{"book":{"title":"AI-Native Cloud on Microsoft Azure","subtitle":"From Zero to Production","author":"Muhammad Usman Akbar","basePath":"/azure-book","publishedAt":"2026-07-31"},"chapters":[{"position":1,"slug":"about-this-book","title":"About This Book: Your Azure Journey from Zero to Production","section":"Start Here","description":"How to use this plain-English Microsoft Azure book, its lab safety rules, learning path, and portal-to-automation method.","url":"https://muhammadusmanakbar.com/azure-book/about-this-book","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/about-this-book","updatedAt":"2026-07-31"},{"position":2,"slug":"cloud-and-azure-first-principles","title":"Cloud Computing and Microsoft Azure from First Principles","section":"Start Here","description":"Understand cloud computing, Azure geography, responsibility models, service types, and the core vocabulary needed before your first deployment.","url":"https://muhammadusmanakbar.com/azure-book/cloud-and-azure-first-principles","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/cloud-and-azure-first-principles","updatedAt":"2026-07-31"},{"position":3,"slug":"create-azure-account","title":"Create Your Microsoft Account and Azure Subscription Safely","section":"Start Here","description":"A screenshot-led Azure signup guide covering Microsoft accounts, free and pay-as-you-go choices, verification, subscriptions, and first security checks.","url":"https://muhammadusmanakbar.com/azure-book/create-azure-account","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/create-azure-account","updatedAt":"2026-07-31"},{"position":4,"slug":"portal-cloud-shell-subscriptions-tenants-regions","title":"Tour the Azure Portal, Cloud Shell, Subscriptions, Tenants, and Regions","section":"Start Here","description":"Learn to navigate the Azure portal, open Cloud Shell, switch directories and subscriptions, choose regions, inspect Activity Log, and use safe search-first habits.","url":"https://muhammadusmanakbar.com/azure-book/portal-cloud-shell-subscriptions-tenants-regions","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/portal-cloud-shell-subscriptions-tenants-regions","updatedAt":"2026-07-31"},{"position":5,"slug":"install-tools","title":"Install Azure CLI, Azure PowerShell, VS Code, Git, Bicep, and Terraform","section":"Start Here","description":"Prepare a safe local Azure workstation, sign in without storing credentials, select context, and verify CLI, PowerShell, Bicep, Terraform, Git, and VS Code.","url":"https://muhammadusmanakbar.com/azure-book/install-tools","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/install-tools","updatedAt":"2026-07-31"},{"position":6,"slug":"cost-safety","title":"Prevent Surprise Azure Bills with Budgets, Alerts, Tags, and Cleanup","section":"Start Here","description":"Create Azure budgets and alerts, understand their limits, tag spending, inspect costs, find hidden charges, and clean up labs using portal, CLI, PowerShell, and Bicep.","url":"https://muhammadusmanakbar.com/azure-book/cost-safety","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/cost-safety","updatedAt":"2026-07-31"},{"position":7,"slug":"resource-manager-governance-basics","title":"Azure Resource Manager: Resource Groups, Providers, Tags, Locks, and IDs","section":"Azure Foundations","description":"Master Azure's resource hierarchy and create a governed resource group with portal, CLI, PowerShell, Bicep, and Terraform.","url":"https://muhammadusmanakbar.com/azure-book/resource-manager-governance-basics","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/resource-manager-governance-basics","updatedAt":"2026-07-31"},{"position":8,"slug":"entra-id-rbac-managed-identities","title":"Microsoft Entra ID, Azure RBAC, Service Principals, and Managed Identities","section":"Azure Foundations","description":"Learn Azure identity from users and groups to least-privilege RBAC, app registrations, service principals, workload federation, and managed identities.","url":"https://muhammadusmanakbar.com/azure-book/entra-id-rbac-managed-identities","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/entra-id-rbac-managed-identities","updatedAt":"2026-07-31"},{"position":9,"slug":"virtual-networks-private-connectivity","title":"Azure Networking: VNets, Subnets, NSGs, Routes, DNS, NAT, Peering, and Private Endpoints","section":"Azure Foundations","description":"Build a secure Azure network in portal, CLI, PowerShell, Bicep, and Terraform while learning address planning, routing, name resolution, egress, and private connectivity.","url":"https://muhammadusmanakbar.com/azure-book/virtual-networks-private-connectivity","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/virtual-networks-private-connectivity","updatedAt":"2026-07-31"},{"position":10,"slug":"storage-accounts-data-protection","title":"Azure Storage: Blobs, Files, Queues, Tables, Redundancy, Security, and Lifecycle","section":"Azure Foundations","description":"Create and secure an Azure storage account, choose services and redundancy, upload blobs, automate lifecycle, and compare portal, CLI, PowerShell, Bicep, and Terraform.","url":"https://muhammadusmanakbar.com/azure-book/storage-accounts-data-protection","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/storage-accounts-data-protection","updatedAt":"2026-07-31"},{"position":11,"slug":"key-vault-secrets-keys-certificates","title":"Azure Key Vault: Secrets, Keys, Certificates, Rotation, and Private Access","section":"Azure Foundations","description":"Use Azure Key Vault safely with RBAC, managed identity, soft delete, purge protection, private endpoints, CLI, PowerShell, Bicep, Terraform, and application code.","url":"https://muhammadusmanakbar.com/azure-book/key-vault-secrets-keys-certificates","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/key-vault-secrets-keys-certificates","updatedAt":"2026-07-31"},{"position":12,"slug":"virtual-machines-scale-sets-bastion","title":"Azure Virtual Machines, Disks, Images, Scale Sets, Bastion, and Updates","section":"Compute and Application Hosting","description":"Deploy and operate secure Azure VMs with portal, CLI, PowerShell, Bicep, and Terraform; then understand disks, images, scale sets, Bastion, backup, and patching.","url":"https://muhammadusmanakbar.com/azure-book/virtual-machines-scale-sets-bastion","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/virtual-machines-scale-sets-bastion","updatedAt":"2026-07-31"},{"position":13,"slug":"app-service-deployment-slots","title":"Azure App Service: Web Apps, Configuration, Scaling, and Deployment Slots","section":"Compute and Application Hosting","description":"Host a web application on Azure App Service using portal, CLI, PowerShell, Bicep, and Terraform with managed identity, private networking, slots, health checks, and rollback.","url":"https://muhammadusmanakbar.com/azure-book/app-service-deployment-slots","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/app-service-deployment-slots","updatedAt":"2026-07-31"},{"position":14,"slug":"functions-event-driven-serverless","title":"Azure Functions: Event-Driven Serverless Applications","section":"Compute and Application Hosting","description":"Build Azure Functions with triggers, bindings, managed identity, hosting choices, durable workflows, observability, portal, CLI, IaC, and safe production patterns.","url":"https://muhammadusmanakbar.com/azure-book/functions-event-driven-serverless","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/functions-event-driven-serverless","updatedAt":"2026-07-31"},{"position":15,"slug":"container-registry-container-apps-jobs","title":"Azure Container Registry, Container Apps, and Container Jobs","section":"Compute and Application Hosting","description":"Build, store, secure, deploy, scale, and operate containers with Azure Container Registry and Azure Container Apps using portal, CLI, managed identity, Bicep, and Terraform.","url":"https://muhammadusmanakbar.com/azure-book/container-registry-container-apps-jobs","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/container-registry-container-apps-jobs","updatedAt":"2026-07-31"},{"position":16,"slug":"aks-zero-to-production","title":"Azure Kubernetes Service from First Cluster to Production Baseline","section":"Compute and Application Hosting","description":"Learn when to use AKS, create a managed cluster, deploy a workload, and design identity, networking, ingress, autoscaling, upgrades, policy, GitOps, monitoring, and cost controls.","url":"https://muhammadusmanakbar.com/azure-book/aks-zero-to-production","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/aks-zero-to-production","updatedAt":"2026-07-31"},{"position":17,"slug":"api-management-front-door-gateways-load-balancing","title":"API Management, Front Door, Application Gateway, Load Balancer, and Traffic Manager","section":"Compute and Application Hosting","description":"Choose and combine Azure edge, API, layer-7, layer-4, and DNS traffic services without confusing their roles; then design secure routing, WAF, health, and failover.","url":"https://muhammadusmanakbar.com/azure-book/api-management-front-door-gateways-load-balancing","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/api-management-front-door-gateways-load-balancing","updatedAt":"2026-07-31"},{"position":18,"slug":"azure-sql-postgresql-mysql","title":"Azure SQL, PostgreSQL, and MySQL: Choosing and Operating Relational Databases","section":"Data and Integration","description":"Choose Azure relational data services, deploy a secure database, configure identity and private access, migrate schema, pool connections, back up, restore, scale, and observe it.","url":"https://muhammadusmanakbar.com/azure-book/azure-sql-postgresql-mysql","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/azure-sql-postgresql-mysql","updatedAt":"2026-07-31"},{"position":19,"slug":"cosmos-db-partitioning-consistency","title":"Azure Cosmos DB: Partitioning, Consistency, Indexing, Throughput, and Global Distribution","section":"Data and Integration","description":"Design Cosmos DB containers from access patterns, select partition keys and consistency, control RU cost, use global distribution, change feed, private networking, and safe IaC.","url":"https://muhammadusmanakbar.com/azure-book/cosmos-db-partitioning-consistency","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/cosmos-db-partitioning-consistency","updatedAt":"2026-07-31"},{"position":20,"slug":"service-bus-event-grid-event-hubs","title":"Azure Messaging: Service Bus, Event Grid, Event Hubs, and Reliable Patterns","section":"Data and Integration","description":"Choose Azure queues, topics, events, and streams; implement idempotency, ordering, retries, dead-letter handling, schema, security, observability, and infrastructure as code.","url":"https://muhammadusmanakbar.com/azure-book/service-bus-event-grid-event-hubs","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/service-bus-event-grid-event-hubs","updatedAt":"2026-07-31"},{"position":21,"slug":"data-factory-fabric-databricks-data-lake","title":"Data Factory, Microsoft Fabric, Azure Databricks, and Data Lake Architecture","section":"Data and Integration","description":"Design Azure data ingestion, lakehouse, analytics, orchestration, governance, and operations by choosing among Data Factory, Microsoft Fabric, Databricks, and Data Lake Storage.","url":"https://muhammadusmanakbar.com/azure-book/data-factory-fabric-databricks-data-lake","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/data-factory-fabric-databricks-data-lake","updatedAt":"2026-07-31"},{"position":22,"slug":"azure-managed-redis-caching-state","title":"Azure Managed Redis, Caching, Sessions, and Distributed State","section":"Data and Integration","description":"Use Azure Managed Redis safely for cache, sessions, rate limits, and coordination; learn invalidation, eviction, persistence, private networking, migration, observability, and alternatives.","url":"https://muhammadusmanakbar.com/azure-book/azure-managed-redis-caching-state","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/azure-managed-redis-caching-state","updatedAt":"2026-07-31"},{"position":23,"slug":"microsoft-foundry-azure-openai","title":"Microsoft Foundry and Azure OpenAI: Projects, Models, Deployments, Quotas, and Safety","section":"AI-Native Azure","description":"Start with Microsoft Foundry, formerly Azure AI Foundry: create a project, select and deploy a model, use identity-based access, understand quotas, networking, content safety, and cost.","url":"https://muhammadusmanakbar.com/azure-book/microsoft-foundry-azure-openai","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/microsoft-foundry-azure-openai","updatedAt":"2026-07-31"},{"position":24,"slug":"prompts-structured-output-model-routing","title":"Prompt Engineering, Structured Outputs, Model Routing, and Token Economics","section":"AI-Native Azure","description":"Engineer reliable model interactions with clear instructions, context boundaries, schemas, validation, retries, routing, caching, testing, versioning, and cost controls.","url":"https://muhammadusmanakbar.com/azure-book/prompts-structured-output-model-routing","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/prompts-structured-output-model-routing","updatedAt":"2026-07-31"},{"position":25,"slug":"rag-azure-ai-search","title":"Retrieval-Augmented Generation with Azure AI Search","section":"AI-Native Azure","description":"Build secure RAG on Azure AI Search: ingestion, chunking, embeddings, hybrid retrieval, semantic ranking, filters, citations, authorization trimming, evaluation, operations, and cost.","url":"https://muhammadusmanakbar.com/azure-book/rag-azure-ai-search","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/rag-azure-ai-search","updatedAt":"2026-07-31"},{"position":26,"slug":"document-speech-vision-language-content-processing","title":"Azure AI Services: Document Intelligence, Speech, Vision, Language, and Content Processing","section":"AI-Native Azure","description":"Choose and compose Azure AI services for documents, speech, images, video, and language with identity, batch/real-time decisions, confidence thresholds, human review, privacy, and evaluation.","url":"https://muhammadusmanakbar.com/azure-book/document-speech-vision-language-content-processing","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/document-speech-vision-language-content-processing","updatedAt":"2026-07-31"},{"position":27,"slug":"agentic-applications-tools-memory-human-approval","title":"Agentic Applications: Tools, Memory, Workflows, and Human Approval","section":"AI-Native Azure","description":"Design secure AI agents in Microsoft Foundry with bounded tools, explicit state, memory, identity, approval gates, budgets, durable workflows, MCP controls, and failure recovery.","url":"https://muhammadusmanakbar.com/azure-book/agentic-applications-tools-memory-human-approval","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/agentic-applications-tools-memory-human-approval","updatedAt":"2026-07-31"},{"position":28,"slug":"evaluation-tracing-safety-red-teaming","title":"AI Evaluation, Tracing, Responsible AI, Safety, and Red Teaming","section":"AI-Native Azure","description":"Create a production AI quality system with datasets, evaluators, human calibration, tracing, online monitoring, safety tests, red teaming, release gates, and incident response.","url":"https://muhammadusmanakbar.com/azure-book/evaluation-tracing-safety-red-teaming","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/evaluation-tracing-safety-red-teaming","updatedAt":"2026-07-31"},{"position":29,"slug":"production-ai-reference-application","title":"Production AI Lab: Build the Northstar Governed RAG Assistant","section":"AI-Native Azure","description":"Assemble a production-shaped Azure RAG assistant with App Service or Container Apps, Microsoft Foundry, Azure AI Search, Storage, Key Vault, managed identity, private networking, tracing, evaluation, CI/CD, and cleanup.","url":"https://muhammadusmanakbar.com/azure-book/production-ai-reference-application","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/production-ai-reference-application","updatedAt":"2026-07-31"},{"position":30,"slug":"bicep-arm-from-zero","title":"Azure Bicep and ARM from Zero: Repeatable Infrastructure","section":"Infrastructure and Delivery","description":"Learn Azure Resource Manager templates through Bicep: scopes, parameters, resources, modules, outputs, loops, conditions, dependencies, what-if, deployment stacks, testing, and safe delivery.","url":"https://muhammadusmanakbar.com/azure-book/bicep-arm-from-zero","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/bicep-arm-from-zero","updatedAt":"2026-07-31"},{"position":31,"slug":"terraform-azure-remote-state","title":"Terraform on Azure: Providers, Modules, Remote State, Plans, Imports, and Drift","section":"Infrastructure and Delivery","description":"Use Terraform safely on Azure with azurerm and AzAPI providers, remote state, identity, modules, plans, locking, imports, moved blocks, testing, drift management, and CI/CD.","url":"https://muhammadusmanakbar.com/azure-book/terraform-azure-remote-state","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/terraform-azure-remote-state","updatedAt":"2026-07-31"},{"position":32,"slug":"github-actions-azure-devops-cicd","title":"GitHub Actions and Azure DevOps CI/CD for Azure","section":"Infrastructure and Delivery","description":"Build secure Azure delivery pipelines with workload identity federation, environments, artifacts, Bicep or Terraform plans, tests, approvals, deployment slots, progressive release, and auditability.","url":"https://muhammadusmanakbar.com/azure-book/github-actions-azure-devops-cicd","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/github-actions-azure-devops-cicd","updatedAt":"2026-07-31"},{"position":33,"slug":"gitops-progressive-delivery-feature-flags","title":"GitOps, Progressive Delivery, Feature Flags, and Rollback","section":"Infrastructure and Delivery","description":"Operate Kubernetes and application configuration from Git using Flux on Azure, progressive traffic, feature flags, drift reconciliation, policy, secrets, rollback, and incident-safe promotion.","url":"https://muhammadusmanakbar.com/azure-book/gitops-progressive-delivery-feature-flags","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/gitops-progressive-delivery-feature-flags","updatedAt":"2026-07-31"},{"position":34,"slug":"azure-developer-cli-repeatable-environments","title":"Azure Developer CLI and Repeatable Developer Environments","section":"Infrastructure and Delivery","description":"Use Azure Developer CLI templates to initialize, provision, deploy, monitor, and tear down full-stack Azure applications while understanding azure.yaml, environment state, hooks, IaC, CI, and template security.","url":"https://muhammadusmanakbar.com/azure-book/azure-developer-cli-repeatable-environments","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/azure-developer-cli-repeatable-environments","updatedAt":"2026-07-31"},{"position":35,"slug":"management-groups-policy-landing-zones","title":"Azure Governance: Management Groups, Policy, Initiatives, and Landing Zones","section":"Security Governance and Operations","description":"Organize enterprise Azure with management groups, subscriptions, policy definitions and initiatives, exemptions, remediation, platform landing zones, and policy as code.","url":"https://muhammadusmanakbar.com/azure-book/management-groups-policy-landing-zones","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/management-groups-policy-landing-zones","updatedAt":"2026-07-31"},{"position":36,"slug":"defender-for-cloud-sentinel-incident-response","title":"Microsoft Defender for Cloud, Microsoft Sentinel, and Cloud Incident Response","section":"Security Governance and Operations","description":"Build Azure cloud security posture, workload protection, centralized SIEM/SOAR, detections, playbooks, and a tested incident-response process using Defender for Cloud and Microsoft Sentinel.","url":"https://muhammadusmanakbar.com/azure-book/defender-for-cloud-sentinel-incident-response","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/defender-for-cloud-sentinel-incident-response","updatedAt":"2026-07-31"},{"position":37,"slug":"azure-monitor-observability-slos","title":"Azure Monitor, Log Analytics, Application Insights, Alerts, Dashboards, and SLOs","section":"Security Governance and Operations","description":"Build full-stack Azure observability with metrics, logs, traces, changes, KQL, diagnostic settings, OpenTelemetry, workbooks, alerts, action groups, SLOs, sampling, and cost governance.","url":"https://muhammadusmanakbar.com/azure-book/azure-monitor-observability-slos","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/azure-monitor-observability-slos","updatedAt":"2026-07-31"},{"position":38,"slug":"backup-site-recovery-multi-region","title":"Azure Backup, Site Recovery, Multi-Region Design, RTO, and RPO","section":"Security Governance and Operations","description":"Design recovery from business impact backward: define RTO/RPO, protect Azure workloads, use Backup and Site Recovery, build regional failover, test restores, and operate disaster recovery.","url":"https://muhammadusmanakbar.com/azure-book/backup-site-recovery-multi-region","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/backup-site-recovery-multi-region","updatedAt":"2026-07-31"},{"position":39,"slug":"finops-reservations-savings-rightsizing","title":"Azure FinOps: Cost Allocation, Budgets, Reservations, Savings Plans, and Right-Sizing","section":"Security Governance and Operations","description":"Operate Azure cost as an engineering metric using allocation, forecasting, unit economics, anomalies, right-sizing, scheduling, reservations, savings plans, Hybrid Benefit, and governance.","url":"https://muhammadusmanakbar.com/azure-book/finops-reservations-savings-rightsizing","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/finops-reservations-savings-rightsizing","updatedAt":"2026-07-31"},{"position":40,"slug":"well-architected-production-review","title":"Azure Well-Architected Framework and Production Readiness Review","section":"Security Governance and Operations","description":"Review an Azure workload across reliability, security, cost optimization, operational excellence, and performance efficiency, then turn findings into owned release gates.","url":"https://muhammadusmanakbar.com/azure-book/well-architected-production-review","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/well-architected-production-review","updatedAt":"2026-07-31"},{"position":41,"slug":"hub-spoke-virtual-wan","title":"Enterprise Azure Networking: Hub-Spoke and Azure Virtual WAN","section":"Enterprise and Hybrid","description":"Design enterprise connectivity with hub-spoke VNets or Azure Virtual WAN, centralized security, routing, DNS, platform subscriptions, peering, segmentation, and global operations.","url":"https://muhammadusmanakbar.com/azure-book/hub-spoke-virtual-wan","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/hub-spoke-virtual-wan","updatedAt":"2026-07-31"},{"position":42,"slug":"expressroute-vpn-arc-hybrid","title":"ExpressRoute, VPN Gateway, Azure Arc, and Hybrid Cloud Management","section":"Enterprise and Hybrid","description":"Connect datacenters, branches, and other clouds to Azure with ExpressRoute and VPN; manage servers and Kubernetes with Azure Arc; design routing, DNS, identity, security, monitoring, and failover.","url":"https://muhammadusmanakbar.com/azure-book/expressroute-vpn-arc-hybrid","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/expressroute-vpn-arc-hybrid","updatedAt":"2026-07-31"},{"position":43,"slug":"private-dns-private-link-firewall-ddos-zero-trust","title":"Private DNS, Private Link, Azure Firewall, DDoS Protection, and Zero Trust Networking","section":"Enterprise and Hybrid","description":"Build Azure private service access and zero-trust network controls with Private Link, DNS Private Resolver, Firewall, WAF, DDoS Protection, segmentation, logging, and explicit trust decisions.","url":"https://muhammadusmanakbar.com/azure-book/private-dns-private-link-firewall-ddos-zero-trust","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/private-dns-private-link-firewall-ddos-zero-trust","updatedAt":"2026-07-31"},{"position":44,"slug":"enterprise-landing-zone-lab","title":"Enterprise Lab: Implement an Azure Landing Zone","section":"Enterprise and Hybrid","description":"Plan and implement a production-shaped Azure landing zone with hierarchy, platform subscriptions, policy, identity, hub connectivity, monitoring, security, subscription vending, and a workload onboarding test.","url":"https://muhammadusmanakbar.com/azure-book/enterprise-landing-zone-lab","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/enterprise-landing-zone-lab","updatedAt":"2026-07-31"},{"position":45,"slug":"multi-tenant-saas-isolation","title":"Multi-Tenant SaaS on Azure: Isolation, Identity, Data, Scale, and Deployment Stamps","section":"Advanced Architecture","description":"Design Azure multi-tenant SaaS using tenant catalogs, isolation models, Entra identity, data partitioning, noisy-neighbor controls, deployment stamps, operations, metering, and safe AI.","url":"https://muhammadusmanakbar.com/azure-book/multi-tenant-saas-isolation","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/multi-tenant-saas-isolation","updatedAt":"2026-07-31"},{"position":46,"slug":"event-driven-microservices-reliability","title":"Event-Driven Microservices and Distributed-System Reliability on Azure","section":"Advanced Architecture","description":"Design Azure microservices and event-driven systems with clear boundaries, APIs, sagas, outbox, idempotency, retries, circuit breakers, queues, telemetry, and failure testing.","url":"https://muhammadusmanakbar.com/azure-book/event-driven-microservices-reliability","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/event-driven-microservices-reliability","updatedAt":"2026-07-31"},{"position":47,"slug":"global-active-active-disaster-tolerant","title":"Global Azure Architecture: Active-Active, Data Consistency, Traffic, and Disaster Tolerance","section":"Advanced Architecture","description":"Design a global Azure system across regions with Front Door, regional stamps, data replication, model/search capacity, failover, consistency, observability, chaos testing, and cost tradeoffs.","url":"https://muhammadusmanakbar.com/azure-book/global-active-active-disaster-tolerant","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/global-active-active-disaster-tolerant","updatedAt":"2026-07-31"},{"position":48,"slug":"platform-engineering-golden-paths","title":"Azure Platform Engineering: Golden Paths, Internal Developer Platforms, and Policy as Code","section":"Advanced Architecture","description":"Build an Azure internal developer platform with product thinking, self-service golden paths, templates, subscription/environment vending, identity, policy, observability, scorecards, and safe escape hatches.","url":"https://muhammadusmanakbar.com/azure-book/platform-engineering-golden-paths","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/platform-engineering-golden-paths","updatedAt":"2026-07-31"},{"position":49,"slug":"beginner-capstone-secure-web-app","title":"Beginner Capstone: Deploy a Secure Azure Web Application","section":"Capstones and Reference","description":"Combine resource groups, budgets, App Service, managed identity, Key Vault, storage, monitoring, CI/CD, and cleanup into a complete beginner Azure application deployment.","url":"https://muhammadusmanakbar.com/azure-book/beginner-capstone-secure-web-app","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/beginner-capstone-secure-web-app","updatedAt":"2026-07-31"},{"position":50,"slug":"ai-capstone-governed-rag","title":"AI Capstone: Deploy a Governed RAG Assistant on Azure","section":"Capstones and Reference","description":"Deliver a secure Microsoft Foundry and Azure AI Search RAG assistant with tenant-aware retrieval, citations, managed identity, evaluation, prompt-injection tests, observability, cost controls, and a kill switch.","url":"https://muhammadusmanakbar.com/azure-book/ai-capstone-governed-rag","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/ai-capstone-governed-rag","updatedAt":"2026-07-31"},{"position":51,"slug":"enterprise-capstone-regulated-landing-zone","title":"Enterprise Capstone: Design a Regulated Azure Landing Zone and AI Workload","section":"Capstones and Reference","description":"Produce an architecture and implementation plan for a regulated enterprise Azure landing zone hosting a private, governed AI workload with policy, hybrid connectivity, security, recovery, FinOps, and evidence.","url":"https://muhammadusmanakbar.com/azure-book/enterprise-capstone-regulated-landing-zone","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/enterprise-capstone-regulated-landing-zone","updatedAt":"2026-07-31"},{"position":52,"slug":"azure-service-map-commands-certifications-glossary","title":"Azure Service Decision Map, Command Reference, Certification Path, Glossary, and Next Steps","section":"Capstones and Reference","description":"A practical reference for choosing across Azure service families, finding portal and command options, learning current certifications, decoding cloud terms, and keeping Azure knowledge current.","url":"https://muhammadusmanakbar.com/azure-book/azure-service-map-commands-certifications-glossary","contentApi":"https://muhammadusmanakbar.com/api/azure-book-content/azure-service-map-commands-certifications-glossary","updatedAt":"2026-07-31"}]}