Azure Resource Manager aka.ms/Azure/ARM

This content was previously on my https://aka.ms/Azure/IaaSOpsGuide.  I've pulled it out to use a simple and easy to remember URL.... aka.ms/Azure/ARM

Once you have your Azure Subscription, I think the planning and implementing Resource Groups should be first on your list.  Because if this is not done, then when you go to deploy anything in the new Azure portal in ARM mode, then a default Resource Group will be created for you.  If you pre-make a few to start with, then once you create storage, network and compute resources, then you can assign those resources to Azure Resource groups, per Azure Region, as you see fit.  There are many ways to do this e.g. by dev/test environments or by resource types such as domain controllers or web servers. At a high level, most Azure pages will say to create these according to managed lifecycles of Azure Resources. By default the subscription administrators will have access to all of these, so if you make a bunch, then later, you can create groups to assign RBAC to delegate administration.

Overview

• Design patterns for Azure Resource Manager templates when deploying complex solutions
• World Class ARM Templates Considerations and Proven Practices | Download THE Whitepaper!
• Azure enterprise Scaffold - prescriptive subscription governance
  • Azure Resource Manager Overview
  • Identity all existing RBAC roles available | https://aka.ms/Azure/Roles
  • Lock Down Your Azure Resources
  • Using tags to organize your Azure resources | https://aka.ms/Azure/tags
  • Use Policy to manage resources and control access | https://aka.ms/azure/policy
  • Lock resources with Azure Resource Manager | https://aka.ms/Azure/Lock
  • Determine Naming Convention | https://aka.ms/azure/naming
  • Tuesdays with Corey: Azure Resource Policy
• Authenticating a service principal with Azure Resource Manager

ARM Templates

• Azure Resource Manager JSON Templates overview -understand them better!
• Azure Resource Manager DevOps Jump Start       Microsoft Virtual Academy online class!
• Ignite 2016 Fully Integrated Azure Resource Manager Deployments
• Build 2017  Azure Resource Manager templates: Life after (first) deployment
• Ignite 2016 Manage and control your applications with Microsoft Azure Resource Manager
• Azure Resource Manager Templates | On Channel 9
• Azure Quick Start Templates! | As mentioned on Channel 9 above | Use the same template repeatedly
• GitHub Azure Quick Start Templates
• GitHub AzureStack Quick Start Templates
• ARM Template Visualizer

Operational Guidance

Task Name     Task Link

• Authoring ARM Templates This self-paced session will run through a sequence of bite-sized labs that build on each other.
• Deploy a Resource Group through command line or the Azure Portal | https://aka.ms/Azure/RG
• Manage access using the Azure portal | https://aka.ms/Azure/RBAC/Manage
• Manage Role-Based Access Control with Azure PowerShell | https://aka.ms/azure/rbac/ps
• Manage Role-Based Access Control with the Azure Command Line Interface | https://aka.ms/azure/rbac/cli
• Managing Role-Based Access Control with the REST API | https://aka.ms/Azure/RBAC/RestAPI
• Identify Role-based access control in Azure Automation | https://aka.ms/Azure/RBACA/Automation