Azure Architecture Fundamentals

Azure Regions

Azure Regions are geographically distributed datacenter locations around the world. Each region consists of one or more datacenters within a specific geographic area.

This global reach allows customers to deploy resources closer to their users or required locations, helping with compliance, latency, and performance.

Azure Regions help improve:

  • Application performance and latency
  • Regulatory compliance
  • Data residency requirements
  • High availability

Azure resource pricing may vary depending on the selected region.

Azure Availability Zones

Availability Zones are physically separate locations within an Azure region. They are designed to protect applications and data from local datacenter failures.

For example, if one datacenter within a region experiences an outage, services can fail over to another Availability Zone in the same region.

Each Availability Zone has its own:

  • Power supply
  • Cooling systems
  • Networking infrastructure

There is no additional charge for using Availability Zones themselves. Customers only pay for the Azure resources they deploy, such as Virtual Machines.

Azure Region Pairs

Azure Region Pairs are pairs of Azure regions within the same geography. They are designed to support disaster recovery and service reliability.

Region pairs are usually separated by at least 300 miles where possible. This helps reduce the chance of a single large-scale event affecting both regions at the same time.

Azure platform updates are rolled out sequentially across region pairs to reduce downtime and service disruption.

However, region pairs are part of Microsoft’s platform resilience strategy. You still need to design and implement your own disaster recovery plan for your applications and data.

Azure Sovereign Regions

Azure Sovereign Regions are isolated Azure environments created to meet specific government, regulatory, and compliance requirements.

Azure Government

Azure Government is a dedicated Azure environment built for U.S. government agencies and authorized partners. Organizations must be authenticated and approved before they can deploy resources in Azure Government.

Azure China

Azure China is operated by 21Vianet and is separate from the global Azure cloud. It is designed to meet local regulatory and compliance requirements, with data remaining within China.

Azure Resources

Azure Resources are manageable cloud services and components available within Microsoft Azure.

Examples include:

  • Virtual Machines
  • Azure SQL Databases
  • App Services
  • Storage Accounts

Resources can be created, managed, and deleted as needed. Azure follows a pay-as-you-go pricing model, meaning customers only pay for the resources they use.

Azure Resource Groups

Resource Groups are logical containers used to organize and manage Azure resources.

Important characteristics:

  • Every Azure resource must belong to a resource group.
  • A resource can exist in only one resource group at a time.
  • Resource groups can contain different resource types.
  • Resources within a resource group can exist in different regions.
  • Resource groups cannot be nested.
  • Resources can be moved between resource groups.

Applications may use multiple resource groups depending on architecture and management requirements.

When a resource group is deleted, all resources inside it are also deleted because they are managed together.

Azure Subscriptions

An Azure account can contain multiple Azure subscriptions.

Subscriptions provide two main boundaries:

Billing Boundary

Each subscription can have separate:

  • Billing reports
  • Usage tracking
  • Invoices

Access Control Boundary

Subscriptions also define access permissions and security boundaries for users and services.

This allows organizations to separate environments such as:

  • Production
  • Development
  • Testing

Azure Management Groups

Management Groups are the highest level of organization in Azure.

They allow administrators to group multiple subscriptions together and apply governance controls at scale.

Azure supports up to 10,000 management groups within a single directory.

Benefits of Management Groups

  • Centralized policy management
  • Simplified subscription administration
  • Consistent governance across environments

Management Groups are commonly used in large enterprises to enforce compliance, security, and organizational standards across multiple Azure subscriptions.

#azure #cloud

0 Comments