Welcome!

Open Source Cloud Authors: Pat Romanski, Elizabeth White, Liz McMillan, Rostyslav Demush, Yeshim Deniz

Related Topics: @DevOpsSummit, Microsoft Cloud, Open Source Cloud, @CloudExpo

@DevOpsSummit: Article

Windows Azure Resource Manager (ARM) | @CloudExpo @Azure #Cloud #IoT

An overview ARM and the new features it provides

Over the past year, Microsoft has been introducing Azure Resource Manager (ARM) as the preferred way to provision and manage resources in its Azure cloud. ARM is the successor to the original Service Management model, also known as "Classic."[1] While Classic will continue to be supported for the foreseeable future, ARM is the preferred deployment model and all new Azure features are being released on ARM only. Here is an overview ARM and the new features it provides.

ARM introduces the concept of "Resource Groups" and "Templates." Resource Groups are a simple way to manage and group related resources. In addition to simplifying the management of related resources, they also simplify accounting, security and auditing of your Azure deployment. Resource Manager Templates give Azure administrators a very powerful tool that they can leverage to rapidly deploy complex environments consisting of interrelated resources rapidly and consistently. Although there is a learning curve to effectively leverage Resource Manager Templates, once mastered this will be the most effective means of deploying resources in Azure.

Resource Manager Templates
While Resource Manager Templates are very powerful, administrators can still provision new resources in Azure using tools that they are familiar with. In addition to the Azure Portal GUI, Microsoft has released Azure PowerShell 1.0.[2] PowerShell has been the most efficient tool for managing Azure Classic and will continue to work just as well in ARM. For those administrators managing Azure from Mac OS or Linux there is also Azure Command Line which allows Azure management from a set of open-source shell-based commands.[3]

While the new Azure Portal has a variety of improvements over the previous portal and PowerShell continues to be a powerful tool for provisioning and managing resources, the real power of ARM comes from Resource Manager Templates, a declarative way to define your deployments.[4]

Resource Manager Templates
Resource Manager Templates are written in JavaScript Object Notation (JSON) and are used to define your resources as well as to create dependencies between resources. Microsoft has published a number of Azure Quickstart Templates which can be used "as is" or as examples as you build your own templates.[5] Templates generally allow users to pass parameters so each deployment can be customized, to an extent, at deployment time.

Templates can also be linked together so that a single main template can call multiple linked templates. These linked templates can pass parameters back and forth from the master template to the linked templates. This allows you to write templates that perform specific functions and reuse them in other deployments, much as a programmer would define functions within an application for reuse.

While this new paradigm is powerful, it poses a challenge for some Windows administrators who are concerned about programming languages. Many administrators are just now becoming comfortable with PowerShell; others prefer to use the Windows GUI whenever possible. While JSON is a relatively simple language to read and write, many Windows administrators will avoid using Templates because of their lack of experience with JSON and with programming languages in general.

Windows administrators who find themselves suddenly charged with managing Windows Azure deployments can still use a combination of the Azure Portal and Azure PowerShell commands. However, you cannot just use the Azure Portal UI because some ARM features are currently only available via Azure PowerShell. Azure Administrators should buy Visual Studio and learn how to write Resource Manager Templates in JSON.

Visual Studio has added several Azure-specific SDKs to expand Visual Studio. There are tools within Visual Studio that help developers build new programs and mobile applications that are cloud integrated. Windows administrators can also leverage Visual Studio to define and launch VMs and supporting resources right from within Visual Studio.[6]

Resource Groups
Azure Classic had a concept of a "Cloud Service", which was their attempt to group related resources. The limited functionality of Cloud Service has been replaced in ARM by Resource Groups which are used to manage the entire lifecycle of an application, from creation to deletion.

Resource Groups
Resource Groups are a container for all related Azure resources, from VMs, networks, IP addresses, load balancers, databases, web apps and more.  When creating new resources, you can choose to add a resource to an existing Resource Group or to create a new Resource Group. There are no explicit rules governing what should be placed in the same Resource Group, but there are a few things to keep in mind when making that decision.

Resource Groups are a security boundary. You can grant permissions at the Resource Group layer to different users or groups. Keep in mind, they are not NTFS security within your Windows Domain, rather, they provide security in terms of who has access to manage and/or monitor your Azure resources. At last count there were 32 different pre-defined security roles ranging from basic roles like Owner, Contributor and Reader all the way down to specific roles like DNS Zone Contributor and Security Manager.

When defining Resource Groups consider grouping resources that have similar security needs in the same Resource Group. Although permissions can be granted at the Resource Group layer, if there are sensitive VMs within a Resource Group that need additional security these VMs can have explicit security which overrides the security of the Resource Group, so you don't have to worry if your security needs are a little "complicated".

In addition to security, resource utilization, alerting, monitoring and billing can be done at the Resource  Group level as shown in Figure 1.

Figure 1: Example of a Resource Group panel in the Azure Portal

The Resource Group panel displays a simple overview of all the resources in a Resource Group and allows you directly click on each resource to drill down to get a more detailed view of resource as well as allow you to make changes to those resources. This panel is customizable, allowing you to display additional detail such as estimated spend, disk, CPU and memory utilization as well.

If you have ever managed an Azure Classic deployment, or even fooled around with Azure Classic in your home lab you will appreciate this next feature. When it comes time to decommission your application, the old method was to delete you your resources, one resource at a time. And don't forget; before you delete that Storage Account be sure to delete all the VHD files, all the containers and all the blobs first!  It wasn't pretty.

Cleaning up a failed deployment or simply trying to reset your lab to a clean slate in Azure Classic could sometimes be a tedious process. Forgetting to delete just one Premium Storage Disk after a POC will come as quite a surprise at the end of the month when your receive your credit card statement full of unexpected Azure charges; don't ask me how I know.

ARM simplifies this whole process. When you are done with an application and want to decommission it completely, just click "Delete" and all the resources within the Resource Group will be deleted, no fuss no muss (See Figure 2). Now as you can imagine, this is a pretty destructive command, so they do ask you to confirm what you are about to do and ask you to type the name of the Resource Group once again before the job will run to ensure you really are deleting the Resource Group you intended.

Figure 2: Deleting Resource Groups

Summary
In addition to Resource Groups and Template deployments there are other new features of ARM, such as the ability to perform tasks in parallel rather than series. For example, in Classic to stop four VMs via the portal, you would have to stop the first VM, wait for a while, and then try to stop the second VM. If the first VM was not far enough along in the stopping process my attempt to stop the second VM would fail. Needless to say you only had to do this a few times before you decided to write a PowerShell script to stop all your VMs.

With ARM you can now perform this same task in parallel, you no longer have to wait for the first VM to stop before you can stop the second, third and fourth VM. The same holds true for other operations that were previously serialized, such as creating new VMs.

While ARM is the future of Azure some features took a long time to be added and some are not as well documented as they are in Azure Classic. However, the benefits described here should help you overcome any hesitation you may have about making ARM your preferred Azure deployment method.

Learn more about ARM in this recorded webinar.

References

  1. https://azure.microsoft.com/en-us/documentation/articles/resource-manager-deployment-model/
  2. https://azure.microsoft.com/en-us/blog/azps-1-0/
  3. https://azure.microsoft.com/en-us/documentation/articles/xplat-cli-install/
  4. https://azure.microsoft.com/en-us/documentation/articles/resource-group-authoring-templates/
  5. https://azure.microsoft.com/en-us/documentation/templates/
  6. https://www.visualstudio.com/en-us/features/azure-tools-vs.aspx

More Stories By David Bermingham

David Bermingham is recognized within the technology community as a high availability expert and has been honored by his peers by being elected to be a Microsoft MVP in Clustering since 2010. His work as director of Technical Evangelist at SIOS has him focused on evangelizing Microsoft high availability and disaster recovery solutions as well as providing hands on support, training and professional services for cluster implementations.

David holds numerous technical certifications and draws from over twenty years of experience in IT, including work in the finance, healthcare and education fields, to help organizations design solutions to meet their high availability and disaster recovery needs. He has recently begun speaking on deploying highly available SQL Servers in the Azure Cloud and deploying Azure Hybrid Cloud for disaster recovery.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
Amazon started as an online bookseller 20 years ago. Since then, it has evolved into a technology juggernaut that has disrupted multiple markets and industries and touches many aspects of our lives. It is a relentless technology and business model innovator driving disruption throughout numerous ecosystems. Amazon’s AWS revenues alone are approaching $16B a year making it one of the largest IT companies in the world. With dominant offerings in Cloud, IoT, eCommerce, Big Data, AI, Digital Assista...
In his session at Cloud Expo, Alan Winters, U.S. Head of Business Development at MobiDev, presented a success story of an entrepreneur who has both suffered through and benefited from offshore development across multiple businesses: The smart choice, or how to select the right offshore development partner Warning signs, or how to minimize chances of making the wrong choice Collaboration, or how to establish the most effective work processes Budget control, or how to maximize project result...
The Founder of NostaLab and a member of the Google Health Advisory Board, John is a unique combination of strategic thinker, marketer and entrepreneur. His career was built on the "science of advertising" combining strategy, creativity and marketing for industry-leading results. Combined with his ability to communicate complicated scientific concepts in a way that consumers and scientists alike can appreciate, John is a sought-after speaker for conferences on the forefront of healthcare science,...
In his keynote at 19th Cloud Expo, Sheng Liang, co-founder and CEO of Rancher Labs, discussed the technological advances and new business opportunities created by the rapid adoption of containers. With the success of Amazon Web Services (AWS) and various open source technologies used to build private clouds, cloud computing has become an essential component of IT strategy. However, users continue to face challenges in implementing clouds, as older technologies evolve and newer ones like Docker c...
When shopping for a new data processing platform for IoT solutions, many development teams want to be able to test-drive options before making a choice. Yet when evaluating an IoT solution, it’s simply not feasible to do so at scale with physical devices. Building a sensor simulator is the next best choice; however, generating a realistic simulation at very high TPS with ease of configurability is a formidable challenge. When dealing with multiple application or transport protocols, you would be...
Data is the fuel that drives the machine learning algorithmic engines and ultimately provides the business value. In his session at Cloud Expo, Ed Featherston, a director and senior enterprise architect at Collaborative Consulting, discussed the key considerations around quality, volume, timeliness, and pedigree that must be dealt with in order to properly fuel that engine.
Personalization has long been the holy grail of marketing. Simply stated, communicate the most relevant offer to the right person and you will increase sales. To achieve this, you must understand the individual. Consequently, digital marketers developed many ways to gather and leverage customer information to deliver targeted experiences. In his session at @ThingsExpo, Lou Casal, Founder and Principal Consultant at Practicala, discussed how the Internet of Things (IoT) has accelerated our abilit...
Detecting internal user threats in the Big Data eco-system is challenging and cumbersome. Many organizations monitor internal usage of the Big Data eco-system using a set of alerts. This is not a scalable process given the increase in the number of alerts with the accelerating growth in data volume and user base. Organizations are increasingly leveraging machine learning to monitor only those data elements that are sensitive and critical, autonomously establish monitoring policies, and to detect...
Dion Hinchcliffe is an internationally recognized digital expert, bestselling book author, frequent keynote speaker, analyst, futurist, and transformation expert based in Washington, DC. He is currently Chief Strategy Officer at the industry-leading digital strategy and online community solutions firm, 7Summits.
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessio...
In his session at @ThingsExpo, Arvind Radhakrishnen discussed how IoT offers new business models in banking and financial services organizations with the capability to revolutionize products, payments, channels, business processes and asset management built on strong architectural foundation. The following topics were covered: How IoT stands to impact various business parameters including customer experience, cost and risk management within BFS organizations.
Recently, REAN Cloud built a digital concierge for a North Carolina hospital that had observed that most patient call button questions were repetitive. In addition, the paper-based process used to measure patient health metrics was laborious, not in real-time and sometimes error-prone. In their session at 21st Cloud Expo, Sean Finnerty, Executive Director, Practice Lead, Health Care & Life Science at REAN Cloud, and Dr. S.P.T. Krishnan, Principal Architect at REAN Cloud, discussed how they built...
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settl...
IoT solutions exploit operational data generated by Internet-connected smart “things” for the purpose of gaining operational insight and producing “better outcomes” (for example, create new business models, eliminate unscheduled maintenance, etc.). The explosive proliferation of IoT solutions will result in an exponential growth in the volume of IoT data, precipitating significant Information Governance issues: who owns the IoT data, what are the rights/duties of IoT solutions adopters towards t...
With tough new regulations coming to Europe on data privacy in May 2018, Calligo will explain why in reality the effect is global and transforms how you consider critical data. EU GDPR fundamentally rewrites the rules for cloud, Big Data and IoT. In his session at 21st Cloud Expo, Adam Ryan, Vice President and General Manager EMEA at Calligo, examined the regulations and provided insight on how it affects technology, challenges the established rules and will usher in new levels of diligence arou...
Organizations planning enterprise data center consolidation and modernization projects are faced with a challenging, costly reality. Requirements to deploy modern, cloud-native applications simultaneously with traditional client/server applications are almost impossible to achieve with hardware-centric enterprise infrastructure. Compute and network infrastructure are fast moving down a software-defined path, but storage has been a laggard. Until now.
DXWorldEXPO LLC announced today that All in Mobile, a mobile app development company from Poland, will exhibit at the 22nd International CloudEXPO | DXWorldEXPO. All In Mobile is a mobile app development company from Poland. Since 2014, they maintain passion for developing mobile applications for enterprises and startups worldwide.
Digital Transformation is much more than a buzzword. The radical shift to digital mechanisms for almost every process is evident across all industries and verticals. This is often especially true in financial services, where the legacy environment is many times unable to keep up with the rapidly shifting demands of the consumer. The constant pressure to provide complete, omnichannel delivery of customer-facing solutions to meet both regulatory and customer demands is putting enormous pressure on...
The best way to leverage your CloudEXPO | DXWorldEXPO presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering CloudEXPO | DXWorldEXPO will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at CloudEXPO. Product announcements during our show provide your company with the most reach through our targeted audienc...