Use Microsoft Azure monitoring, security, and update services anywhere

Published Oct 20 2021 07:15 AM 2,429 Views
Microsoft

I had the chance to talk with Ryan Willis (Senior Program Manager at Microsoft) on how onboarding resources through Azure Arc makes them immediately eligible to enroll in additional Azure management services. Learn how to implement Azure monitoring, security, and update services across hybrid and multicloud environments.

 

 

 

What is Azure Arc-enabled servers?

Azure Arc-enabled servers enables you to manage your Windows and Linux physical servers and virtual machines hosted outside of Azure, on your corporate network, or other cloud provider. This management experience is designed to be consistent with how you manage native Azure virtual machines. When a hybrid machine is connected to Azure, it becomes a connected machine and is treated as a resource in Azure. Each connected machine has a Resource ID enabling the machine to be included in a resource group. Now you can benefit from standard Azure constructs, such as Azure Policy and applying tags. Service providers managing a customer's on-premises infrastructure can manage their hybrid machines, just like they do today with native Azure resources, across multiple customer environments using Azure Lighthouse.

 

You can learn more on Microsoft Docs.

 

What is Azure Arc-enabled Kubernetes?

With Azure Arc-enabled Kubernetes, you can attach and configure Kubernetes clusters located either inside or outside Azure. When you connect a Kubernetes cluster to Azure Arc, it will:

  • Appear in the Azure portal with an Azure Resource Manager ID and a managed identity.
  • Be placed in an Azure subscription and resource group.
  • Receive tags just like any other Azure resource.

Azure Arc-enabled Kubernetes supports the following scenarios:

  • Connect Kubernetes running outside of Azure for inventory, grouping, and tagging.

  • Deploy applications and apply configuration using GitOps-based configuration management.

  • View and monitor your clusters using Azure Monitor for containers.

  • Enforce threat protection using Azure Defender for Kubernetes.

  • Apply policy definitions using Azure Policy for Kubernetes.

  • Create custom locations as target locations for deploying Azure Arc-enabled Data Services, App Services on Azure Arc (including web, function, and logic apps) and Event Grid on Kubernetes.

You can learn more on Microsoft Docs.

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2865395%22%20slang%3D%22en-US%22%3EUse%20Microsoft%20Azure%20monitoring%2C%20security%2C%20and%20update%20services%20anywhere%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2865395%22%20slang%3D%22en-US%22%3E%3CP%3EI%20had%20the%20chance%20to%20talk%20with%20Ryan%20Willis%20(Senior%20Program%20Manager%20at%20Microsoft)%20on%26nbsp%3Bhow%20onboarding%20resources%20through%20Azure%20Arc%20makes%20them%20immediately%20eligible%20to%20enroll%20in%20additional%20Azure%20management%20services.%20Learn%20how%20to%20implement%20Azure%20monitoring%2C%20security%2C%20and%20update%20services%20across%20hybrid%20and%20multicloud%20environments.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3C%2FP%3E%3CDIV%20class%3D%22video-embed-center%20video-embed%22%3E%3CIFRAME%20class%3D%22embedly-embed%22%20src%3D%22https%3A%2F%2Fcdn.embedly.com%2Fwidgets%2Fmedia.html%3Fsrc%3Dhttps%253A%252F%252Fwww.youtube.com%252Fembed%252FmJnmXBrU1ao%253Ffeature%253Doembed%26amp%3Bdisplay_name%3DYouTube%26amp%3Burl%3Dhttps%253A%252F%252Fwww.youtube.com%252Fwatch%253Fv%253DmJnmXBrU1ao%26amp%3Bimage%3Dhttps%253A%252F%252Fi.ytimg.com%252Fvi%252FmJnmXBrU1ao%252Fhqdefault.jpg%26amp%3Bkey%3Dfad07bfa4bd747d3bdea27e17b533c0e%26amp%3Btype%3Dtext%252Fhtml%26amp%3Bschema%3Dyoutube%22%20width%3D%22600%22%20height%3D%22337%22%20scrolling%3D%22no%22%20title%3D%22YouTube%20embed%22%20frameborder%3D%220%22%20allow%3D%22autoplay%3B%20fullscreen%22%20allowfullscreen%3D%22true%22%3E%3C%2FIFRAME%3E%3C%2FDIV%3E%3CP%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22what-is-azure-arc-enabled-servers%22%20id%3D%22toc-hId--322865398%22%20id%3D%22toc-hId--322864687%22%3EWhat%20is%20Azure%20Arc-enabled%20servers%3F%3C%2FH2%3E%0A%3CP%3E%3CSPAN%3EAzure%20Arc-enabled%20servers%20enables%20you%20to%20manage%20your%20Windows%20and%20Linux%20physical%20servers%20and%20virtual%20machines%20hosted%26nbsp%3B%3C%2FSPAN%3E%3CEM%3Eoutside%3C%2FEM%3E%3CSPAN%3E%26nbsp%3Bof%20Azure%2C%20on%20your%20corporate%20network%2C%20or%20other%20cloud%20provider.%20This%20management%20experience%20is%20designed%20to%20be%20consistent%20with%20how%20you%20manage%20native%20Azure%20virtual%20machines.%20When%20a%20hybrid%20machine%20is%20connected%20to%20Azure%2C%20it%20becomes%20a%20connected%20machine%20and%20is%20treated%20as%20a%20resource%20in%20Azure.%20Each%20connected%20machine%20has%20a%20Resource%20ID%20enabling%20the%20machine%20to%20be%20included%20in%20a%20resource%20group.%20Now%20you%20can%20benefit%20from%20standard%20Azure%20constructs%2C%20such%20as%20Azure%20Policy%20and%20applying%20tags.%20Service%20providers%20managing%20a%20customer's%20on-premises%20infrastructure%20can%20manage%20their%20hybrid%20machines%2C%20just%20like%20they%20do%20today%20with%20native%20Azure%20resources%2C%20across%20multiple%20customer%20environments%20using%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Flighthouse%2Fhow-to%2Fmanage-hybrid-infrastructure-arc%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20data-linktype%3D%22relative-path%22%3EAzure%20Lighthouse%3C%2FA%3E%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20learn%20more%20on%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fservers%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Docs%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22what-is-azure-arc-enabled-kubernetes%22%20id%3D%22toc-hId--2130319861%22%20id%3D%22toc-hId--2130319150%22%3EWhat%20is%20Azure%20Arc-enabled%20Kubernetes%3F%3C%2FH2%3E%0A%3CP%3EWith%20Azure%20Arc-enabled%20Kubernetes%2C%20you%20can%20attach%20and%20configure%20Kubernetes%20clusters%20located%20either%20inside%20or%20outside%20Azure.%20When%20you%20connect%20a%20Kubernetes%20cluster%20to%20Azure%20Arc%2C%20it%20will%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EAppear%20in%20the%20Azure%20portal%20with%20an%20Azure%20Resource%20Manager%20ID%20and%20a%20managed%20identity.%3C%2FLI%3E%0A%3CLI%3EBe%20placed%20in%20an%20Azure%20subscription%20and%20resource%20group.%3C%2FLI%3E%0A%3CLI%3EReceive%20tags%20just%20like%20any%20other%20Azure%20resource.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EAzure%20Arc-enabled%20Kubernetes%20supports%20the%20following%20scenarios%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CP%3EConnect%20Kubernetes%20running%20outside%20of%20Azure%20for%20inventory%2C%20grouping%2C%20and%20tagging.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EDeploy%20applications%20and%20apply%20configuration%20using%20GitOps-based%20configuration%20management.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EView%20and%20monitor%20your%20clusters%20using%20Azure%20Monitor%20for%20containers.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EEnforce%20threat%20protection%20using%20Azure%20Defender%20for%20Kubernetes.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EApply%20policy%20definitions%20using%20Azure%20Policy%20for%20Kubernetes.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3ECreate%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fkubernetes%2Fcustom-locations%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20data-linktype%3D%22relative-path%22%3Ecustom%20locations%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eas%20target%20locations%20for%20deploying%20Azure%20Arc-enabled%20Data%20Services%2C%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fapp-service%2Foverview-arc-integration%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_self%22%20data-linktype%3D%22relative-path%22%20rel%3D%22noopener%20noreferrer%22%3EApp%20Services%20on%20Azure%20Arc%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E(including%20web%2C%20function%2C%20and%20logic%20apps)%20and%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fevent-grid%2Fkubernetes%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_self%22%20data-linktype%3D%22relative-path%22%20rel%3D%22noopener%20noreferrer%22%3EEvent%20Grid%20on%20Kubernetes%3C%2FA%3E.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EYou%20can%20learn%20more%20on%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fkubernetes%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Docs%3C%2FA%3E.%3C%2FP%3E%0A%3CH2%20class%3D%22position-fixed%20display-flex%20flex-direction-column%22%20role%3D%22navigation%22%20aria-label%3D%22Primary%22%20data-bi-name%3D%22left%20toc%22%20id%3D%22toc-hId-357192972%22%20id%3D%22toc-hId-357193683%22%3ELearn%20more%3A%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CNAV%20class%3D%22position-fixed%20display-flex%20flex-direction-column%22%20role%3D%22navigation%22%20aria-label%3D%22Primary%22%20data-bi-name%3D%22left%20toc%22%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Arc%20overview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EAzure%20Cloud%20Adoption%20Framework%20for%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fcloud-adoption-framework%2Fscenarios%2Fhybrid%2Fscenario-overview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHybrid%20and%20Multicloud%20Scenarios%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ELearn%20more%20about%20Arc%20enabled%20servers%2C%20see%20the%20following%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fservers%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eoverview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ELearn%20more%20about%20Arc%20enabled%20Kubernetes%2C%20see%20the%20following%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fkubernetes%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eoverview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ELearn%20more%20about%20Arc%20enabled%20data%20services%2C%20see%20the%20following%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fservices%2Fazure-arc%2Fhybrid-data-services%2F%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eoverview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EExperience%20Arc%20enabled%20services%20from%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fazurearcjumpstart.io%2Fazure_arc_jumpstart%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EJumpstart%20proof%20of%20concept%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-cloud-solutions-architects%2Fba-p%2F2521928%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20Cloud%20Solutions%20Architects%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-it-pros%2Fba-p%2F2347921%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20IT%20Pros%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-security-engineers%2Fba-p%2F2367830%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20Security%20Engineers%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-developers%2Fba-p%2F2561513%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20Developers%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FNAV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2865395%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Use%20Microsoft%20Azure%20monitoring%20security%20and%20update%20services%20anywhere.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F318729iB1670BDA33D752A4%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Use%20Microsoft%20Azure%20monitoring%20security%20and%20update%20services%20anywhere.jpg%22%20alt%3D%22Use%20Microsoft%20Azure%20monitoring%20security%20and%20update%20services%20anywhere%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EUse%20Microsoft%20Azure%20monitoring%20security%20and%20update%20services%20anywhere%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnboarding%20resources%20through%20Azure%20Arc%20makes%20them%20immediately%20eligible%20to%20enroll%20in%20additional%20Azure%20management%20services.%20Learn%20how%20to%20implement%20Azure%20monitoring%2C%20security%2C%20and%20update%20services%20across%20hybrid%20and%20multicloud%20environments.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2865395%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EThomas%20Maurer%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Oct 20 2021 07:16 AM
Updated by: