Azure Administration and Automation Using Terraform

Duration: 16-20 Weeks

Module 1: Cloud Computing Fundamentals

Topics

• What is Cloud Computing

• IaaS, PaaS, SaaS

• Public vs Private vs Hybrid Cloud

• Azure Global Infrastructure

• Azure Regions and Availability Zones

• Azure Resource Manager (ARM)

• Azure Portal Overview

Lab

• Create Azure Free Account

• Deploy first Resource Group

• Create a Virtual Machine

Module 2: Azure Core Administration

Topics

• Resource Groups

• Azure Subscriptions

• Azure Management Groups

• Tags and Cost Management

• Azure CLI

• Azure PowerShell

Lab

• Manage Resource Groups

• Implement Tagging Strategy

• Azure CLI Administration

Module 3: Azure Identity Management

Topics

• Microsoft Entra ID (Azure AD)

• Users and Groups

• RBAC

• Custom Roles

• Privileged Identity Management (PIM)

• Managed Identities

Lab

• Create Users & Groups

• Configure Role Assignments

• Test Least Privilege Access

Module 4: Azure Networking

Topics

• Virtual Networks (VNET)

• Subnets

• NSG (Network Security Groups)

• Route Tables

• Public and Private IPs

• Load Balancer

• Application Gateway

• Azure Firewall

• VPN Gateway

• ExpressRoute

• Bastion

Lab

• Build Hub-Spoke Network

• Configure Site-to-Site VPN

• Secure Traffic with NSGs

Module 5: Azure Compute

Topics

• Virtual Machines

• Availability Sets

• Availability Zones

• VM Scale Sets

• Disks and Snapshots

• Images and Shared Image Gallery

Lab

• Deploy Linux and Windows VMs

• Configure VMSS

• Create Golden Images

Module 6: Azure Storage Administration

Topics

• Storage Accounts

• Blob Storage

• Azure Files

• Queue Storage

• Table Storage

• Lifecycle Management

• Soft Delete

• Storage Replication Options

Lab

• Configure Blob Containers

• Lifecycle Policies

• Mount Azure Files

Module 7: Azure Backup and Disaster Recovery

Topics

• Recovery Services Vault

• Azure Backup

• Azure Site Recovery

• Business Continuity Planning

• DR Strategies

Lab

• Backup Virtual Machines

• Perform VM Restore

• Configure Site Recovery

Module 8: Azure Monitoring and Logging

Topics

• Azure Monitor

• Log Analytics

• Application Insights

• Alerts

• Action Groups

• Diagnostic Settings

Lab

• Create Monitoring Dashboard

• Configure Alerting System

• Query Logs using KQL

Module 9: Azure Security

Topics

• Microsoft Defender for Cloud

• Security Center

• Key Vault

• Encryption

• Network Security

• Compliance

Lab

• Store Secrets in Key Vault

• Enable Defender Recommendations

• Implement Security Baseline

Module 10: Terraform Fundamentals

Topics

• Infrastructure as Code Concepts

• Terraform Architecture

• Providers

• State Files

• Terraform Workflow

terraform init

terraform plan

terraform apply

terraform destroy

`

Lab

• Install Terraform

• Configure Azure Provider

• Deploy Resource Group

Module 11: Terraform Core Concepts

Topics

• Variables

• Outputs

• Locals

• Functions

• Conditional Expressions

• Loops

• Dynamic Blocks

Lab

• Develop Parameterized Deployments

• Reusable Infrastructure Templates

Module 12: Azure Automation with Terraform

Topics

• Deploy Azure Resources

• Resource Groups

• Storage Accounts

• VNETs

• NSGs

• Virtual Machines

• Load Balancers

Lab

Create:

Resource Group
|
+-- VNET
|
+-- Subnets
|
+-- NSG
|
+-- VM

Entire deployment through Terraform.

Module 13: Terraform Remote Backend

Topics

• Local State

• Remote State

• Azure Storage Backend

• State Locking

• State Security

Lab

backend "azurerm" {

resource_group_name = "tfstate-rg"

storage_account_name = "tfstateaccount"

container_name = "tfstate"

key = "prod.tfstate"

}

Module 14: Terraform Modules

Topics

• Module Architecture

• Reusable Infrastructure

• Parent and Child Modules

• Versioning

Lab

Create Separate Modules:

network
compute
security
storage
monitoring

Module 15: Terraform Automation and CI/CD

Topics

• Git Fundamentals

• GitHub

• Azure DevOps

• GitHub Actions

• Terraform Pipeline

Lab

Pipeline Workflow:

Code Commit

↓

GitHub

↓

Terraform Plan

↓

Approval

↓

Terraform Apply

Module 16: Azure Governance

Topics

• Azure Policy

• Blueprints

• Cost Management

• Landing Zones

• Resource Locks

Lab

• Restrict VM Sizes

• Force Resource Tagging

• Budget Alerts

Module 17: Advanced Azure Services

Topics

• Azure Kubernetes Service (AKS)

• Azure Container Registry (ACR)

• App Services

• Functions

• Logic Apps

Lab

Deploy AKS using Terraform.

Module 18: End-to-End Enterprise Project

Project: Enterprise Landing Zone

Deploy via Terraform:

Management Groups

|

Subscriptions

|

Resource Groups

|

Hub-Spoke Network

|

NSGs

|

Azure Firewall

|

VMs

|

Storage Accounts

|

Key Vault

|

Monitoring

|

Backup