ardalis / azure-cloud-native-book

azure-cloud-native-book

Put source files used to produce images and diagrams in the /sourcefiles folder. Things like PowerPoint presentations, etc.

Put actual media images in the media folder. Name them according to what chapter they reference.

azure-cloud-native-book's Issues

Revise Cloud-native DevOps

https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/devops

What are some challenges facing DevOps configuration for cloud-native apps (as compared to simple monolithic apps)? specific scenarios?

• Source control options and analysis
• Tracking work and tying it to source control
• Build and release pipelines for automated builds, deployments

What are disadvantages of traditional infrastructure management techniques as apps move to the cloud?
Real servers (hardware), real OSes (patches, etc) were time-consuming to manage.
"cattle not pets"
How do various tools address these needs?

• Azure Resource Manager (ARM) templates
• Terraform

What are some challenges with automating infrastructure as code?

• Many different and incompatible and incomplete options

How does Cloud Native Application Bundles (CNABs) address these challenges?

Revise Identity

https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/identity

Shorten section title "Authentication and Authorization in cloud-native apps"
What are challenges of identity in cloud-native apps? Compared to on prem? specific scenarios?
What are the advantages of using an Azure AD solution?
How does IdentityServer solve common cloud-native identity problems?

Revise Monitoring and health

Url: https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/monitoring-health

• Challenges - specific scenarios
• What are the benefits of logging, monitoring, alerts? When to use each?
• What are the advantages of elastic stack?
• If you're using Kubernetes/AKS, what are good options for monitoring?
• Where does Azure Monitor fit in?

Revise Security

https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/security

Consider breaking up this section:
https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/azure-security

What are common cloud-native application security challenges during development? specific scenarios?

How are likely threats detected and mitigated before they're exploited?

• Thread modeling
• Principle of Least Privilege
• Penetration testing
• Securing the build
• Building secure code

How are secrets kept safe in cloud-native apps?

• Azure Key Vault
• Kubernetes
• Encryption in transit and at rest

What are common cloud-native security challenges at runtime?

• Monitoring
• Azure built-in security
• Azure network infrastructure
• RBAC
• Security Principals and Roles
  • Scopes
  • Allow and Deny rules
  • Checking Access
• Keeping Secure