CFT- Anatomy -Yaml

AWS Template Version:

The AWS cloud formation template version that the template confronts to.


Use the description to explain the purpose of template.


Objects that provides additional information about the templates.


Values to pass to template at runtime and refer to parameters from the resources and output section


A mapping of keys and associated values that you can use to specify conditions.


Conditions that control whether certain resources are created, modified or deleted.


Specify the stack resources and their properies.


Describe the values that are returned whenever you view your stack’s properties.

Azure Devops Licensing Types

  1. User Licensing

A. Basic:

Access to all service offerings, except test plans.

Fist five users are free in Basic licensing type

B. Basic + Test

Same as basic plan but includes test planning too.

C. Stake holder

Stake holder will have access to Azure boards

They will not be having source control access

The will be having access to release and pipeline access

No access to test offerings

They will have Read only dashboard access

2. Private projects

1 Concurrent CI/CD hosted jobs with 1800 minutes per month

1 Concurrent CI/CD self hosted jobs with unlimited mintues

2GB storage for artificats

3. Public Projects

10 concurrent CI/CD hosted jobs with unlimited minutes included

Free access to boards, repositories and pipelines for anonymous users.

Azure Basic Commands:

1) Get-AzSubscription — To get existing azure subscription details.

PS /home/cloud> Get-AzSubscription

Name Id TenantId State

—- — ——– —–
P1-Real Hands-On Labs 4cedc5dd-e3ad-468d-bf66-32e31bdb9148 3617ef9b-98b4-40d9-ba43-e1ed6709cf0d Enabled

2) get-azvm –> To get existing virtual machine details

PS /home/cloud> get-azvm

ResourceGroupName Name Location VmSize OsType NIC ProvisioningState Zone
—————– —- ——– —— —— — —————– —-
1-345FB4F8-PLAYGROUND-SANDBOX newtestvm westus Standard_D2s_v3 Linux newtestvm498 Succeeded

3) stop-azvm -Name <vmname> –> Used to stop Azure VM

PS /home/cloud> stop-azvm -Name newtestvm

cmdlet Stop-AzVM at command pipeline position 1
Supply values for the following parameters:
(Type !? for Help.)
ResourceGroupName: 1-345FB4F8-PLAYGROUND-SANDBOX

Virtual machine stopping operation
This cmdlet will stop the specified virtual machine. Do you want to continue?
[Y] Yes [N] No [S] Suspend [?] Help (default is “Y”): Y

perationId : 26e1afe4-1937-49cd-93be-a2e40330b6a7
Status : Succeeded
StartTime : 6/5/2021 3:23:44 PM
EndTime : 6/5/2021 3:24:33 PM
Error :

4) start-azvm -Name <vmname> –> Used to start Azure VM

S /home/cloud> start-azvm -Name newtestvm

cmdlet Start-AzVM at command pipeline position 1
Supply values for the following parameters:
(Type !? for Help.)
ResourceGroupName: 1-345FB4F8-PLAYGROUND-SANDBOX

OperationId : 4d4c5058-9b3f-446f-888a-50380b21587b
Status : Succeeded
StartTime : 6/5/2021 3:27:12 PM
EndTime : 6/5/2021 3:27:31 PM

5) get-azureresources –> To list all azure resources

PS /home/cloud> get-azresource

Name : labraghav123
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Storage/storageAccounts
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Storage/storageAccounts/labraghav123
Tags :
Name Value
================= =================
ms-resource-usage azure-cloud-shell

Name : newtestvm_key
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Compute/sshPublicKeys
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Compute/sshPublicKeys/newtestvm_key
Tags :

Name : newtestvm-ip
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/publicIPAddresses
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/publicIPAddresses/newtestvm-ip
Tags :

Name : newtestvm-nsg
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/networkSecurityGroups
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/networkSecurityGroups/newtestvm-nsg
Tags :

Name : 1-345fb4f8-playground-sandbox-vnet
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/virtualNetworks
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/virtualNetworks/1-345fb4f8-playground-sandbox-vnet
Tags :

Name : newtestvm498
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Network/networkInterfaces
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/networkInterfaces/newtestvm498
Tags :

Name : newtestvm
ResourceGroupName : 1-345fb4f8-playground-sandbox
ResourceType : Microsoft.Compute/virtualMachines
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Compute/virtualMachines/newtestvm
Tags :

Name : newtestvm_disk1_7570567ed8dd4538aed49857dc7e7001
ResourceGroupName : 1-345FB4F8-PLAYGROUND-SANDBOX
ResourceType : Microsoft.Compute/disks
Location : westus
ResourceId : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345FB4F8-PLAYGROUND-SANDBOX/providers/Microsoft.Compute/disks/newtestvm_disk1_7570567ed8dd4538aed49857dc7e7001
Tags :

6) Get-Azvirtualnetwork –> Used to list Azure virtual network details.

PS /home/cloud> Get-Azvirtualnetwork

Name : 1-345fb4f8-playground-sandbox-vnet
ResourceGroupName : 1-345fb4f8-playground-sandbox
Location : westus
Id : /subscriptions/4cedc5dd-e3ad-468d-bf66-32e31bdb9148/resourceGroups/1-345fb4f8-playground-sandbox/providers/Microsoft.Network/virtualNetworks/1-345fb4f8-playground-sandbox-vnet
Etag : W/”f8b2ac50-4662-4370-bc05-50488008b680″
ResourceGuid : 02b62663-5a7b-4d87-9262-2b8cca70b042
ProvisioningState : Succeeded
Tags :
AddressSpace : {
“AddressPrefixes”: [
DhcpOptions : null
Subnets : [
“Delegations”: [],
“Name”: “default”,
“Etag”: “W/\”f8b2ac50-4662-4370-bc05-50488008b680\””,
“AddressPrefix”: [
“IpConfigurations”: [
“ServiceAssociationLinks”: [],
“ResourceNavigationLinks”: [],
“ServiceEndpoints”: [],
“ServiceEndpointPolicies”: [],
“PrivateEndpoints”: [],
“ProvisioningState”: “Succeeded”,
“PrivateEndpointNetworkPolicies”: “Enabled”,
“PrivateLinkServiceNetworkPolicies”: “Enabled”,
“IpAllocations”: []
VirtualNetworkPeerings : []
EnableDdosProtection : false
DdosProtectionPlan : null

CIDR Sheet

CIDR NotationTotal Number of AddressesNetwork MaskDescription
/04,29,49,67,2960.0.0.0All Addresses
/12,14,74,83,684128.0.0.0128 /8 networks
/21,07,37,41,824192.0.0.064 /8 networks
/353,68,70,912224.0.0.032 /8 neworks
/426,84,35,456240.0.0.016 /8 networks
/513,42,17,728248.0.0.08 /8 networks
/66,71,08,864252.0.0.04 /8 networks
/73,35,54,432254.0.0.02 /8 networks
/81,67,77,214255.0.0.01 /8 network
/983,88,608255.128.0.0128 /16 networks
/1041,94,304255.192.0.064 /16 networks
/1120,97,152255.224.0.032 /16 networks
/1210,48,576255.240.0.016 /16 networks
/135,24,288255.248.0.08 /16 networks
/142,62,144255.252.0.04 /16 networks
/151,31,072255.254.0.02 /16 networks
/1665536255.255.0.01 /16 network
/1732768255.255.128.0128 /24 networks
/1816384255.255.192.064 /24 networks
/198192255.255.224.032 /24 networks
/204096255.255.240.016 /24 networks
/212048255.255.248.08 /24 networks
/221024255.255.252.04 /24 networks
/23512255.255.254.02/24 networks
/24256255.255.255.01 /24/network
/25128255.255.255.128half of a /24
/2664255.255.255.192fourth of a /24
/2732255.255.255.224eighth of a /24
/2816255.255.255.2401/16th of a /24
/298255.255.255.2486 usable addresses
/304255.255.255.2522 usable addresses
/312255.255.255.254used in P2P links
/321255.255.255.255Single Host

Azure Resource Mover


The Azure resource mover is used to move resources from one region to another region.


  • A single hub for moving resources across regions.
  • Reduced move time and complexity.
  • A simple and consistent experience moving different types of Azure resources.
  • An easy way to identify dependencies across resources you want to move. This helps you to move related resources together, so that everything works as expected in the target region, after the move.
  • Automatic cleanup of resources in the source region, if you want to delete them after the move.

Resources which we can move:

  • Azure VMs and associated disks
  • Encrypted Azure VMs and associated disks. This includes VMs with Azure disk encryption enabled, and Azure VMs using default server-side encryption (both with platform-managed keys and customer-managed keys)
  • NICs
  • Availability sets
  • Azure virtual networks
  • Public IP addresses
  • Network security groups (NSGs)
  • Internal and public load balancers
  • Azure SQL databases and elastic pools.

Powershell commands to create Azure Storage Accounts


Creating Blob Storage :

New-AzureRmStorageAccount -ResourceGroupName sandbox -AccountName raghuseshulab02 -Location centralUS -Kind BlobStorage -SkuName Standard_GRS -AccessTier Hot


Creating StorageV2:

New-AzureRmStorageAccount -ResourceGroupName sandbox -AccountName testlab130 -Location centralUS -Kind StorageV2 -SkuName Standard_GRS -AccessTier Hot


Creating StorageV1:

New-AzureRmStorageAccount -ResourceGroupName sandbox -AccountName testlab140 -Location centralUS -Kind Storage -SkuName Standard_GRS

Azure VPN Gateway Troubleshooting Steps:

  1. Log in to the Azure Portal
  2. Go to all services > type Virtual network gateway service.
  3. Select virtual gateway, for which we are facing the issue.
  4. Click on VPN troubleshoot.
  5. Start VPN troubleshooting after selecting the VPN gateway
  6. VPN logs will transfer to storage container
  7. Perform a deep analysis of VPN logs
  8. Second troubleshooting step is verifying the VPN gateway health probe using VPN Gateway public IP.

Eg: https://<PublicIP&gt;:8081/healthprobe

9. If you see the xml response then VPN gateway is working fine.

Copy files from one S3 bucket to another S3 bucket on same account

  1. Create a new S3 bucket testbucketbkp1.
  2. Create a new S3 bucket testbucketbkp2.
  3. Upload a test file to testbucketbkp1.
  4. Now install the AWS CLI on PC.
  5. Type aws configure

Enter the access key ID and secret access

6. Copy the objects between the source and target buckets using sync command

aws s3 sync s3://testbucketbkp1 s3://testbucketbkp2

8. The sync command uses the CopyObject APIs to copy objects between S3 buckets.