4.31 out of 5
73 reviews on Udemy

Becoming a Cloud Expert – Microsoft Azure IaaS – Level 1

Plan, Deploy and Monitor Cloud Solutions in Microsoft Azure Infrastructure as a Service
Idan Gabrieli
9,183 students enrolled
English [Auto-generated]
Understand the Building Blocks of Azure Infrastructure as a Service
Create Virtual Networks, Subnets, Allocate Private and Public IP Addressees
Plan and Deploy Windows and Linux Virtual Machines
Configure Traffic Filtering using Security Rules
Manage and Attach Virtual Disks to VMs
Create and Manage Storage Accounts
Configure Users and Access Role Assignments
Operate and Monitor VMs Ongoing Tasks

Are You Looking to Become a Cloud Expert?

Cloud computing is one of the biggest technology revolutions in the IT industry spreading at the speed of light all over the world. More and more business companies are looking for ways to migrate their applications into the cloud or to build new web-scale applications from scratch atop a cloud infrastructure.

The demand for more skilled people in the area of cloud computing is increasing every day across multiple industries. Starting from IT Expert, DevOps Engineers, Developers, Consultants, Security Experts and more.

This course is part of a larger training program called “Becoming a Cloud Expert” and it is the first important cornerstone for learning how to migrate applications into the cloud while using the Infrastructure As a Service model inside Microsoft Azure. We will learn how to create, set up and manage virtual networks, private/public IPs, storage accounts, virtual machines, virtual disks, security rules, access control and much more.   

Join us and start to pave your way as a Cloud Expert!

Getting Started


Welcome and thanks for joining! this training program "Becoming a Cloud Expert".

Course Objectives and Structure

Before we start lets' quickly review the course main learning objectives and high-level structure.

Introduction to Microsoft Azure

Section Overview


  • Cloud computing definition

  • Microsoft Azure Cloud

  • Azure Infrastructure as a Service (IaaS)

  • Global footprint

  • Azure Portal Overview

  • Azure Resource Manager (ARM)

  • Azure RBAC

Cloud Computing Definition

Cloud Computing is the transformation of computer hardware, software and networks into a utility service just like electric, water or gas services. Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources, that can be rapidly provisioned and released with minimal management effort or service provider interaction.  

Microsoft Azure Cloud

Microsoft Azure provides the services to build, manage and deploy applications on a global scale while using multiple data centers connected with a super fast network. The all hardware and software orchestration of the cloud infrastructure is done using a specialized cloud operating system, called “Microsoft Azure” developed by Microsoft.

Global Footprint

The cloud services are supposed to be available on a global scale and this is one of the most impressive things about a public cloud provider, like Microsoft Azure, Amazon AWS, or Google cloud. Those players are building and running a huge global infrastructure and every year they announce on additional regions.  

Demo - Azure Portal Overview

Let's review the Azure web portal at a high level.

Azure Resource Manager (ARM)

As part of the management layer of Azure, there is a central component that is called Azure Resource Manager, or in short ARM. The azure resource manager is used to allocate and deploy resources, organize resources into groups, control access to resources and much more.      

Demo - Azure ARM

Let's review the Azure ARM inside Microsoft Azure - resources, resource groups, resource providers, accounts and subscriptions and deployment templates.

Azure Role-Based Access Control (RBAC)

Access management for resources is a critical function for any group of users or an organization that is using the Azure cloud.  As administrators, the Role-based access control (RBAC) will be used to manage who has access to Azure resources and what they can do with those resources.

Demo - Azure RBAC

Let's create new users and assign them access to specific entities.

Test Your Knowledge - Introduction to Microsoft Azure

Azure IaaS - Networking

Section Overview


  • What is Virtual Network?

  • Virtual network setting

  • IP Address Types

  • VM, NICs and IP Configuration

  • Azure Network Security

  • Traffic filtering with security rules

  • Network Security Group (NSG)

  • Application Security Group (ASG) 

What is a Virtual Network?

A virtual network is basically a private isolated connectivity layer being used to connect between a group of cloud resources.     

Virtual Network Setting

In azure a virtual network is a managed entity that users are creating with a group of setting that is configured during the creation process or added later when the virtual network entity is already created. 

Demo - Creating a Virtual Network (VNet)

Let's review the all process end-to-end for creating virtual network and subnets.

IP Address Types

As soon as we have a new virtual network, we can create VMs as resources inside that virtual network or inside a specific subnet. Each resource must be assigned with at least one private IP address from the virtual network address range we allocated to the virtual network. In addition, if we want a resource inside the virtual network to access the outside internet than we will need to use also a public IP address.

VM, NICs and IP Configuration

We have an IP address, that can be public or private created dynamically or with a static configuration. In Azure, we have a virtual machine, network interfaces and IP configuration profiles. Let’s see how those building blocks are connected and what kind of combination we can create.

Demo - Network Interfaces and IP Configuration

Let's review how to create network interfaces, attach them to VMs and create or adjust IP configuration.

Network Security Group (NSG)

All public cloud providers provide an ability to filter traffic and I am planning to present how it is being done in Microsoft Azure. In Microsoft Azure, we can filter network traffic to and from resources in a virtual network with an entity that is called a network security group.

Demo - Configuring NSG and ASG

Let's review how to configure NSG and ASG.

Test Your Knowledge - Networking

Azure IaaS - Storage

Section Overview


  • The Power of a Cloud Storage

  • Types of Cloud Storage

  • Azure Storage Services

  • Storage Replication Options

  • Storage Accounts

  • VMs Disks

  • Encryption Data at Rest

The Power of a Cloud Storage

Cloud storage is basically the option to store data on the Internet through a cloud computing provider who manages and operates data storage as a service. We talked about it in the introduction course about cloud computing but this is the power of the cloud, it is a public infrastructure enabling companies to build applications that can scale on a global level without the limitation of a single private data center.

Types of Cloud Storage Services

There are three main storage types

  • Block Storage

  • File Storage

  • And Object Storage

Storage Accounts

Any type of storage service, like blobs, files, disks, tables, and queues that we would like to use must be allocated inside a logical entity called a storage account. A storage account entity can be created and managed by us or in some cases it will be created and managed by Azure.

Storage Replication Options

One of the most valuable features in a public cloud is high data durability. We know that data can be damaged because of many things like hardware failures, network or power outages, or maybe some massive site disasters. Systems availability is a critical factor and data is a critical component in almost all systems. This is why Microsoft Azure and also other cloud providers are replicating our data and enable us to configure the best replication option for our application.

  • Locally-redundant storage

  • Zone-redundant storage

  • Geo-redundant storage

  • Read-access Geo-redundant

Demo - Creating and Managing a Storage Account

Let's review how to create and manage a storage account.

VMs Disks

In addition to allocating computing power and setting networking connectivity, we also would like the capability to allocate storage capacity as virtual disks.   

There are three types of azure VM disks:

  • Operating System Disk (OS Disk)

  • Temporary Disk

  • Data Disk/s

Demo - Create, Attach and Detach Data Disks

Let's review how to create, attach and detach data disks for VMs.

Encryption Data at Rest

Security is a critical part of any solution, including the storage. Our next topic is encryption data at rest, meaning data that is stored in Microsoft Azure storage services.

  • Azure Key Vault

  • SSE - Storage Service Encryption 

  • Azure Disk Encryption (ADE)

Test Your Knowledge - Storage

Azure IaaS - Compute

Section Overview


  • Virtualization

  • Virtual Machines

  • VM Types and Sizes

  • Creating WindowsLinux VMs

  • VMs Setting

  • VMs Operation and Monitoring


At the core technology value of virtualization, we can say that virtualization is a great way to divide and optimize physical IT resources into logical entities or also called virtual resources. It is an abstraction management layer of physical objects into logical objects. Now going back to the cloud, a public cloud environment is all about virtualization but of course in a much larger scale than a single private data center. 

Virtual Machines

VM as a resource can be allocated on-demand while using the flexibility comes with a cloud environment. We can define the required VM from a variety of VM types and sizes to be used for different application workloads.

VM Types and Sizes

Every application or better call it workload will have a different resources consumption profile. Some applications require more CPUs power and less memory capacity and in other cases, it will be the other way around, more memory and less CPU power. So Microsoft Azure provides us with a variety of VM types and sizes that will be more optimized to the resources consumption profile of our application.

Demo - Creating a VMs

Let's review how to create a new VM while following the all process end-to-end.

Demo - VMs Settings

VMs Setting

  • Attaching Network Interfaces

  • Attaching Data Disks

  • Scaling a VM Size

  • Security recommendations

  • Adding Extensions

  • Configure access control

Demo - VMs Operations

VMs Operations

  • Shutdown/Run a VM

  • Configure Auto-shutdown

  • Scheduled Backups

  • Using Inventory management for installed software components

  • Running scripts on a VM

Demo - VMs Monitoring

VMs Monitoring

  • Analyze activity logs

  • Review metrics or KPIs

  • Configure alerts

  • Configure the diagnostics setting

  • Review the Azure Advisor recommendations

Test Your Knowledge - Compute

Mission is Possible! - Your Project Assignment

Mission Briefing
Download Your Mission

Course Summary

Let's Summarize

Let's recap the main topics we covered in this course.

What Next?

Thank you for joining and learning this course, let's speak about your next step moving forward as a Cloud Expert.

** BONUS **
You can view and review the lecture materials indefinitely, like an on-demand channel.
Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don't have an internet connection, some instructors also let their students download course lectures. That's up to the instructor though, so make sure you get on their good side!
4.3 out of 5
73 Ratings

Detailed Rating

Stars 5
Stars 4
Stars 3
Stars 2
Stars 1
30-Day Money-Back Guarantee


5 hours on-demand video
2 articles
Full lifetime access
Access on mobile and TV
Certificate of Completion