# LLM Book Index: AI-Native Cloud on Microsoft Azure — From Zero to Production author: Muhammad Usman Akbar site: https://muhammadusmanakbar.com/azure-book navigation_api: https://muhammadusmanakbar.com/api/azure-book-nav flat_chapter_list: https://muhammadusmanakbar.com/api/azure-book-nav?format=flat chapter_content_api: https://muhammadusmanakbar.com/api/azure-book-content/{slug} published: 2026-07-31 chapters: 52 ## About A plain-English Microsoft Azure tutorial from account signup and billing safety through production applications, Microsoft Foundry and Azure OpenAI, infrastructure as code, security, operations, landing zones, hybrid cloud, and advanced global architecture. ## Full book structure ### Start Here - About This Book: Your Azure Journey from Zero to Production url: https://muhammadusmanakbar.com/azure-book/about-this-book content: https://muhammadusmanakbar.com/api/azure-book-content/about-this-book description: How to use this plain-English Microsoft Azure book, its lab safety rules, learning path, and portal-to-automation method. - Cloud Computing and Microsoft Azure from First Principles url: https://muhammadusmanakbar.com/azure-book/cloud-and-azure-first-principles content: https://muhammadusmanakbar.com/api/azure-book-content/cloud-and-azure-first-principles description: Understand cloud computing, Azure geography, responsibility models, service types, and the core vocabulary needed before your first deployment. - Create Your Microsoft Account and Azure Subscription Safely url: https://muhammadusmanakbar.com/azure-book/create-azure-account content: https://muhammadusmanakbar.com/api/azure-book-content/create-azure-account description: A screenshot-led Azure signup guide covering Microsoft accounts, free and pay-as-you-go choices, verification, subscriptions, and first security checks. - Tour the Azure Portal, Cloud Shell, Subscriptions, Tenants, and Regions url: https://muhammadusmanakbar.com/azure-book/portal-cloud-shell-subscriptions-tenants-regions content: https://muhammadusmanakbar.com/api/azure-book-content/portal-cloud-shell-subscriptions-tenants-regions description: Learn to navigate the Azure portal, open Cloud Shell, switch directories and subscriptions, choose regions, inspect Activity Log, and use safe search-first habits. - Install Azure CLI, Azure PowerShell, VS Code, Git, Bicep, and Terraform url: https://muhammadusmanakbar.com/azure-book/install-tools content: https://muhammadusmanakbar.com/api/azure-book-content/install-tools description: Prepare a safe local Azure workstation, sign in without storing credentials, select context, and verify CLI, PowerShell, Bicep, Terraform, Git, and VS Code. - Prevent Surprise Azure Bills with Budgets, Alerts, Tags, and Cleanup url: https://muhammadusmanakbar.com/azure-book/cost-safety content: https://muhammadusmanakbar.com/api/azure-book-content/cost-safety description: Create Azure budgets and alerts, understand their limits, tag spending, inspect costs, find hidden charges, and clean up labs using portal, CLI, PowerShell, and Bicep. ### Azure Foundations - Azure Resource Manager: Resource Groups, Providers, Tags, Locks, and IDs url: https://muhammadusmanakbar.com/azure-book/resource-manager-governance-basics content: https://muhammadusmanakbar.com/api/azure-book-content/resource-manager-governance-basics description: Master Azure's resource hierarchy and create a governed resource group with portal, CLI, PowerShell, Bicep, and Terraform. - Microsoft Entra ID, Azure RBAC, Service Principals, and Managed Identities url: https://muhammadusmanakbar.com/azure-book/entra-id-rbac-managed-identities content: https://muhammadusmanakbar.com/api/azure-book-content/entra-id-rbac-managed-identities description: Learn Azure identity from users and groups to least-privilege RBAC, app registrations, service principals, workload federation, and managed identities. - Azure Networking: VNets, Subnets, NSGs, Routes, DNS, NAT, Peering, and Private Endpoints url: https://muhammadusmanakbar.com/azure-book/virtual-networks-private-connectivity content: https://muhammadusmanakbar.com/api/azure-book-content/virtual-networks-private-connectivity description: Build a secure Azure network in portal, CLI, PowerShell, Bicep, and Terraform while learning address planning, routing, name resolution, egress, and private connectivity. - Azure Storage: Blobs, Files, Queues, Tables, Redundancy, Security, and Lifecycle url: https://muhammadusmanakbar.com/azure-book/storage-accounts-data-protection content: https://muhammadusmanakbar.com/api/azure-book-content/storage-accounts-data-protection description: Create and secure an Azure storage account, choose services and redundancy, upload blobs, automate lifecycle, and compare portal, CLI, PowerShell, Bicep, and Terraform. - Azure Key Vault: Secrets, Keys, Certificates, Rotation, and Private Access url: https://muhammadusmanakbar.com/azure-book/key-vault-secrets-keys-certificates content: https://muhammadusmanakbar.com/api/azure-book-content/key-vault-secrets-keys-certificates description: Use Azure Key Vault safely with RBAC, managed identity, soft delete, purge protection, private endpoints, CLI, PowerShell, Bicep, Terraform, and application code. ### Compute and Application Hosting - Azure Virtual Machines, Disks, Images, Scale Sets, Bastion, and Updates url: https://muhammadusmanakbar.com/azure-book/virtual-machines-scale-sets-bastion content: https://muhammadusmanakbar.com/api/azure-book-content/virtual-machines-scale-sets-bastion description: Deploy and operate secure Azure VMs with portal, CLI, PowerShell, Bicep, and Terraform; then understand disks, images, scale sets, Bastion, backup, and patching. - Azure App Service: Web Apps, Configuration, Scaling, and Deployment Slots url: https://muhammadusmanakbar.com/azure-book/app-service-deployment-slots content: https://muhammadusmanakbar.com/api/azure-book-content/app-service-deployment-slots description: Host a web application on Azure App Service using portal, CLI, PowerShell, Bicep, and Terraform with managed identity, private networking, slots, health checks, and rollback. - Azure Functions: Event-Driven Serverless Applications url: https://muhammadusmanakbar.com/azure-book/functions-event-driven-serverless content: https://muhammadusmanakbar.com/api/azure-book-content/functions-event-driven-serverless description: Build Azure Functions with triggers, bindings, managed identity, hosting choices, durable workflows, observability, portal, CLI, IaC, and safe production patterns. - Azure Container Registry, Container Apps, and Container Jobs url: https://muhammadusmanakbar.com/azure-book/container-registry-container-apps-jobs content: https://muhammadusmanakbar.com/api/azure-book-content/container-registry-container-apps-jobs description: Build, store, secure, deploy, scale, and operate containers with Azure Container Registry and Azure Container Apps using portal, CLI, managed identity, Bicep, and Terraform. - Azure Kubernetes Service from First Cluster to Production Baseline url: https://muhammadusmanakbar.com/azure-book/aks-zero-to-production content: https://muhammadusmanakbar.com/api/azure-book-content/aks-zero-to-production description: Learn when to use AKS, create a managed cluster, deploy a workload, and design identity, networking, ingress, autoscaling, upgrades, policy, GitOps, monitoring, and cost controls. - API Management, Front Door, Application Gateway, Load Balancer, and Traffic Manager url: https://muhammadusmanakbar.com/azure-book/api-management-front-door-gateways-load-balancing content: https://muhammadusmanakbar.com/api/azure-book-content/api-management-front-door-gateways-load-balancing description: Choose and combine Azure edge, API, layer-7, layer-4, and DNS traffic services without confusing their roles; then design secure routing, WAF, health, and failover. ### Data and Integration - Azure SQL, PostgreSQL, and MySQL: Choosing and Operating Relational Databases url: https://muhammadusmanakbar.com/azure-book/azure-sql-postgresql-mysql content: https://muhammadusmanakbar.com/api/azure-book-content/azure-sql-postgresql-mysql description: Choose Azure relational data services, deploy a secure database, configure identity and private access, migrate schema, pool connections, back up, restore, scale, and observe it. - Azure Cosmos DB: Partitioning, Consistency, Indexing, Throughput, and Global Distribution url: https://muhammadusmanakbar.com/azure-book/cosmos-db-partitioning-consistency content: https://muhammadusmanakbar.com/api/azure-book-content/cosmos-db-partitioning-consistency description: Design Cosmos DB containers from access patterns, select partition keys and consistency, control RU cost, use global distribution, change feed, private networking, and safe IaC. - Azure Messaging: Service Bus, Event Grid, Event Hubs, and Reliable Patterns url: https://muhammadusmanakbar.com/azure-book/service-bus-event-grid-event-hubs content: https://muhammadusmanakbar.com/api/azure-book-content/service-bus-event-grid-event-hubs description: Choose Azure queues, topics, events, and streams; implement idempotency, ordering, retries, dead-letter handling, schema, security, observability, and infrastructure as code. - Data Factory, Microsoft Fabric, Azure Databricks, and Data Lake Architecture url: https://muhammadusmanakbar.com/azure-book/data-factory-fabric-databricks-data-lake content: https://muhammadusmanakbar.com/api/azure-book-content/data-factory-fabric-databricks-data-lake description: Design Azure data ingestion, lakehouse, analytics, orchestration, governance, and operations by choosing among Data Factory, Microsoft Fabric, Databricks, and Data Lake Storage. - Azure Managed Redis, Caching, Sessions, and Distributed State url: https://muhammadusmanakbar.com/azure-book/azure-managed-redis-caching-state content: https://muhammadusmanakbar.com/api/azure-book-content/azure-managed-redis-caching-state description: Use Azure Managed Redis safely for cache, sessions, rate limits, and coordination; learn invalidation, eviction, persistence, private networking, migration, observability, and alternatives. ### AI-Native Azure - Microsoft Foundry and Azure OpenAI: Projects, Models, Deployments, Quotas, and Safety url: https://muhammadusmanakbar.com/azure-book/microsoft-foundry-azure-openai content: https://muhammadusmanakbar.com/api/azure-book-content/microsoft-foundry-azure-openai description: Start with Microsoft Foundry, formerly Azure AI Foundry: create a project, select and deploy a model, use identity-based access, understand quotas, networking, content safety, and cost. - Prompt Engineering, Structured Outputs, Model Routing, and Token Economics url: https://muhammadusmanakbar.com/azure-book/prompts-structured-output-model-routing content: https://muhammadusmanakbar.com/api/azure-book-content/prompts-structured-output-model-routing description: Engineer reliable model interactions with clear instructions, context boundaries, schemas, validation, retries, routing, caching, testing, versioning, and cost controls. - Retrieval-Augmented Generation with Azure AI Search url: https://muhammadusmanakbar.com/azure-book/rag-azure-ai-search content: https://muhammadusmanakbar.com/api/azure-book-content/rag-azure-ai-search description: Build secure RAG on Azure AI Search: ingestion, chunking, embeddings, hybrid retrieval, semantic ranking, filters, citations, authorization trimming, evaluation, operations, and cost. - Azure AI Services: Document Intelligence, Speech, Vision, Language, and Content Processing url: https://muhammadusmanakbar.com/azure-book/document-speech-vision-language-content-processing content: https://muhammadusmanakbar.com/api/azure-book-content/document-speech-vision-language-content-processing description: Choose and compose Azure AI services for documents, speech, images, video, and language with identity, batch/real-time decisions, confidence thresholds, human review, privacy, and evaluation. - Agentic Applications: Tools, Memory, Workflows, and Human Approval url: https://muhammadusmanakbar.com/azure-book/agentic-applications-tools-memory-human-approval content: https://muhammadusmanakbar.com/api/azure-book-content/agentic-applications-tools-memory-human-approval description: Design secure AI agents in Microsoft Foundry with bounded tools, explicit state, memory, identity, approval gates, budgets, durable workflows, MCP controls, and failure recovery. - AI Evaluation, Tracing, Responsible AI, Safety, and Red Teaming url: https://muhammadusmanakbar.com/azure-book/evaluation-tracing-safety-red-teaming content: https://muhammadusmanakbar.com/api/azure-book-content/evaluation-tracing-safety-red-teaming description: Create a production AI quality system with datasets, evaluators, human calibration, tracing, online monitoring, safety tests, red teaming, release gates, and incident response. - Production AI Lab: Build the Northstar Governed RAG Assistant url: https://muhammadusmanakbar.com/azure-book/production-ai-reference-application content: https://muhammadusmanakbar.com/api/azure-book-content/production-ai-reference-application description: Assemble a production-shaped Azure RAG assistant with App Service or Container Apps, Microsoft Foundry, Azure AI Search, Storage, Key Vault, managed identity, private networking, tracing, evaluation, CI/CD, and cleanup. ### Infrastructure and Delivery - Azure Bicep and ARM from Zero: Repeatable Infrastructure url: https://muhammadusmanakbar.com/azure-book/bicep-arm-from-zero content: https://muhammadusmanakbar.com/api/azure-book-content/bicep-arm-from-zero description: Learn Azure Resource Manager templates through Bicep: scopes, parameters, resources, modules, outputs, loops, conditions, dependencies, what-if, deployment stacks, testing, and safe delivery. - Terraform on Azure: Providers, Modules, Remote State, Plans, Imports, and Drift url: https://muhammadusmanakbar.com/azure-book/terraform-azure-remote-state content: https://muhammadusmanakbar.com/api/azure-book-content/terraform-azure-remote-state description: Use Terraform safely on Azure with azurerm and AzAPI providers, remote state, identity, modules, plans, locking, imports, moved blocks, testing, drift management, and CI/CD. - GitHub Actions and Azure DevOps CI/CD for Azure url: https://muhammadusmanakbar.com/azure-book/github-actions-azure-devops-cicd content: https://muhammadusmanakbar.com/api/azure-book-content/github-actions-azure-devops-cicd description: Build secure Azure delivery pipelines with workload identity federation, environments, artifacts, Bicep or Terraform plans, tests, approvals, deployment slots, progressive release, and auditability. - GitOps, Progressive Delivery, Feature Flags, and Rollback url: https://muhammadusmanakbar.com/azure-book/gitops-progressive-delivery-feature-flags content: https://muhammadusmanakbar.com/api/azure-book-content/gitops-progressive-delivery-feature-flags description: Operate Kubernetes and application configuration from Git using Flux on Azure, progressive traffic, feature flags, drift reconciliation, policy, secrets, rollback, and incident-safe promotion. - Azure Developer CLI and Repeatable Developer Environments url: https://muhammadusmanakbar.com/azure-book/azure-developer-cli-repeatable-environments content: https://muhammadusmanakbar.com/api/azure-book-content/azure-developer-cli-repeatable-environments description: Use Azure Developer CLI templates to initialize, provision, deploy, monitor, and tear down full-stack Azure applications while understanding azure.yaml, environment state, hooks, IaC, CI, and template security. ### Security Governance and Operations - Azure Governance: Management Groups, Policy, Initiatives, and Landing Zones url: https://muhammadusmanakbar.com/azure-book/management-groups-policy-landing-zones content: https://muhammadusmanakbar.com/api/azure-book-content/management-groups-policy-landing-zones description: Organize enterprise Azure with management groups, subscriptions, policy definitions and initiatives, exemptions, remediation, platform landing zones, and policy as code. - Microsoft Defender for Cloud, Microsoft Sentinel, and Cloud Incident Response url: https://muhammadusmanakbar.com/azure-book/defender-for-cloud-sentinel-incident-response content: https://muhammadusmanakbar.com/api/azure-book-content/defender-for-cloud-sentinel-incident-response description: Build Azure cloud security posture, workload protection, centralized SIEM/SOAR, detections, playbooks, and a tested incident-response process using Defender for Cloud and Microsoft Sentinel. - Azure Monitor, Log Analytics, Application Insights, Alerts, Dashboards, and SLOs url: https://muhammadusmanakbar.com/azure-book/azure-monitor-observability-slos content: https://muhammadusmanakbar.com/api/azure-book-content/azure-monitor-observability-slos description: Build full-stack Azure observability with metrics, logs, traces, changes, KQL, diagnostic settings, OpenTelemetry, workbooks, alerts, action groups, SLOs, sampling, and cost governance. - Azure Backup, Site Recovery, Multi-Region Design, RTO, and RPO url: https://muhammadusmanakbar.com/azure-book/backup-site-recovery-multi-region content: https://muhammadusmanakbar.com/api/azure-book-content/backup-site-recovery-multi-region description: Design recovery from business impact backward: define RTO/RPO, protect Azure workloads, use Backup and Site Recovery, build regional failover, test restores, and operate disaster recovery. - Azure FinOps: Cost Allocation, Budgets, Reservations, Savings Plans, and Right-Sizing url: https://muhammadusmanakbar.com/azure-book/finops-reservations-savings-rightsizing content: https://muhammadusmanakbar.com/api/azure-book-content/finops-reservations-savings-rightsizing description: Operate Azure cost as an engineering metric using allocation, forecasting, unit economics, anomalies, right-sizing, scheduling, reservations, savings plans, Hybrid Benefit, and governance. - Azure Well-Architected Framework and Production Readiness Review url: https://muhammadusmanakbar.com/azure-book/well-architected-production-review content: https://muhammadusmanakbar.com/api/azure-book-content/well-architected-production-review description: Review an Azure workload across reliability, security, cost optimization, operational excellence, and performance efficiency, then turn findings into owned release gates. ### Enterprise and Hybrid - Enterprise Azure Networking: Hub-Spoke and Azure Virtual WAN url: https://muhammadusmanakbar.com/azure-book/hub-spoke-virtual-wan content: https://muhammadusmanakbar.com/api/azure-book-content/hub-spoke-virtual-wan description: Design enterprise connectivity with hub-spoke VNets or Azure Virtual WAN, centralized security, routing, DNS, platform subscriptions, peering, segmentation, and global operations. - ExpressRoute, VPN Gateway, Azure Arc, and Hybrid Cloud Management url: https://muhammadusmanakbar.com/azure-book/expressroute-vpn-arc-hybrid content: https://muhammadusmanakbar.com/api/azure-book-content/expressroute-vpn-arc-hybrid description: Connect datacenters, branches, and other clouds to Azure with ExpressRoute and VPN; manage servers and Kubernetes with Azure Arc; design routing, DNS, identity, security, monitoring, and failover. - Private DNS, Private Link, Azure Firewall, DDoS Protection, and Zero Trust Networking url: https://muhammadusmanakbar.com/azure-book/private-dns-private-link-firewall-ddos-zero-trust content: https://muhammadusmanakbar.com/api/azure-book-content/private-dns-private-link-firewall-ddos-zero-trust description: Build Azure private service access and zero-trust network controls with Private Link, DNS Private Resolver, Firewall, WAF, DDoS Protection, segmentation, logging, and explicit trust decisions. - Enterprise Lab: Implement an Azure Landing Zone url: https://muhammadusmanakbar.com/azure-book/enterprise-landing-zone-lab content: https://muhammadusmanakbar.com/api/azure-book-content/enterprise-landing-zone-lab description: Plan and implement a production-shaped Azure landing zone with hierarchy, platform subscriptions, policy, identity, hub connectivity, monitoring, security, subscription vending, and a workload onboarding test. ### Advanced Architecture - Multi-Tenant SaaS on Azure: Isolation, Identity, Data, Scale, and Deployment Stamps url: https://muhammadusmanakbar.com/azure-book/multi-tenant-saas-isolation content: https://muhammadusmanakbar.com/api/azure-book-content/multi-tenant-saas-isolation description: Design Azure multi-tenant SaaS using tenant catalogs, isolation models, Entra identity, data partitioning, noisy-neighbor controls, deployment stamps, operations, metering, and safe AI. - Event-Driven Microservices and Distributed-System Reliability on Azure url: https://muhammadusmanakbar.com/azure-book/event-driven-microservices-reliability content: https://muhammadusmanakbar.com/api/azure-book-content/event-driven-microservices-reliability description: Design Azure microservices and event-driven systems with clear boundaries, APIs, sagas, outbox, idempotency, retries, circuit breakers, queues, telemetry, and failure testing. - Global Azure Architecture: Active-Active, Data Consistency, Traffic, and Disaster Tolerance url: https://muhammadusmanakbar.com/azure-book/global-active-active-disaster-tolerant content: https://muhammadusmanakbar.com/api/azure-book-content/global-active-active-disaster-tolerant description: Design a global Azure system across regions with Front Door, regional stamps, data replication, model/search capacity, failover, consistency, observability, chaos testing, and cost tradeoffs. - Azure Platform Engineering: Golden Paths, Internal Developer Platforms, and Policy as Code url: https://muhammadusmanakbar.com/azure-book/platform-engineering-golden-paths content: https://muhammadusmanakbar.com/api/azure-book-content/platform-engineering-golden-paths description: Build an Azure internal developer platform with product thinking, self-service golden paths, templates, subscription/environment vending, identity, policy, observability, scorecards, and safe escape hatches. ### Capstones and Reference - Beginner Capstone: Deploy a Secure Azure Web Application url: https://muhammadusmanakbar.com/azure-book/beginner-capstone-secure-web-app content: https://muhammadusmanakbar.com/api/azure-book-content/beginner-capstone-secure-web-app description: Combine resource groups, budgets, App Service, managed identity, Key Vault, storage, monitoring, CI/CD, and cleanup into a complete beginner Azure application deployment. - AI Capstone: Deploy a Governed RAG Assistant on Azure url: https://muhammadusmanakbar.com/azure-book/ai-capstone-governed-rag content: https://muhammadusmanakbar.com/api/azure-book-content/ai-capstone-governed-rag description: Deliver a secure Microsoft Foundry and Azure AI Search RAG assistant with tenant-aware retrieval, citations, managed identity, evaluation, prompt-injection tests, observability, cost controls, and a kill switch. - Enterprise Capstone: Design a Regulated Azure Landing Zone and AI Workload url: https://muhammadusmanakbar.com/azure-book/enterprise-capstone-regulated-landing-zone content: https://muhammadusmanakbar.com/api/azure-book-content/enterprise-capstone-regulated-landing-zone description: Produce an architecture and implementation plan for a regulated enterprise Azure landing zone hosting a private, governed AI workload with policy, hybrid connectivity, security, recovery, FinOps, and evidence. - Azure Service Decision Map, Command Reference, Certification Path, Glossary, and Next Steps url: https://muhammadusmanakbar.com/azure-book/azure-service-map-commands-certifications-glossary content: https://muhammadusmanakbar.com/api/azure-book-content/azure-service-map-commands-certifications-glossary description: A practical reference for choosing across Azure service families, finding portal and command options, learning current certifications, decoding cloud terms, and keeping Azure knowledge current. ## Recommended query routes - Azure signup and first steps -> https://muhammadusmanakbar.com/azure-book/create-azure-account - Azure portal and Cloud Shell -> https://muhammadusmanakbar.com/azure-book/portal-cloud-shell-subscriptions-tenants-regions - Avoid surprise Azure costs -> https://muhammadusmanakbar.com/azure-book/cost-safety - Microsoft Foundry and Azure OpenAI -> https://muhammadusmanakbar.com/azure-book/microsoft-foundry-azure-openai - RAG with Azure AI Search -> https://muhammadusmanakbar.com/azure-book/rag-azure-ai-search - Azure landing zones -> https://muhammadusmanakbar.com/azure-book/management-groups-policy-landing-zones - Complete Azure service decision map -> https://muhammadusmanakbar.com/azure-book/azure-service-map-commands-certifications-glossary