Global Infrastructure
- Regions: A region is a geographic area containing one or more datacenters connected by a low-latency network. Examples include East US, West Europe, and Southeast Asia. When deploying resources, you select a region.
- Region Pairs: Most regions are paired with another region in the same geography (e.g., East US paired with West US). This supports disaster recovery and ensures updates are not rolled out to both regions simultaneously.
- Sovereign Regions: Isolated instances of Azure for compliance purposes, such as Azure Government (US) and Azure China, operated independently from the main commercial cloud.
Availability Zones
- Availability zones are physically separate datacenters within a single region, each with independent power, cooling, and networking.
- They protect against datacenter-level failures. Not all regions support availability zones.
- Resources can be zone-redundant (automatically spread across zones) or zonal (pinned to a specific zone).
Management Structure
- Management Groups: Containers that help manage access, policy, and compliance across multiple subscriptions.
- Subscriptions: A logical unit of Azure services linked to an Azure account. Used for billing and access control boundaries.
- Resource Groups: Logical containers that hold related Azure resources (e.g., VMs, storage accounts, databases). A resource can belong to only one resource group.
- Resources: Individual service instances such as a virtual machine, storage account, or SQL database.
Core Service Categories
- Compute: Azure Virtual Machines, Azure App Service, Azure Kubernetes Service (AKS), Azure Functions (serverless).
- Networking: Azure Virtual Network (VNet), Azure Load Balancer, Azure VPN Gateway, Azure ExpressRoute, Azure DNS.
- Storage: Azure Blob Storage, Azure Disk Storage, Azure File Storage, Azure Queue Storage. All storage accounts offer redundancy options (LRS, ZRS, GRS, GZRS).
- Databases: Azure SQL Database, Azure Cosmos DB, Azure Database for PostgreSQL/MySQL.
Key Exam Points
- Resources in a resource group can be in different regions.
- Deleting a resource group deletes all resources within it.
- Availability zones are not the same as region pairs; they address different failure scenarios.
- Azure operates on a shared responsibility model — the division of responsibility depends on the service type (IaaS, PaaS, SaaS).