کلاسترهای آژور با قابلیت‌های کلاستر و سرورها: گسترش مدیریت ابرهای هایپر مقیاس به مرکز داده شما

Table of Contents About the Authors About the Contributor About the Technical Reviewer Acknowledgments Foreword Introduction Chapter 1: Azure Arc As an Extension of the Azure Control Plane Hybrid, Multicloud, and Edge Overview of Azure Arc Azure Arc Offerings Why Would I Want to Use Azure Arc for My Organization? Use Cases Hybrid Cloud Scenario Summary Chapter 2: Azure Resource Manager Insights Introduction What Is Azure Resource Manager? Understanding ARM ARM Development and Management Using Azure Resource Manager ARM via Azure Portal ARM via Command Line ARM via DevOps Summary Chapter 3: Azure Management Insights Azure Policy Single Source of Truth Comparison to Active Directory Microsoft Defender for Cloud Security-Focused Dashboard Microsoft Defender for Cloud for servers Compliance Against Regulatory Requirements Recommended Security Life Cycle Approach Azure Monitor Azure Monitor Data Sources and Solutions Azure Monitor Scope Targeting Log Analytics and Microsoft Sentinel Log Analytics Workspaces Log Analytics Solutions Log Analytics Costs Log Alert Rules Traditional State-Based vs. Analytics-Based Monitoring How a Query-Based Alert Rule Works Workbooks and Dashboards Azure Workbooks Azure Dashboards Azure Automation Solutions Azure Automation Costs Update Management Configuration Management State Configuration (DSC) Inventory Change Tracking Summary Chapter 4: Azure Arc Servers: Getting Started Management Platform as a Service What Is an Azure Arc Server? Azure Resource Manager (ARM) Resource Types Azure Arc Servers in the Azure Portal Azure Arc Server Location Selection Register Azure Resource Providers Connect Azure Arc to Windows and Linux Servers Prerequisites: Add Azure Arc Servers Using Interactive Script (Windows and Linux Computers) Step by Step: Add Azure Arc Windows Servers Using Interactive Script Step by Step: Add Azure Arc Linux Servers Using Interactive Script Manage and Use Azure VM Extensions Use Cases for Azure VM Extensions Methods to Manage Azure VM Extensions Method 1: Extensions in the Azure Portal Method 2: Extensions Using Azure PowerShell Method 3: Extensions Using the Azure CLI Method 4: Extensions as ARM Templates Method 5: Extensions Deployed with Azure Policy Summary Chapter 5: Azure Arc Servers: Using at Scale Create a Service Principal for Onboarding Create the Service Principal Using PowerShell Create the Service Principal Using the Azure Portal Connect Azure Arc to Windows Servers at Scale Step by Step: Add Azure Arc Windows Servers at Scale Run Azure Arc Windows Onboarding Script at Scale Connect Azure Arc to Linux Servers at Scale Step by Step: Add Azure Arc Linux Servers at Scale Run Azure Arc Linux Onboarding Script at Scale Connect Machines to Azure Arc from Windows Admin Center Step by Step: Add Azure Arc Servers Using Windows Admin Center Using Tags with Azure Arc Servers Add Business Value with Tags All About Azure Resource Tags Apply Inventory Tagging to Azure Arc-Enabled Servers Dashboard Hybrid Server Data with Azure Monitor Workbooks Troubleshooting Azure Arc Server Status Azure Arc Agent Installation Issues Agent Log locations Agent Installation Command Lines Agent Uninstall Procedures Azure Arc Agent Operations Issues Identifying Disconnected Azure Arc Servers Azure Arc Services on Windows and Linux Computers Summary Chapter 6: Hybrid Server Monitoring Solution Solution High-Level Features Solution Diagram Specific Monitoring Features Azure Lighthouse Azure Arc Azure Arc Server Azure Policy Azure Policy Assignment Azure Policy Enforcement Interval Azure Policy Compliance Azure Policy: Remediation Tasks Unlisted Images Multiple Management Groups Azure Policy: Exemption Azure Log Analytics Log Analytics Workspace Additional Configuration Windows Event Logs Windows Performance Counters Data Retention Azure Automation Azure Monitor Azure Monitor Action Groups Action Group: Default-Alert-Action Action Group: VM Insights Health Alert Azure Monitor Scheduled Alert Rules Using ARM Templates for Rule Management Create a Library of Reusable Alert Rule Templates Authoring Scheduled Alert Rule Templates Deploying ARM Templates to Enable Monitoring Import Rule Templates Using Azure Portal Import Rule Templates Using Azure PowerShell About Escaped Characters in ARM Template Files Azure Monitor Guest VM Health Introducing the Azure Monitor Agent (AMA) Azure Monitor Data Collection Rules Scheduled Alert Rules for Azure Arc Servers (Until Guest VM Health Is Supported) Azure Monitor Data Collection Rule Associations Azure Monitor Action Rules Create Action Rule for Action Group Azure Monitor Action Rule (Suppression): Overrides Create Action Rule for Suppression Azure Logic Apps Author Logic App Guest VM Health Alerting: End to End Azure Workbooks Summary Chapter 7: Regulatory and Security Compliance for Azure Arc Servers Microsoft Defender for Cloud for Azure Arc Servers Microsoft Defender for Cloud Microsoft Defender for Cloud workload protections Microsoft Defender for Cloud for Servers Onboarding Microsoft Defender for Cloud workload protection for servers Roles and Permissions Assign and Customize the Microsoft Defender for Cloud Default Policy Azure Security Benchmark Assess Policy Compliance Choose Industry Standards and Enable Compliance Assess Regulatory Compliance Create Compliance Exceptions Integrated Vulnerability Assessment Overview Internal and External Vulnerability Scans Microsoft Defender for Cloud and Internal Scanning Deploy the Integrated Scanner to Your Azure Arc Servers Automate At-Scale Deployments Azure Resource Manager (ARM) Azure Policy Azure PowerShell Azure Logic App Azure REST API Trigger an On-Demand Scan View and Remediate Findings Disable Specific Findings Microsoft Sentinel and Azure Arc Server Export Microsoft Defender for Cloud Data to Microsoft Sentinel Complementary Microsoft Defender for Cloud Integration Additional Microsoft Defender for Cloud Data Export Microsoft Sentinel Analytics Rules for Azure Arc Servers Analytics Active Rules Anomaly Rules Prepare and Deploy Logic Apps Locating and Deploying Playbooks Example Playbook Employment Using Get-GeoFromIpAndTagIncident Using Get-GeoFromIpAndTagIncident-Auto Workbooks and Dashboards Azure Arc SQL Server Overview Azure SQL Virtual Machines Azure Arc SQL Servers Focus on SQL Server Assessment Azure Arc SQL Server: A Superset of Azure Arc Server Connect Your SQL Server to Azure Arc Connect Azure Arc SQL Server for Linux SQL Server Inventory in Azure Resource Graph Connect SQL Server Instances to Azure Arc at Scale Run On-Demand SQL Assessment Services Hub Connection Automatic Deployment Using Managed Service Account Manual Deployment Using a Configuration Script Enable Microsoft Defender for Cloud for SQL Server Summary Chapter 8: GitOps Insights Git Overview GitHub Overview GitOps Overview Summary Chapter 9: Azure Arc-Enabled Kubernetes: Getting Started What Is Azure Arc-Enabled Kubernetes Azure Arc-Enabled Kubernetes Use Cases Azure Arc-Enabled Kubernetes Architecture Connecting Kubernetes Clusters to Azure Arc Connect Azure Arc to Azure Kubernetes Service Clusters Monitoring Kubernetes Clusters with Azure Arc and Azure Monitor Configure RBAC on Kubernetes Clusters with Azure Arc and Azure AD RBAC Protect Kubernetes Clusters with the Microsoft Defender for Cloud and Azure Arc Enforce Compliance of Kubernetes Clusters Using Azure Policy, Azure Arc, and GitOps Understanding GitOps and Azure Arc-Enabled Kubernetes Architecture and Workflow Setting Up a GitOps Configuration in Azure Arc Using GitOps and Azure Arc to Deploy an Application to a Projected Kubernetes Cluster Understanding How Azure Arc and GitOps Work with Helm Understanding How Azure Arc and GitOps Work with IoT Edge Workloads Summary Index Welcome to this introductory guide to using Microsoft's Azure Arc service, a new multi-cloud management platform that belongs in every cloud or DevOps estate. As many IT pros know, servers and Azure Kubernetes Service drive a huge amount of consumption in Azure--so why not extend familiar management tools proven in Azure to on-premise and other cloud networks? This practical guide will get you up to speed quickly, with instruction that treads light on the theory and heavy on the hands-on experience to make setting up Azure Arc servers and Kubernetes across multiple clouds a lot less complex. Azure experts and MVPs Buchanan and Joyner provide just the right amount of context so you can grasp important concepts, and get right to the business of using and gaining value from Azure Arc. If your organization has resources across hybrid cloud, multi-cloud, and edge environments, then this book is for you. You will learn how to configure and use Azure Arc to uniformly manage workloads across all of these environments. What You Will Learn Introduces the basics of hybrid, multi-cloud, and edge computing and how Azure Arc fits into that IT strategy Teaches the fundamentals of Azure Resource Manager, setting the reader up with the knowledge needed on the technology that underpins Azure Arc Offers insights into Azure native management tooling for managing on-premises servers and extending to other clouds Details an end-to-end hybrid server monitoring scenario leveraging Azure Monitor and/or Azure Sentinel that is seamlessly delivered by Azure Arc Defines a blueprint to achieve regulatory compliance with industry standards using Azure Arc, delivering Azure Policy from Azure Defender for Servers Explores how Git and GitHub integrate with Azure Arc; delves into how GitOps is used with Azure Arc Empowers your DevOps teams to perform tasks that typically fall under IT operations Dives into how to best use Azure CLI with Azure Arc This book is for DevOps, system administrators, security professionals, and IT workers responsible for servers both on-premises and in the cloud. Some experience in system administration, DevOps, containers, and use of Git/GitHub is helpful. Steve Buchanan is a Director, Azure Platform Lead & Containers Services Lead on a Cloud Transformation team with a large consulting firm. He is a 10-time Microsoft MVP, Pluralsight author, and the author of six technical books. He has presented at tech events, including DevOpsDays, Midwest Management Summit (MMS), Microsoft Ignite, BITCon, Experts Live Europe, OSCON, Inside Azure management, and user groups. He stays active in the technical community and enjoys blogging about his adventures in the world of IT at www.buchatech.com. John Joyner is Senior Director, Technology at AccountabilIT, a managed services provider of 24x7 Network Operations and Security Operations Center (NOC & SOC) services. As an Azure Solutions Architect Expert, he designs and builds modern management and security solutions based on Azure Lighthouse, Azure Arc, Azure Monitor Logs, Azure Sentinel, Azure Defender, and Microsoft Defender. John is also an authority on System Center products in private cloud and hybrid cloud environments and has been awarded Microsoft MVP 14 times. John is a retired U.S. Navy Lt. Cmdr., where he was a computer scientist, worked for NATO in Europe and was aboard an aircraft carrier in the Pacific. He is a veteran of the Persian Gulf War Welcome to this introductory guide to using Microsoft’s Azure Arc service, a new multi-cloud management platform that belongs in every cloud or DevOps estate. As many IT pros know, servers and Azure Kubernetes Service drive a huge amount of consumption in Azure―so why not extend familiar management tools proven in Azure to on-premises and other cloud networks? This practical guide will get you up to speed quickly, with instruction that treads light on the theory and heavy on the hands-on experience to make setting up Azure Arc servers and Kubernetes across multiple clouds a lot less complex. Azure experts and MVPs Buchanan and Joyner provide just the right amount of context so you can grasp important concepts, and get right to the business of using and gaining value from Azure Arc. If your organization has resources across hybrid cloud, multi-cloud, and edge environments, then this book is for you. You will learn how to configure and use Azure Arc to uniformly manage workloads across all of these environments. What You Will Learn Introduces the basics of hybrid, multi-cloud, and edge computing and how Azure Arc fits into that IT strategy Teaches the fundamentals of Azure Resource Manager, setting the reader up with the knowledge needed on the technology that underpins Azure Arc Offers insights into Azure native management tooling for managing on-premises servers and extending to other clouds Details an end-to-end hybrid server monitoring scenario leveraging Azure Monitor and/or Azure Sentinel that is seamlessly delivered by Azure Arc Defines a blueprint to achieve regulatory compliance with industry standards using Azure Arc, delivering Azure Policy from Azure Defender for Servers Explores how Git and GitHub integrate with Azure Arc; delves into how GitOps is used with Azure Arc Empowers your DevOps teams to perform tasks that typically fall under IT operations Dives into how to best use Azure CLI with Azure Arc Who This Book Is For DevOps, system administrators, security professionals, and IT workers responsible for servers both on-premises and in the cloud. Some experience in system administration, DevOps, containers, and use of Git/GitHub is helpful.