cloud-azure-vm

Overview

This skill provides comprehensive guidance on Azure Virtual Machines, covering VM creation, configuration, networking, and ongoing management. It helps you plan, deploy, and operate Azure compute resources efficiently, whether you’re starting new VMs or managing existing ones.

How This Skill Works

It centers on core Azure VM concepts—images, sizes, disks, NICs, VNets, and NSGs—and translates them into practical steps for deployment, configuration, and day-to-day management. You’ll get guidance for Windows and Linux VMs, including lifecycle actions like start/stop, resizing, and applying extensions or updates.

When to Use It

• You need to create a new Azure VM (Windows or Linux) with specific region, image, and size.
• You need to configure compute settings, attach data disks, and select OS images for an Azure VM.
• You need to design networking for a VM, including VNet, NICs, IPs, NSGs, and DNS.
• You need to manage VM lifecycle—start, stop, restart, resize, or deallocate to control costs.
• You want best practices for deploying and securing Azure VMs (availability, backups, and governance).

Quick Start

1. Step 1: Define requirements (OS, region, image, size) and plan networking.
2. Step 2: Create the VM via Azure Portal, CLI (az vm create), or ARM/Bicep template; configure disks and network.
3. Step 3: Post-deploy setup (open ports, install software, enable monitoring, apply extensions).

Best Practices

• Use Azure Managed Disks and enable regular backups; prefer premium disks for I/O-intensive apps.
• Choose the right VM size and consider Availability Sets or Availability Zones for resilience.
• Isolate workloads with VNets, NSGs, and private IPs; avoid exposing VMs directly to the Internet when possible.
• Automate deployments with ARM templates or Bicep and apply tags for governance and cost tracking.
• Secure access with SSH key-based authentication (Linux) or certificate-based RDP/Just-in-Time access; disable password login.

Example Use Cases

• Create a Windows Server VM in a specific region with a public IP and server role, like Active Directory.
• Deploy a Linux VM, configure SSH access, install a web server, and host a sample app.
• Scale by resizing a VM or moving to an Availability Zone during peak traffic.
• Attach data disks, enable backups, and configure OS drive encryption where needed.
• Set up a VM in a VNet with private IPs and controlled inbound rules via NSG.

Frequently Asked Questions