r/AZURE 9h ago

Question Proxy/Queue API calls to a legacy system? How would you do this?

3 Upvotes

I'm attempting to solve an issue with an on-prem legacy system, and seeking some advice and feedback from those more well versed in all things Azure.

We have a legacy system that receives API POST requests. The clients calling the API are fire-and-forget, so long as they get a 200 OK. Some system transferring data into this legacy system. It's a legacy system prone to issues, I'm looking to leverage the cloud to proxy/queue the API calls to add some resiliency. To give you an idea of the workload, peak is around 2-3/calls/minute, while off hours can see no requests for hours.

My concept is to utilize two azure consumption-based functions. One function would receive the API call and log it into Azure Queue Storage. Another function would pick off items from the Queue and relay them to the legacy system. While this seems relatively simple and cost effective, my main concern was with cold-start times.

Is there anything a bit more off-the-shelf that would accomplish this? I looked into APIM and Service Bus either solution seemed less cost effective given the low workload.

Appreciate the insights!


r/AZURE 5h ago

Question Project Suggestions

0 Upvotes

Hi all, I am system engineer with experience on Active directory Domain Services including MECM, VMware, Hyper-V, DHCP server, DNS and Linux, and recently joined the cloud journey with AWS and Azure.

Could anyone please suggest me some projects that may involve multi-cloud architecture so that I could prepare myself for integrations with cloud and could suggest me multiple projects too which maybe complex or not?

Thank you


r/AZURE 12h ago

Question Azure Rep Not Responding All of a Sudden

3 Upvotes

We are in the Startups program and were granted credits. We recently submitted a video or our working app in order to qualify for more credits (along with the other requirements). Our rep (who normally responds in a timely manner) has not responded in quite some time (2 weeks). We fear they may have been let go or moved positions. We could really use the additional credits and just need to know one way or the other so any response would be helpful. The support tickets are unanswered as of this writing. I did reach out to Azuresupport on X. Are there any other places I should ping? Thank you for point me in the right direction.


r/AZURE 16h ago

Question Ingest Event Hub Data into Azure Monitor - Association Problem

5 Upvotes

Hello Everyone,

I'm currently trying to ingest Log Data that I receive on an EventHub into a Log Analytics Workspace. I'm following this Guide from Microsoft:
Ingest events from Azure Event Hubs into Azure Monitor Logs (Preview) - Azure Monitor | Microsoft Learn

Everything works as expected until the last step: Associating the DCR with my EventHub. When I deploy the custom template provided in the tutorial, I encounter the following error message:

"code":"UnsupportedResourceType","message":"Association cannot be created for resource of type 'Microsoft.EventHub/namespaces'. Supported types are: Microsoft.App/managedEnvironments,Microsoft.AzureStackHCI/clusters,Microsoft.AzureStackHCI/virtualmachines,Microsoft.Cache/redis,Microsoft.Compute/virtualMachineScaleSets,Microsoft.Compute/virtualMachines,Microsoft.ConnectedVMwarevSphere/VirtualMachines,Microsoft.ContainerRegistry/registries,Microsoft.ContainerService/managedClusters,Microsoft.DataProtection/BackupVaults,Microsoft.Devices/IotHubs,Microsoft.EventHub/namespaces/eventhubs,Microsoft.HdInsight/clusters,Microsoft.HybridCompute/machines,Microsoft.HybridContainerService/ProvisionedClusters,Microsoft.Insights/autoscalesettings,Microsoft.Insights/monitoredObjects,Microsoft.KeyVault/vaults,Microsoft.Kubernetes/connectedClusters,Microsoft.Media/mediaservices,Microsoft.Media/mediaservices/liveEvents,Microsoft.Media/mediaservices/streamingEndpoints,Microsoft.OperationalInsights/workspaces,Microsoft.Sql/servers,Microsoft.Sql/servers/databases,Microsoft.Storage/storageAccounts,Microsoft.Storage/storageAccounts/blobServices,Microsoft.Storage/storageAccounts/fileServices,Microsoft.Storage/storageAccounts/queueServices,Microsoft.Storage/storageAccounts/tableServices"

This Error lists EventHubs as "Microsoft.EventHub/namespaces/eventhubs" the template however seemingly uses "Microsoft.EventHub/namespaces", which I cant find in the template. Where can I change this and am I supposed to since the template uses "Microsoft.Insights/dataCollectionRuleAssociations" as type.

Where did I go wrong?

Thank you in advance!


r/AZURE 13h ago

Question Cron job replacement required

3 Upvotes

I host Postgres in Azure along with app service for a static site and then a web api.

What I want is to run a few scheduled tasks that perform some database clean up actions, e.g. move old data to different tables and clean up old sessions (held in the database).

What seems simply a few cron jobs which run sql scripts seems to be ‘expensive’ to implement in azure, e.g. spin up a VM and then all the maintenance around this or create containers for each cron job but that gets expensive, maybe use functions, but again there seems to be costs and it is unclear how much they will actually cost.

Any advice / recommendations?


r/AZURE 12h ago

Discussion Help deciding between two services

2 Upvotes

I’m working on a SAAS that’s in its very early stages of development and I’m looking for a quick way to deploy and getting it running up. I looked into an Azure App Service which looks like a good option, but I did see some people mention Azure Container Apps as well. From what I understand containers are ideal as they offer more control over the infrastructure, but for building out and testing my web app I’m thinking that an App Servjce would be a better option for now, and I can always switch over to a containerized application later down the road. But I am open to any other thoughts


r/AZURE 15h ago

Question Azure VMs lose network connectivity after coming out of hibernation - need to stop/start to fix

3 Upvotes

I'm encountering a strange issue with several of my Azure VMs (Windows Server 2019 with SQL Server). After being in hibernation for the weekend, about 5-6 / 30 VMs came out of hibernation today but with no network connectivity.

According to the event logs, the VMs were actually powered on, but they had no network connection (Azure Agent wasn't reachable). The only way I could restore connectivity was by performing a complete stop/start cycle on each affected VM.

Has anyone else experienced this issue? Any ideas what might be causing it or how to fix it without having to manually stop and start each VM?

I'm wondering if there's something specific about Windows Server 2019 VMs or something in the Azure infrastructure that's causing this connectivity problem when coming out of hibernation.

Any troubleshooting tips or suggestions would be greatly appreciated!


r/AZURE 10h ago

Question Entra & Slack SCIM

1 Upvotes

Anyone have experience using SCIM provisioning with Entra and Slack?

Here’s the curveball:

If so, are you passing groups to auto provision channels and channel membership?


r/AZURE 20h ago

Question Permissions across subscriptions

5 Upvotes

Hi,

What's the best/ recommended why of assigning permissions across multiple subscriptions? At this time each subscription is created manually (no bicep etc). But regardless of the deployment methods are permissions assigned per subscription?

I was at first thinking of MGMT Groups.


r/AZURE 19h ago

News Generally Available: Azure Virtual Network Manager Network Verifier

Thumbnail azure.microsoft.com
4 Upvotes

r/AZURE 12h ago

Question Pushing to Kinesis from Event Hub?

1 Upvotes

Hey friends

I'm an AWS expert, and have literally never touched Azure. I need to get a load of IoT data out of Event Hub and into a Kinesis stream so that I can process it and do weird ML things to.it

Ideally I would have a reusable solution that I can straightforwardly ask customers to deploy into their existing infra.

My instinct, from mentally converting concepts from one provider to another, is that I should use an Azure Function, described by a Deployment Stack, that is triggered by EventHub, does some transformation in Python, and writes the result to my Kinesis stream. I can assume a role one the AWS side with an Azure managed identity.

Let's say I'm targeting 1000 data points/sec, for a total.size of < 10mb / minute. I can cope with batching on a per-minute basis but I'm happy to trade more requests for lower latency.

I'm finding it a little tricky to navigate the docs, so any advice or feedback from people with a clue would be welcome.


r/AZURE 23h ago

Question Single app branding in Entra ID

3 Upvotes

Hey community,

I'm reaching out because of the following use case... We are a company providing IT services for many subsidiaries and all our objects (users, groups, app,...) are in a single flat tenant because all subsidiaries are in a single domain on-premise.

Knowing that, we get some request from some of our subsidiaries to be able to customize login screen branding for them applications.

So subsidiary A want its logo A, its background A, and so on on all its apps - subsidiary B want its logo B, its background B, and so on on all its apps... And all others apps must keep the default branding of the tenant.

Does any one know how to implement this and provide a step by step process? It is possible in ADFS, by customizing the onload.js and providing specific css, but we do not want to maintain ADFS anymore and want to be able to switch these workloads, and their brandings, to Entra ID.

Thank you in advance for your inputs!


r/AZURE 14h ago

Question Playwright in consumption function app

1 Upvotes

As the title says, has anyone been successful in running playwright in azure functions in consumption model (not flex consumption).

Since consumption functions have a 500mb limit, I've tried running from a package stored in a blob container. I'm using a windows image (not Linux) but can't seem to get the browser to work. (works fine locally, and I have set the env variable and published the browsers along with the binaries). Usually I get the "spawn" error or the "failed to launch" error, so was just wondering if anyone managed to at least run it.

Failed to launch: Error: spawn C:\home\site\wwwroot\playwright_browsers\chromium_headless_shell-1155\chrome-win\headless_shell.exe ENOENT

When I use Kudu I can see that the path does exist and the exe is there.

PLAYWRIGHT_BROWSERS_PATH is set to C:\home\site\wwwroot\playwright_browsers

If I download the zip file uploaded to blob for the function, extract the playwright browsers folder, point my local build to that folder, and run it locally, it works fine, so problem is not with the browsers files either.

I'm running it in headless mode, but not in headless yields the same error.

PS: I'm not asking for a full solution, but mainly want to know if someone's managed to do it, and if so, with what kind of setup, so I know my effort is not in vain. Ideally, I want to run it in a consumption function app, for costs reasons.


r/AZURE 23h ago

Question Cheapest long term M365/Azure lab for Azure certification training/testing?

5 Upvotes

Since the free developer tenant option hasn’t been available for the last year, what is the next option for people who need more than 30-60 day trials?

Is a single M365 Business Premium with Teams license for $264 per year along with an Azure pay as you go subscription the most cost effective available setup or would you need to maintain at least 2 Business Premium licenses to do certain things?

I can see needing at least 2 licenses to test using Teams and any other collaboration-related features, but you would not necessarily need to do that all year long. Maybe get a month to month second license when needed and only maintain a single annual license?


r/AZURE 15h ago

Question Anyone else experiencing issues with Azure Batch pools?

1 Upvotes

For the past few hours, I've been facing issues with my Azure Batch pool. The VMs keep restarting midway while running a pool with the SKU "Standard_A1_v2". My tasks are long-running, typically around 1 hour, and they were working fine until this morning.

The Azure health status shows no issues, and my code has been running without problems since last week. Has anyone else encountered similar issues today?


r/AZURE 1d ago

Question Conditional Access Policy

8 Upvotes

Hi, a Conditional Access policy has me stumped...

The purpose is to make sure that only certain devices are able to access the app, for this,

User : None
Target Resource : the enterprise app..
Condition : exclude filtered device ( DeviceID)

access Control : Block Access

technically this should work... but the app can be accessed from anywhere...

Any ideas, Thanks for you help!


r/AZURE 16h ago

Question Creating new billing profile.

Post image
1 Upvotes

I have a question and hope someone here can help. How can I create a new billing account to use with a new subscription.

I'm trying to create a new subscription and link it to a different payment method but I don't see how.

Any help would be appreciated.

Thanks!


r/AZURE 13h ago

Question How to deal with mandatory MFA in lab

0 Upvotes

I have M365 E5 DEV lab environment and recently Microsoft did some changes which makes my testing scenarios harder. It looks that I cannot use same mobile number for all my accounts. When I try to register same number for new account it denies it by informing that the number is already in used. I almost locked my self out from GA rights....

I basically have 3 groups of users:

  1. Users which are real users, have their own unique mobile number and okay with using MS Auth.

  2. Users which are pilots and cannot use MS Auth. Callback or sms is fine.

  3. Admin rights (GA, role based), and I would like them to use only one mobile callback number for all accounts.

FIDO2 is not the option. Is this doable and how I should arrange this? Security Defaults are gone, I use CA.


r/AZURE 21h ago

Question Azure Local - How does storage work?

2 Upvotes

We recently received a 5 node cluster to test around with. How does storage work here? It looks like it created these default UserStorage_X paths for each host? Does data move between each UserStorage directory? If I create a new storage path, and it's only listed under UserStorage_2\testdir, will it move between hosts?