Azure Basic Commands:

1) Get-AzSubscription — To get existing azure subscription details.

PS /home/cloud> Get-AzSubscription

Name Id TenantId State


—- — ——– —–
P1-Real Hands-On Labs 4cedc5dd-e3ad-468d-bf66-32e31bdb9148 3617ef9b-98b4-40d9-ba43-e1ed6709cf0d Enabled

2) get-azvm –> To get existing virtual machine details

PS /home/cloud> get-azvm

ResourceGroupName Name Location VmSize OsType NIC ProvisioningState Zone
—————– —- ——– —— —— — —————– —-
1-345FB4F8-PLAYGROUND-SANDBOX newtestvm westus Standard_D2s_v3 Linux newtestvm498 Succeeded

3) stop-azvm -Name <vmname> –> Used to stop Azure VM

PS /home/cloud> stop-azvm -Name newtestvm

cmdlet Stop-AzVM at command pipeline position 1
Supply values for the following parameters:
(Type !? for Help.)
ResourceGroupName: 1-345FB4F8-PLAYGROUND-SANDBOX

Virtual machine stopping operation
This cmdlet will stop the specified virtual machine. Do you want to continue?
[Y] Yes [N] No [S] Suspend [?] Help (default is “Y”): Y

perationId : 26e1afe4-1937-49cd-93be-a2e40330b6a7
Status : Succeeded
StartTime : 6/5/2021 3:23:44 PM
EndTime : 6/5/2021 3:24:33 PM
Error :

4) start-azvm -Name <vmname> –> Used to start Azure VM

S /home/cloud> start-azvm -Name newtestvm

cmdlet Start-AzVM at command pipeline position 1
Supply values for the following parameters:
(Type !? for Help.)
ResourceGroupName: 1-345FB4F8-PLAYGROUND-SANDBOX

OperationId : 4d4c5058-9b3f-446f-888a-50380b21587b
Status : Succeeded
StartTime : 6/5/2021 3:27:12 PM
EndTime : 6/5/2021 3:27:31 PM

5) get-azureresources –> To list all azure resources

PS /home/cloud> get-azresource

Name : labraghav123
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Storage/storageAccounts
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Storage/storageAccounts/labraghav123
Tags :
Name Value
================= =================
ms-resource-usage azure-cloud-shell

Name : newtestvm_key
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Compute/sshPublicKeys
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Compute/sshPublicKeys/newtestvm_key
Tags :

Name : newtestvm-ip
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/publicIPAddresses
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/publicIPAddresses/newtestvm-ip
Tags :

Name : newtestvm-nsg
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/networkSecurityGroups
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/networkSecurityGroups/newtestvm-nsg
Tags :

Name : 1-345fb4f8-playground-sandbox-vnet
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/virtualNetworks
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/virtualNetworks/1-345fb4f8-playground-sandbox-vnet
Tags :

Name : newtestvm498
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/networkInterfaces
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/networkInterfaces/newtestvm498
Tags :

Name : newtestvm
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Compute/virtualMachines
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Compute/virtualMachines/newtestvm
Tags :

Name : newtestvm_disk1_7570567ed8dd4538aed49857dc7e7001
ResourceGroupName : 1-345FB4F8-PLAYGROUND-SANDBOX
ResourceType : Microsoft.Compute/disks
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345FB4F8-PLAYGROUND-SANDBOX/providers/Microsoft.Compute/disks/newtestvm_disk1_7570567ed8dd4538aed49857dc7e7001
Tags :

6) Get-Azvirtualnetwork –> Used to list Azure virtual network details.

PS /home/cloud> Get-Azvirtualnetwork

Name : 1-345fb4f8-playground-sandbox-vnet
ResourceGroupName : 1-345fb4f8-playground-sandbox
Location : westus
Id : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/virtualNetworks/1-345fb4f8-playground-sandbox-vnet
Etag : W/”f8b2ac50-4662-4370-bc05-50488008b680″
ResourceGuid : 02b62663-5a7b-4d87-9262-2b8cca70b042
ProvisioningState : Succeeded
Tags :
AddressSpace : {
“AddressPrefixes”: [
“10.0.0.0/16”
]
}
DhcpOptions : null
Subnets : [
{
“Delegations”: [],
“Name”: “default”,
“Etag”: “W/\”f8b2ac50-4662-4370-bc05-50488008b680\””,
“Id”:
“/subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/virtualNetworks/1-345fb4f8-playground-sandbox-vnet/subnets/default”,
“AddressPrefix”: [
“10.0.0.0/24”
],
“IpConfigurations”: [
{
“Id”:
“/subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/networkInterfaces/newtestvm498/ipConfigurations/ipconfig1”
}
],
“ServiceAssociationLinks”: [],
“ResourceNavigationLinks”: [],
“ServiceEndpoints”: [],
“ServiceEndpointPolicies”: [],
“PrivateEndpoints”: [],
“ProvisioningState”: “Succeeded”,
“PrivateEndpointNetworkPolicies”: “Enabled”,
“PrivateLinkServiceNetworkPolicies”: “Enabled”,
“IpAllocations”: []
}
]
VirtualNetworkPeerings : []
EnableDdosProtection : false
DdosProtectionPlan : null

CIDR Sheet

CIDR NotationTotal Number of AddressesNetwork MaskDescription
/04,29,49,67,2960.0.0.0All Addresses
/12,14,74,83,684128.0.0.0128 /8 networks
/21,07,37,41,824192.0.0.064 /8 networks
/353,68,70,912224.0.0.032 /8 neworks
/426,84,35,456240.0.0.016 /8 networks
/513,42,17,728248.0.0.08 /8 networks
/66,71,08,864252.0.0.04 /8 networks
/73,35,54,432254.0.0.02 /8 networks
/81,67,77,214255.0.0.01 /8 network
/983,88,608255.128.0.0128 /16 networks
/1041,94,304255.192.0.064 /16 networks
/1120,97,152255.224.0.032 /16 networks
/1210,48,576255.240.0.016 /16 networks
/135,24,288255.248.0.08 /16 networks
/142,62,144255.252.0.04 /16 networks
/151,31,072255.254.0.02 /16 networks
/1665536255.255.0.01 /16 network
/1732768255.255.128.0128 /24 networks
/1816384255.255.192.064 /24 networks
/198192255.255.224.032 /24 networks
/204096255.255.240.016 /24 networks
/212048255.255.248.08 /24 networks
/221024255.255.252.04 /24 networks
/23512255.255.254.02/24 networks
/24256255.255.255.01 /24/network
/25128255.255.255.128half of a /24
/2664255.255.255.192fourth of a /24
/2732255.255.255.224eighth of a /24
/2816255.255.255.2401/16th of a /24
/298255.255.255.2486 usable addresses
/304255.255.255.2522 usable addresses
/312255.255.255.254used in P2P links
/321255.255.255.255Single Host

Azure Resource Mover

Definition:

The Azure resource mover is used to move resources from one region to another region.

Advantages:

  • A single hub for moving resources across regions.
  • Reduced move time and complexity.
  • A simple and consistent experience moving different types of Azure resources.
  • An easy way to identify dependencies across resources you want to move. This helps you to move related resources together, so that everything works as expected in the target region, after the move.
  • Automatic cleanup of resources in the source region, if you want to delete them after the move.

Resources which we can move:

  • Azure VMs and associated disks
  • Encrypted Azure VMs and associated disks. This includes VMs with Azure disk encryption enabled, and Azure VMs using default server-side encryption (both with platform-managed keys and customer-managed keys)
  • NICs
  • Availability sets
  • Azure virtual networks
  • Public IP addresses
  • Network security groups (NSGs)
  • Internal and public load balancers
  • Azure SQL databases and elastic pools.

Powershell commands to create Azure Storage Accounts

Command1:

Creating Blob Storage :

New-AzureRmStorageAccount -ResourceGroupName sandbox -AccountName raghuseshulab02 -Location centralUS -Kind BlobStorage -SkuName Standard_GRS -AccessTier Hot

Command2:

Creating StorageV2:

New-AzureRmStorageAccount -ResourceGroupName sandbox -AccountName testlab130 -Location centralUS -Kind StorageV2 -SkuName Standard_GRS -AccessTier Hot

Command3:

Creating StorageV1:

New-AzureRmStorageAccount -ResourceGroupName sandbox -AccountName testlab140 -Location centralUS -Kind Storage -SkuName Standard_GRS

Azure VPN Gateway Troubleshooting Steps:

  1. Log in to the Azure Portal portal.azure.com
  2. Go to all services > type Virtual network gateway service.
  3. Select virtual gateway, for which we are facing the issue.
  4. Click on VPN troubleshoot.
  5. Start VPN troubleshooting after selecting the VPN gateway
  6. VPN logs will transfer to storage container
  7. Perform a deep analysis of VPN logs
  8. Second troubleshooting step is verifying the VPN gateway health probe using VPN Gateway public IP.

Eg: https://<PublicIP&gt;:8081/healthprobe

9. If you see the xml response then VPN gateway is working fine.

Copy files from one S3 bucket to another S3 bucket on same account

  1. Create a new S3 bucket testbucketbkp1.
  2. Create a new S3 bucket testbucketbkp2.
  3. Upload a test file to testbucketbkp1.
  4. Now install the AWS CLI on PC.
  5. Type aws configure

Enter the access key ID and secret access

6. Copy the objects between the source and target buckets using sync command

aws s3 sync s3://testbucketbkp1 s3://testbucketbkp2

8. The sync command uses the CopyObject APIs to copy objects between S3 buckets.

Public Cloud Vendor Service Icon Links

AWS Icons Link:

https://d1.awsstatic.com/webteam/architecture-icons/Q32020/AWS-Architecture-Icons-Deck_For-Dark-BG_20200911.pptx.d3ede776850ba23f4fdbf63270c3a0be9e801d25.zip

https://d1.awsstatic.com/webteam/architecture-icons/Q32020/AWS-Architecture-Icons-Deck_For-Light-BG_20200911.pptx.b238f9167071d2e7dccf32957782161dd1fe7a56.zip

GCP Icons Link:

https://docs.google.com/presentation/d/1aGOTpNdCoO4GXZ2es38ZFO5qPGEAjTtDSVeHaDpwsas/edit#slide=id.g5e923c6224_190_56

Azure Icons Link:

https://arch-center.azureedge.net/icons/Azure_Public_Service_Icons_V3.zip

Difference Between AWS Classic and Application Load Balancer:

FeatureClassic Load BalancerApplication Load Balancer
ProtocolsHTTP, HTTPS, TCP, SSLHTTP, HTTPS
PlatformsEC2-Classic, EC2-VPCEC2-VPC
Sticky sessions (cookies)YES (you can provide your own application cookie)Load balancer generated
Back-end server authenticationYESNO
Back-end server encryptionYESYES
Idle connection timeoutYESYES
Connection drainingYESYES
Cross-zone load balancingYESAlways enabled
Health checksYESYES
CloudWatch metricsYESYES
Access logsYESYES
Path-based routingNOYES
Route to multiple ports on a single instanceNOYES
HTTP/2 supportNOYES
Websockets supportNOYES
Load balancer deletion protectionNOYES