Deprecated: strtr(): Passing null to parameter #1 ($string) of type string is deprecated in /chroot/home/a40b7614/774635bdc8.nxcli.io/html/wp-content/plugins/moosend-email-marketing/vendor/moosend/website-tracking/src/Utils/Encryption.php on line 8 Deprecated: urlencode(): Passing null to parameter #1 ($string) of type string is deprecated in /chroot/home/a40b7614/774635bdc8.nxcli.io/html/wp-content/plugins/moosend-email-marketing/vendor/moosend/website-tracking/src/Payload.php on line 202 Scott Duffy – Page 2 – SoftwareArchitect.ca

Author: Scott Duffy

  • Azure World Newsletter – Issue 4.22

    Azure World Newsletter – Issue 4.22

    November 1, 2023

    Welcome to the twenty-second edition of the Azure World Newsletter in 2023.

    Hello again, my friends from around the world. I’m so happy you continue to subscribe and read this bi-weekly newsletter on Azure. I enjoy sitting down each week to research and write this, and hopefully, you will continue to find value in it. Feel free to invite your co-workers or others to subscribe if you think they would find it helpful.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    Microsoft Ignite is coming on November 15-16 in Seattle. This is the traditional time of year when Satya Nadella gives gifts to all the boys and girls of the world who have been good all year. There will be announcements about the future of AI, Azure, Identity, and Security, among other topics.

    The first thing I always check for is if there are any certification topics. I can remember years ago, at Microsoft Ignite, going from room to room, hearing the experts talk about each of the certifications available. Those were mini cert-prep sessions, and you could then go and take the actual certification test for free on-site. Well, they don’t offer the cert prep sessions anymore. And I doubt they offer certification tests for free at Ignite like they used to.

    I also always enjoy the talks by Mark Russinovich about the hardware and infrastructure underneath Azure. This year, it seems his talks will be about new innovations in AI and Cloud Native applications. There’s also an interesting talk on Radius, an open-source project that supports deploying applications across private cloud, Microsoft Azure, and Amazon Web Services.

    In fact, there are a lot of talks about AI at this Ignite. This must be the main focus of the event this year.

    Scott Hanselman is talking about Github Copilot and AI for developers this year. That should be interesting.

    It looks like many of the events will not be recorded (even the online-only ones), so you have to watch live to catch them. Some will be, but not many will not.

    See more:
    https://ignite.microsoft.com/


    TWO.

    Microsoft has a new set of official Microsoft credentials if you are into learning and getting certified.

    They are called Microsoft Applied Skills. And they are currently being offered online for free. It seems eventually, Microsoft will charge for them.

    The current assessments being offered are:

    • Secure storage for Azure Files and Azure Blob Storage
    • Configure secure access to your workloads using Azure networking
    • Deploy and configure Azure Monitor
    • Deploy containers by using Azure Kubernetes Service
    • Implement security through a pipeline using Azure DevOps
    • Develop an ASP.NET Core web app that consumes an API
    • Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls
    • Configure SIEM security operations using Microsoft Sentinel
    • Create and manage automated processes by using Power Automate

    Applied Skills differ from Certifications in a few key areas.

    Certifications test a broad range of skills. For instance, on the AZ-104 Azure Administrator certification, there are over 100 topics listed on the exam requirements. The questions on the certification test are from this large, broad array of knowledge required.

    Applied Skills are only one specific skill. So if you know how to configure Azure Monitor, you can get assessed on that and get an official Applied Skill badge.

    Applied Skills are assessed online (like renewal exams) and can be taken at any time.

    It looks like the Applied Skills can involve doing an interactive lab. So, for instance, if you’re taking the assessment for Virtual Networking, you’ll be asked to set up a Virtual Network on the real Azure environment.

    Tonight, for fun, I did the Azure Networking Applied Skills assessment. I did enjoy it. It’s also good practice for taking a real certification. Covers only a small number of skills, but good practice.

    (The result? I am pretty sure I did it exactly right. But it gave me an error when I submitted it. Oh well. Maybe it’s not 100% perfect. Still, it’s interesting.)

    See more:
    https://techcommunity.microsoft.com/t5/microsoft-learn-blog/announcing-microsoft-applied-skills-the-new-credentials-to/ba-p/3775645


    AZURE PLATFORM UPDATES.

    The following updates to the Azure platform were announced in the last two weeks:

    • Flush data operation for Azure Cache for Redis, in preview
    • Built-in Azure Monitor alerts for Azure Site Recovery, in preview
    • Disable Secure Shell (SSH) support in AKS, in preview
    • Snippets for Azure Static Web Apps, in preview
    • Traffic Splitting for Azure Static Web Apps, in preview
    • Announcing the new Azure Bastion Developer SKU, in preview

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    I’ve launched a bunch of new practice test courses on Udemy. So if you’re taking a video course from me, chances are that I have a practice test course available as a complement.

    Other than that, I’m taking it easy this week in preparation for Microsoft Ignite coming up later this month. There are usually a bunch of announcements and changes that come out of that event, and I need to be well-rested.


    WHERE TO FIND ME.

    And that’s it for issue 4.22 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html

  • Azure World Newsletter – Issue 4.21

    Azure World Newsletter – Issue 4.21

    October 18, 2023

    Welcome to the twenty-first edition of the Azure World Newsletter in 2023.

    Hello again, my friends from around the world. I’m so happy you continue to subscribe and read this bi-weekly newsletter on Azure. I enjoy sitting down each week to research and write this, and hopefully, you will continue to find value in it. Feel free to invite your co-workers or others to subscribe if you think they would find it helpful.

    It’s been a bit of a slow couple of weeks when it comes to news. Microsoft Ignite is coming in November, and perhaps they are saving a few big announcements for the middle of the next month.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    I must admit that I haven’t been paying attention to a new open-source end-to-end web app testing framework called Microsoft Playwright. Microsoft this week announced a new Microsoft Playwright Testing (MPT) service in preview mode.

    Playwright is a web testing tool similar to Selenium. This falls into the category of web automation testing software. You can record or program your app tests using this tool, and it will run through the web automation tests using either a desktop browser, mobile browser, and can even test API calls.

    You can write your tests in many languages, including JavaScript, TypeScript, Java, Python or C#. Of course, it’s cross-platform for Windows, Mac, Linux, Android or iOS. It supports geolocation, where you simulate your tests from different regions of the world. It also supports all main browsers, including Chromium, WebKit, or Firefox-derived browsers. It can also support headless mode if you don’t want your monitor to be taken over during testing.

    The Microsoft Playwright Testing service is built into Azure, and you can set up your application tests to run in the cloud. You can scale the tests to run in parallel, so that you’re not waiting hours for the tests to complete. It was recently in private preview, but Microsoft has now opened that up to a public preview. Anyone can try it.

    If you want to test your web apps in the cloud, check it out.

    See more:
    https://techcommunity.microsoft.com/t5/apps-on-azure-blog/introducing-microsoft-playwright-testing-service-private-preview/ba-p/3905705

    And here:
    https://azure.microsoft.com/en-us/products/playwright-testing/



    AZURE PLATFORM UPDATES.

    The following updates to the Azure platform were announced in the last two weeks:

    • Microsoft Playwright Testing service: Scalable end-to-end testing for modern web apps, in preview
    • App Service: Backup and Restore over Azure Virtual Network
    • ExpressRoute Traffic Collector is now generally available
    • Announcing Public Preview of Azure API Management Pricing Tiers: Basic v2 and Standard v2
    • Virtual Machine Scale Set Default Orchestration Mode changing from Uniform to Flexible on PowerShell, Azure CLI
    • Azure Dedicated Host – Resize, in GA
    • Windows Server 2012/R2 reaches end of support
    • VMSS Automatic Instance Repairs – Reimage, Restart Repair Actions, in preview

    The following services are being retired, please take note:

    • Support for Azure Machine Learning Explanation and Fairness Dashboards is ending on 14 March 2025
    • Support for TLS 1.0/1.1 on Azure Cache for Redis ending on 30 September 2024
    • Azure Activity Logs Legacy solution is replaced by Diagnostic settings
    • Azure Cosmos DB built-in Jupyter notebooks will be retired March 30, 2024
    • Bing Speech will be retired on 3 November 2023
    • Azure Functions support for Python 3.8 is ending on 14 October 2024

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    So far in October, I’ve recorded or re-recorded 6 hours of videos for my AZ-204, AI-900. AZ-104, and DP-900 courses. These updates keep the videos fresh, showing the latest Azure UI, covering new or changed Azure features, and ensure the courses continue to be the most relevant available on the topics.

    We have also launched many new Practice Test courses for various Azure Certifications. There are new practice test courses for:

    • AZ-700 Azure Networking
    • AZ-500 Azure Security Technology
    • AZ-104 Azure Administrator
    • AI-102 Azure AI Engineer

    My team and I continue to work hard to keep the courses up-to-date and help you in your certification journey.


    WHERE TO FIND ME.

    And that’s it for issue 4.21 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html

  • Azure World Newsletter – Issue 4.20

    Azure World Newsletter – Issue 4.20

    October 4, 2023

    Welcome to the twentieth edition of the Azure World Newsletter in 2023.

    Hello again, my friends from around the world. I’m so happy you continue to subscribe and read this bi-weekly newsletter on Azure. I enjoy sitting down each week to research and write this, and hopefully, you will continue to find value in it. Feel free to invite your co-workers or others to subscribe if you think they would find it helpful.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    Default outbound access for VMs in Azure will be retired

    If you were to create a new Virtual Machine in Azure today, even with a private IP address and no public IP address, you could access the Internet from that machine. There is default outbound access from any VM to the Internet. The NSG has default rules that allow outbound internet access as well.

    On 30 September 2025, this will no longer be the case.

    After this date, all new VMs will require an explicit path to access the Internet. You will need an Azure NAT Gateway setup, Azure Load Balancer outbound rules, or a public IP address for the machine directly attached.

    Existing VMs that have outbound internet access will continue to work after this date.

    Many people in the Azure Facebook group commented that this is the way that AWS has worked for years and this is the way it should work. So, this seems like a good move by Microsoft to tighten up VM connectivity a little more, which should make things more secure in many ways.

    Imagine a hacker could get access to a machine somehow, but that machine did not have outbound internet access. That makes it more difficult for them to exfiltrate data from that machine or whatever they hoped to do.

    And instead of having all private VMs use a range of Azure-controlled IPs to access the web, each machine will have a traceable IP address. This makes the web safer for all of us, allowing admins to block specific malicious IP addresses without affecting millions of innocent systems.

    Microsoft recommends that you do not rely on default outbound access and that you transition to one of the methods for any VMs you have that need outbound access.

    See more:
    https://azure.microsoft.com/en-us/updates/default-outbound-access-for-vms-in-azure-will-be-retired-transition-to-a-new-method-of-internet-access/


    TWO.

    Microsoft has announced several exam updates in the last week or two. They’re going to keep me busy this month, updating my courses.

    One of the themes of the update is finally the broad rollout of the Microsoft Entra brand, replacing Azure Active Directory (Azure AD). So, instead of an exam requiring knowledge of Azure AD Users, the new objectives will ask about Microsoft Entra ID Users. That one is fairly easy to understand.

    Another theme rolling out on several exams is introducing “generative AI” into the exam objectives. Even the fundamentals exam, AI-900 Microsoft Azure AI Fundamentals, now contains a generative AI objective.

    Now, this topic is referring specifically to the Azure OpenAI Service. As you know, Microsoft has invested heavily in Open AI, the team behind the popular ChatGPT.

    The odd thing is that I believe the Azure OpenAI Service still requires you to apply for access. I have not seen any announcement opening up access to the broader public. It’s still in a private preview. But those topics have been added to the exam. This topic also appears on the AI-102 Azure AI Engineer exam.

    Today, I also noticed that Microsoft has just announced the retirement of several AI Services, including Metrics Advisor, Anomaly Detector, and Personalizer. Since the objectives of the AI-102 exam are being updated at the end of the month, and they include these services.

    So we have this odd situation where services are clearly being retired, and the exam still tests for them. I guess Microsoft will have to resolve that shortly. We’ll see.

    See more:
    https://azure.microsoft.com/en-us/updates/ai-services-anomaly-detector-will-be-retired-on-1-october-2026/


    AZURE PLATFORM UPDATES.

    Microsoft has been quite busy. Quite a few updates for you this week. And a bunch of retirements.

    The following updates to the Azure platform were announced in the last two weeks:

    • Alerts timeline view, now in preview
    • OpenAI Whisper model in preview
    • GitHub Advanced Security for Azure DevOps, in GA
    • Azure Update Manager, in GA
    • Share VM images publicly with community gallery – Azure Compute Gallery feature
    • Domain fronting update on Azure Front Door and Azure CDN
    • Gateway Load Balancer IPv6 Support
    • Azure API Center, in ungated preview
    • Additional cache sizes for Azure Cache for Redis Enterprise, in preview
    • Azure SQL Database free offer – serverless, in preview
    • Azure Communication Services Job Router, in preview
    • AKS image cleaner, in GA
    • Vertical Pod Autoscaling add-on for AKS, in GA
    • Azure Functions extension for Dapr, in preview
    • Artifact cache for Azure Container Registry
    • Azure Container Apps is now eligible for Azure savings plan for compute
    • Azure Data Explorer Add-On for Splunk, in preview
    • Enhanced soft delete for Azure Backup
    • Multi-user authorization for Backup vaults

    The following services are being retired, please take note:

    • Azure AI Video Indexer classic accounts will be retired on 30 June 2024
    • The Azure Storage Ruby client libraries will be retired on 13 September 2024
    • Azure Database for MariaDB will be retired on 19 September 2025
    • Support for the 1.x version of Azure Functions ends 14 September 2026
    • The Azure Storage Android client libraries will be retired on 13 September 2024
    • Azure Communication Services Network Traversal (TURN) Public Preview is retiring
    • Extended support for PHP 8.1 ends on 25 November 2024
    • Extended support for Python 3.8 ends on October 2024
    • SAP HANA on Azure Large Instances will be retired by 30 June 2025
    • Computer Vision v1.0, v2.0, v2.1, v3.0, and v3.1 APIs will be retired on 13 September 2026
    • App Service Environment version 1 and version 2 will be retired on 31 August 2024
    • AI Services Metrics Advisor will be retired on 1 October 2026
    • AI Services Anomaly Detector will be retired on 1 October 2026
    • AI Services Personalizer will be retired on 1 October 2026
    • Azure Batch task authentication token will be retired on 30 September 2024
    • Azure Batch CLI extensions will be retired on 30 September 2024
    • Support for select marketplace images for Batch pools will be retired
    • Azure Internet Analyzer will be retired on 15 March 2024 – delete profiles

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    As I wrote above, there are many updates to make to several courses that need to be made in October, including AI-900, AI-102, and others. And I will continue to record updates to AZ-305 as I have been doing.

    I should note that even though there are changes announced for AZ-104 and AZ-204, those changes are cosmetic, and they won’t require changes to your study plans or the course.

    In September, I recorded or updated over 3 hours of content in the AZ-204 course and over 3 hours of updated content in the AZ-305 course. I’m trying to ensure all of the videos have the latest UI and the latest content.


    WHERE TO FIND ME.

    And that’s it for issue 4.20 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html

  • AZ-104 Exam Updates – Oct 2023

    AZ-104 Exam Updates – Oct 2023

    Here’s some brand new content from the SoftwareArchitect.ca YouTube channel that you might find interesting.

    Some new minor changes have been announced for AZ-104, and I cover them in this video.

    AZ104 Oct2023Changes final

    Or you can see the video directly on YouTube.

  • AI-102 Oct 2023 Exam Changes – A Big One!

    AI-102 Oct 2023 Exam Changes – A Big One!

    Here’s some brand new content from the SoftwareArchitect.ca YouTube channel that you might find interesting.

    The Azure AI-102 exam is changing, and this time it’s quite significant. Whole topics are being dropped from the exam and new topics added. In this video, I go over exactly what changed and give my advice if you are planning to take this exam.

    AI-102 Oct 2023 Exam Changes – A Big One!

    Or you can see the video directly on YouTube.

  • Azure World Newsletter – Issue 4.19

    Azure World Newsletter – Issue 4.19

    September 20, 2023

    Welcome to the eighteenth edition of the Azure World Newsletter in 2023.

    Hello again, my friends from around the world. I’m so happy you continue to subscribe and read this bi-weekly newsletter on Azure. I enjoy sitting down each week to research and write this, and hopefully, you will continue to find value in it. Feel free to invite your co-workers or others to subscribe if you think they would find it helpful.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    A recent sophisticated hacker attack against a client of Microsoft Azure exposed a weakness in one of the oldest security systems protecting Azure storage – SAS tokens.

    By default, an Azure Storage account is created with a public URL to access it. This doesn’t mean the data inside the storage account is available for anyone to read. You still need a security key to access the data. One analogy can be a bank safe with a door exposed to the street. The door is locked, and it’s impossible to break the door or the lock. But there is still a door exposed to the street, allowing anyone with the key to enter with no other security measures.

    Also, by default, an Azure Storage account is protected with two access keys. Anyone with one of these keys can access the contents of the storage. It’s just extremely hard (impossibly hard) to guess the key using brute force. The key is 512-bits. That is a 1 with 154 zeros, which is more than the estimated number of atoms in the universe.

    Users should never share their Azure Storage key, if possible. Once a storage account becomes central to operations, changing the key is very difficult. However, Microsoft does offer a way to share access to files securely through the SAS Token.

    (I’ll stop here and say that many professionals shudder at the thought of using SAS tokens on valuable stuff, but as of the time of writing, it’s a prominent security tool.)

    The SAS token uses the secret access key to digitally sign some parameters like read/write permission, start and end date for access, and specific scopes of what can be accessed. You can send this signed token to a third party, and they can use it to access the file.

    By having the SAS token, the third party cannot get access to anything you did not specifically give them access to and does not have access to the secret key used to create it.

    Of course, there is a downside.

    SAS tokens don’t get saved anywhere in Azure. You generate them (a digital signature) and can share them with co-workers and partners. Azure promptly forgets that they were generated, and it’s up to you – a human – to remember who you gave access to which files.

    Notoriously, most humans are terrible at remembering stuff.

    And so, a recent hack against an Azure client led to the hacker finding a SAS token for an Azure Storage container. That container contained a lot of valuable data, and the SAS token had basically full privileges. This allowed them to encrypt those files and demand a ransom for their recovery.

    So, while there was not a vulnerability in Azure itself and SAS tokens “worked as designed” in this scenario, the client had created a huge whole in their security without knowing about it by having a token with full permissions to a valuable storage account stored somewhere that a hacker could potentially find.

    SAS tokens are fine for some situations. But they are difficult to manage once created. Their permissions cannot be modified after creation, nor can the token be directly revoked before its expiry date. The only way to invalidate a token is to recycle your access key, which could break a lot of apps unintentionally, so it is difficult to do except in emergencies in a production context.

    There’s no central page in the Azure Portal to show which SAS tokens have been created and alert you to ones that are still valid.

    When creating SAS tokens, ensure they have very short expiry times and are limited only to the exact permissions required to perform their intended task (such as read-only). For sensitive storage situations, don’t use SAS tokens.

    See more:
    https://www.bleepingcomputer.com/news/microsoft/microsoft-leaks-38tb-of-private-data-via-unsecured-azure-storage/

    See more:
    https://techcommunity.microsoft.com/t5/azure-confidential-computing/announcing-trusted-launch-as-default-in-azure-portal/ba-p/3854872


    TWO.

    Microsoft is touting a new “almost free” WordPress solution within Azure, but I swear this solution has been around since almost the start of Azure App Services.

    I can recall several years ago creating videos about how to create a WordPress website for free in Azure. There was “WordPress for App Service” in the Azure Marketplace that allowed you to create a WordPress website with a MySQL backend using the free tier of Azure App Services.

    It seems Microsoft has revamped this service from all those years ago to improve it.

    WordPress on App Service is new and improved. The marketplace image is now always going to be the latest versions of WordPress and PHP. It also provides performance improvements, including caching and image compression by default. They’ve followed a lot of WordPress’ own recommendations on performance.

    And finally, WordPress on App Service comes with several tiers of hosting plans to meet your needs. Now, with a free version as well, you can also choose a basic website for hobbyists, a development website, the standard option for most production applications, and a premium tier for websites that are under heavy workload.

    Do you want to experiment with hosting WordPress in Azure? Check out this service.

    See more:
    https://visualstudiomagazine.com/articles/2022/03/03/wordpress-on-app-service.aspx
    and
    https://www.infoq.com/news/2023/09/azure-wordpress-free-playground/


    AZURE PLATFORM UPDATES.

    A few updates for you this week.

    The following updates to the Azure platform were announced in the last two weeks:

    • Azure AI Speech service can help with call automation, in preview
    • Azure Load Testing now supports uploading large files as ZIP
    • Azure Front Door Standard and Premium support bring your own certificated-based domain validation
    • Configure load testing in your CI/CD pipeline from Azure portal
    • Latest generation burstable VMs – Bsv2, Basv2, and Bpsv2
    • Configure customer-managed keys on existing Cosmos DB accounts, in preview
    • Use Azure Key Vault to securely store and retrieve access key when mounting Azure Storage as a local share in App Service
    • Sensitive Data Protection for Application Gateway Web Application Firewall
    • WordPress on App Service – Free hosting plan now in Public Preview
    • Save Azure Backup Recovery Services Agent (MARS) passphrase to Azure Key Vault, in preview
    • Malware Scanning in Defender for Storage

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    Last week, I added a free practice test to the TOGAF 9.2 and TOGAF 10 Part 1 courses.

    I’m now going through some of the courses – AZ-204 and AZ-104 particularly – and updating many of the videos to reflect the latest Azure Portal and/or Visual Studio UIs. I’ve also been adding videos to these courses to go deeper into topics as it makes sense.


    WHERE TO FIND ME.

    And that’s it for issue 4.19 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html

  • Azure World Newsletter – Issue 4.18

    Azure World Newsletter – Issue 4.18

    September 6, 2023

    Welcome to the seventeenth edition of the Azure World Newsletter in 2023.

    Hello again, my friends from around the world. I’m so happy you continue to subscribe and read this bi-weekly newsletter on Azure. I enjoy sitting down each week to research and write this, and hopefully, you will continue to find value in it. Feel free to invite your co-workers or others to subscribe if you think they would find it helpful.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    If you’ve created virtual machines recently using the Azure Portal, you might have noticed a new change: trusted machines are now the default setting.

    You can still choose the old security setting using a dropdown on the Portal. And other ways of launching VMs remain unchanged for now.

    A trusted launch adds security features to launching virtual machines using verified and signed bootloaders, OS kernels, and a boot policy. This protects against boot kits, rootkits, and kernel-level malware.

    The four security features enabled by Trusted Launch are:

    • Secure Boot
    • Virtual TPM (vTPM)
    • Measured Boot
    • Boot integrity monitoring

    Modern physical machines (such as your laptop) have a security processor called a TPM. This provides cryptographic storage that can be used to confirm that the operating system and firmware on your device are what they’re supposed to be. In fact, with Windows 11, Microsoft requires TPM 2.0 to be available on the machine hardware, and many machines (even newer ones) don’t support that. This is why many machines, even powerful ones, can’t be updated to Windows 11.

    With virtual machines, there is a virtual TPM (vTPM). This allows customers to protect keys, certificates, and secrets in the virtual machine.

    You’ll need a trusted virtual machine to launch a Windows 11 VM.

    See more:
    https://techcommunity.microsoft.com/t5/azure-confidential-computing/announcing-trusted-launch-as-default-in-azure-portal/ba-p/3854872


    TWO.

    Azure App Services have a WebJobs feature that allows you to run a background job such as an executable or a script. These background tasks operate independently of the web app itself, and there is no extra cost to run a WebJob.

    Now, Azure Container Apps also support WebJobs.

    Jobs enable you to run serverless containers that perform background tasks that run to completion. These jobs can either be started manually, scheduled on a timer or can respond to some event.

    You can use these background jobs for many different purposes. You can schedule a job to run every night at a specific time to perform an end-of-day task that your app might require.

    You can also respond to an event, such as a new message arriving in a queue. That can trigger a job to run. In this way, it can be like Azure Functions.

    Jobs can run multiple executions concurrently. So if there are multiple messages that arrive in queue in a short period of time, all of them can be processed at the same time.

    Check the blog post for more information.

    See more:
    https://techcommunity.microsoft.com/t5/apps-on-azure-blog/generally-available-azure-container-apps-workload-profiles-more/ba-p/3913345


    AZURE PLATFORM UPDATES.

    A few updates for you this week.

    The following updates to the Azure platform were announced in the last two weeks:

    • Cross Subscription Restore for Azure Virtual Machines
    • Rate-limit rules for Application Gateway Web Application Firewall, in preview
    • Quick create Azure Front Door endpoints for Azure Storage accounts
    • Improve VM resiliency with Azure Advisor’s Availability Zone recommendation
    • Azure Portal experience for Azure Database Migration Service, in preview
    • Auto-upgrade scheduled maintenance for AKS, in GA
    • Azure Container Apps dedicated plan, in GA
    • Azure Container Apps supports additional TCP ports
    • Azure Container Apps jobs
    • Azure Container Apps supports environment level mTLS encryption, in preview
    • Azure Functions .NET 8 support in Linux plans, in preview
    • Trusted launch as default for VMs deployed through the Azure portal
    • Azure Firewall: Auto-Learn SNAT routes feature is now in public preview, in preview
    • Azure Firewall: Explicit Proxy is now in public preview
    • Azure Firewall Single-Click Upgrade and Downgrade is now in general availability
    • Azure Monitor VM Insights using Azure Monitor Agent, in GA

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    Did you know I have Azure practice labs?

    At the GetCloudSkills labs website, you can buy 3-month passes to a whole set of Azure labs around a particular exam, including time in Azure to practice them! If your free account is over, no need to worry. For only $24.99, you can get 3-months of Azure time and a bundle of labs to practice with.

    I also have a 12-month lab package available that comes with over 700 labs, including Azure, AWS, Linux, Cybersecurity, and more.

    Check out my website for details.

    http://www.getcloudskills.com/


    WHERE TO FIND ME.

    And that’s it for issue 4.18 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html

  • 2023 Microsoft Certification Exam Tips

    2023 Microsoft Certification Exam Tips

    Here’s some brand-new content from the SoftwareArchitect.ca YouTube channel that you might find interesting.

    After taking another Azure certification exam last week, I sat down to document my best tips for taking a Microsoft role-based certification exam.

    2023 Microsoft Certification Exam Tips

    Or you can see the video directly on YouTube.

  • Azure World Newsletter – Issue 4.17

    Azure World Newsletter – Issue 4.17

    August 23, 2023

    Welcome to the seventeenth edition of the Azure World Newsletter in 2023.

    Hello again, my friends from around the world. I’m so happy you continue to subscribe and read this bi-weekly newsletter on Azure. I enjoy sitting down each week to research and write this, and hopefully, you will continue to find value in it. Feel free to invite your co-workers or others to subscribe if you think they would find it helpful.

    Not much has changed in the world of Azure in the last two weeks. So I considered skipping this one and returning in September, but then some big exam news broke.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    The big news this week is that Microsoft is making a small but important change to its exam policy.

    Starting soon, you will be able to browse the Microsoft Learn website while taking any of the role-based certification exams.

    This means that if you encounter a difficult question, you can click a button on the exam interface to view the Microsoft Learn website content, which includes Microsoft Documentation. You can browse the topic you are interested in and look up the details you need to know. Then return to the question, hopefully with the answer you need.

    Some are calling this a move to “open-book exams.”

    There’s an important thing to realize with this move. You’re not getting any extra time for the test, so you can’t exactly spend all the time you need looking up any question. But for those questions where you “kind of” know the answer and just need to quickly look it up to verify, this could be a lifesaver.

    This is a bold move by Microsoft. You might think that this makes the tests easier, and perhaps it does. But in the real world, if we don’t know something, we can quickly look it up. So having to memorize the amount of RAM a memory-optimized virtual machine instance had in the real world is unrealistic.

    Apparently, they are not changing the questions because of this move. Partly, that is because the questions on Associate and Expert exams are generally not trivial. Also, it may not be possible to do deep research on every question to pass the exam, so you will probably want to use this resource sparingly.

    See more:
    https://techcommunity.microsoft.com/t5/microsoft-learn-blog/introducing-a-new-resource-for-all-role-based-microsoft/ba-p/3500870



    AZURE PLATFORM UPDATES.

    A few updates for you this week.

    The following updates to the Azure platform were announced in the last two weeks:

    • Azure Blob Cold Storage Tier, in GA
    • Support for new custom error pages in Application Gateway, in preview
    • Simplified flush operation for caches using active geo-replication, in GA
    • Cross-Origin Resource Sharing (CORS) in Azure Container Apps, in GA
    • Init containers in Azure Container Apps, in GA
    • Session affinity for Azure Container Apps, in GA
    • Secrets volume mounts for Azure Container Apps, in GA
    • Private Link service integration in Kubernetes, in GA
    • Azure Key Vault references for secrets in Azure Container Apps, in GA
    • SDK type bindings in Azure Functions, in GA
    • 40MB/s/TiB and 500MB/s/TiB performance tiers for Azure Managed Lustre, in GA

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    Did you know I have Azure practice labs?

    At my labs website, you can buy 3-month passes to a whole set of Azure labs around a particular exam which also includes time in Azure to practice them! If your free account is over, no need to worry. For only $24.99, you can get 3-months of Azure time and a bundle of labs to practice with.

    I also have a 12-month lab package available that comes with over 700 labs, that include Azure, AWS, Linux, Cybersecurity, and more.

    Check out my website for details.

    http://www.getcloudskills.com/


    WHERE TO FIND ME.

    And that’s it for issue 4.17 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html

  • Azure World Newsletter – Issue 4.16

    Azure World Newsletter – Issue 4.16

    August 9, 2023

    Welcome to the sixteenth edition of the Azure World Newsletter in 2023.

    Some think summertime is a good time to take it easy. Many sensible people go on vacation this month, and even some businesses shut down around this time for a holiday break. Not Microsoft, however. In the past month, Microsoft has decided to update almost every one of their exams. So I have been busy recording videos to update my courses to cover the new topics.

    Luckily, they often remove topics from exams, too, so that’s somewhat easier to deal with. Either way, I have that familiar feeling of trying to catch up to the changes that seem to happen simultaneously. Luckily, things should be quiet for me from now until MS Build happens in November. If past history repeats itself.

    The unsubscribe link is at the bottom if you want to stop receiving these emails.


    ONE.

    Azure seems to be testing a new way to manage large numbers of resources in a simplified fashion. This method is called Deployment Stacks. This new resource is in Preview mode.

    A Deployment Stack is a set of resources deployed using a single ARM Template or Bicep. A deployment stack can be created at different scopes – resource group, subscription, and management group scope.

    A stack can deploy resources across multiple resource groups or subscriptions. You could, for instance, deploy a developer jump box with a public IP and RDP enabled across several regions at once.

    You can then make bulk updates to all resources in the stack, such as deleting all of the resources using a single call. You can also use stacks to block unwanted changes to the group of resources it controls.

    If this sounds interesting, you can read more about it here.

    For more:
    https://techcommunity.microsoft.com/t5/azure-governance-and-management/arm-deployment-stacks-now-public-preview/ba-p/3871180

    https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks?tabs=azure-powershell


    TWO.

    As much as I don’t like the name of Microsoft Entra ID, I do like the name of a new Azure feature called Azure Boost.

    Boost sounds fast. And it is.

    Actually, maybe they should have called it “Turbo Mode.”

    Unfortunately, Boost runs behind the scenes at the data center hardware layer, and I probably will never get to interact with it directly.

    Azure Boost offloads the virtualization process that the hypervisor (and host OS) usually performs onto custom-developed hardware and software.

    By taking the virtualization function away from the host, Azure Boost significantly “boosts” the networking and storage throughputs that customers can expect to see.

    For instance, with Azure Boost, a VM can see 200 Gbps networking throughput and a storage throughput of up to 400,000 IOPS at 10 Gbps.

    For now, you can’t specifically choose a VM host with Boost enabled, but Azure has been working with certain customers to test it. In fact, Microsoft claims “millions of Azure VMs” are getting the benefit of Boost without even knowing.

    For more on this:
    https://azure.microsoft.com/en-us/updates/preview-azure-boost/


    AZURE PLATFORM UPDATES.

    A few updates for you this week.

    • Azure Media Services is being retired on 30 June 2024
    • Crash Consistent VM Restore points, in preview
    • Azure Boost, in preview
    • Azure Application Gateway for Containers, in preview
    • The Classic VMs retirement deadline is now September 6, 2023
    • JSON support for active geo-replication on Azure Cache for Redis
    • Azure Load Testing: Run tests with 100,000 virtual users
    • Azure Load Testing: Run tests for up to 24 hours
    • Azure Chaos Studio supports new faults for App Service and Virtual Machines, in preview
    • Azure Storage Mover support for SMB and Azure Files, in preview

    Be sure and check out the Azure Updates page if any of these affect you.

    https://azure.microsoft.com/en-us/updates/


    COMING UP FOR ME.

    Been hard at work with a few things. Microsoft dropped dozens of changes across multiple exams during July, and I had to obviously go and make new videos for those courses. AZ-900, AZ-104, and others received updated content. My teaching assistant Sean Xie quickly updated the study guide for AZ-900 for the new requirements. So there’s lots going on.

    And still, I was able to complete a new TOGAF 10 Part 1 certification course that is being published on Udemy. TOGAF 10 is just a relatively small update for the foundational level content, but all new videos have been recorded, and the course is available for students to join.

    For the launch day pricing of US$9.99, click here: https://sjd.ca/togaf10pt1


    WHERE TO FIND ME.

    And that’s it for issue 4.16 Thanks for reading this far. Talk to you again in two weeks.

    What is your favorite platform to be on? Perhaps we can connect there.

    Facebook Page: https://www.facebook.com/getcloudskills/ 

    LinkedIn: https://www.linkedin.com/in/scottjduffy/

    Instagram: https://www.instagram.com/getcloudskills.ca/

    Twitter: https://twitter.com/scottjduffy

    Udemy: https://www.udemy.com/user/scottduffy2/

    LinkedIn Learning: https://www.lynda.com/Scott-Duffy/1993589682-1.html