Welcome!

Microsoft Cloud Authors: Kevin Benedict, Pat Romanski, Liz McMillan, Lori MacVittie, Elizabeth White

Related Topics: @DevOpsSummit, Microsoft Cloud, Open Source Cloud, @CloudExpo

@DevOpsSummit: Article

Windows Azure Resource Manager (ARM) | @CloudExpo @Azure #Cloud #IoT

An overview ARM and the new features it provides

Over the past year, Microsoft has been introducing Azure Resource Manager (ARM) as the preferred way to provision and manage resources in its Azure cloud. ARM is the successor to the original Service Management model, also known as "Classic."[1] While Classic will continue to be supported for the foreseeable future, ARM is the preferred deployment model and all new Azure features are being released on ARM only. Here is an overview ARM and the new features it provides.

ARM introduces the concept of "Resource Groups" and "Templates." Resource Groups are a simple way to manage and group related resources. In addition to simplifying the management of related resources, they also simplify accounting, security and auditing of your Azure deployment. Resource Manager Templates give Azure administrators a very powerful tool that they can leverage to rapidly deploy complex environments consisting of interrelated resources rapidly and consistently. Although there is a learning curve to effectively leverage Resource Manager Templates, once mastered this will be the most effective means of deploying resources in Azure.

Resource Manager Templates
While Resource Manager Templates are very powerful, administrators can still provision new resources in Azure using tools that they are familiar with. In addition to the Azure Portal GUI, Microsoft has released Azure PowerShell 1.0.[2] PowerShell has been the most efficient tool for managing Azure Classic and will continue to work just as well in ARM. For those administrators managing Azure from Mac OS or Linux there is also Azure Command Line which allows Azure management from a set of open-source shell-based commands.[3]

While the new Azure Portal has a variety of improvements over the previous portal and PowerShell continues to be a powerful tool for provisioning and managing resources, the real power of ARM comes from Resource Manager Templates, a declarative way to define your deployments.[4]

Resource Manager Templates
Resource Manager Templates are written in JavaScript Object Notation (JSON) and are used to define your resources as well as to create dependencies between resources. Microsoft has published a number of Azure Quickstart Templates which can be used "as is" or as examples as you build your own templates.[5] Templates generally allow users to pass parameters so each deployment can be customized, to an extent, at deployment time.

Templates can also be linked together so that a single main template can call multiple linked templates. These linked templates can pass parameters back and forth from the master template to the linked templates. This allows you to write templates that perform specific functions and reuse them in other deployments, much as a programmer would define functions within an application for reuse.

While this new paradigm is powerful, it poses a challenge for some Windows administrators who are concerned about programming languages. Many administrators are just now becoming comfortable with PowerShell; others prefer to use the Windows GUI whenever possible. While JSON is a relatively simple language to read and write, many Windows administrators will avoid using Templates because of their lack of experience with JSON and with programming languages in general.

Windows administrators who find themselves suddenly charged with managing Windows Azure deployments can still use a combination of the Azure Portal and Azure PowerShell commands. However, you cannot just use the Azure Portal UI because some ARM features are currently only available via Azure PowerShell. Azure Administrators should buy Visual Studio and learn how to write Resource Manager Templates in JSON.

Visual Studio has added several Azure-specific SDKs to expand Visual Studio. There are tools within Visual Studio that help developers build new programs and mobile applications that are cloud integrated. Windows administrators can also leverage Visual Studio to define and launch VMs and supporting resources right from within Visual Studio.[6]

Resource Groups
Azure Classic had a concept of a "Cloud Service", which was their attempt to group related resources. The limited functionality of Cloud Service has been replaced in ARM by Resource Groups which are used to manage the entire lifecycle of an application, from creation to deletion.

Resource Groups
Resource Groups are a container for all related Azure resources, from VMs, networks, IP addresses, load balancers, databases, web apps and more.  When creating new resources, you can choose to add a resource to an existing Resource Group or to create a new Resource Group. There are no explicit rules governing what should be placed in the same Resource Group, but there are a few things to keep in mind when making that decision.

Resource Groups are a security boundary. You can grant permissions at the Resource Group layer to different users or groups. Keep in mind, they are not NTFS security within your Windows Domain, rather, they provide security in terms of who has access to manage and/or monitor your Azure resources. At last count there were 32 different pre-defined security roles ranging from basic roles like Owner, Contributor and Reader all the way down to specific roles like DNS Zone Contributor and Security Manager.

When defining Resource Groups consider grouping resources that have similar security needs in the same Resource Group. Although permissions can be granted at the Resource Group layer, if there are sensitive VMs within a Resource Group that need additional security these VMs can have explicit security which overrides the security of the Resource Group, so you don't have to worry if your security needs are a little "complicated".

In addition to security, resource utilization, alerting, monitoring and billing can be done at the Resource  Group level as shown in Figure 1.

Figure 1: Example of a Resource Group panel in the Azure Portal

The Resource Group panel displays a simple overview of all the resources in a Resource Group and allows you directly click on each resource to drill down to get a more detailed view of resource as well as allow you to make changes to those resources. This panel is customizable, allowing you to display additional detail such as estimated spend, disk, CPU and memory utilization as well.

If you have ever managed an Azure Classic deployment, or even fooled around with Azure Classic in your home lab you will appreciate this next feature. When it comes time to decommission your application, the old method was to delete you your resources, one resource at a time. And don't forget; before you delete that Storage Account be sure to delete all the VHD files, all the containers and all the blobs first!  It wasn't pretty.

Cleaning up a failed deployment or simply trying to reset your lab to a clean slate in Azure Classic could sometimes be a tedious process. Forgetting to delete just one Premium Storage Disk after a POC will come as quite a surprise at the end of the month when your receive your credit card statement full of unexpected Azure charges; don't ask me how I know.

ARM simplifies this whole process. When you are done with an application and want to decommission it completely, just click "Delete" and all the resources within the Resource Group will be deleted, no fuss no muss (See Figure 2). Now as you can imagine, this is a pretty destructive command, so they do ask you to confirm what you are about to do and ask you to type the name of the Resource Group once again before the job will run to ensure you really are deleting the Resource Group you intended.

Figure 2: Deleting Resource Groups

Summary
In addition to Resource Groups and Template deployments there are other new features of ARM, such as the ability to perform tasks in parallel rather than series. For example, in Classic to stop four VMs via the portal, you would have to stop the first VM, wait for a while, and then try to stop the second VM. If the first VM was not far enough along in the stopping process my attempt to stop the second VM would fail. Needless to say you only had to do this a few times before you decided to write a PowerShell script to stop all your VMs.

With ARM you can now perform this same task in parallel, you no longer have to wait for the first VM to stop before you can stop the second, third and fourth VM. The same holds true for other operations that were previously serialized, such as creating new VMs.

While ARM is the future of Azure some features took a long time to be added and some are not as well documented as they are in Azure Classic. However, the benefits described here should help you overcome any hesitation you may have about making ARM your preferred Azure deployment method.

Learn more about ARM in this recorded webinar.

References

  1. https://azure.microsoft.com/en-us/documentation/articles/resource-manager-deployment-model/
  2. https://azure.microsoft.com/en-us/blog/azps-1-0/
  3. https://azure.microsoft.com/en-us/documentation/articles/xplat-cli-install/
  4. https://azure.microsoft.com/en-us/documentation/articles/resource-group-authoring-templates/
  5. https://azure.microsoft.com/en-us/documentation/templates/
  6. https://www.visualstudio.com/en-us/features/azure-tools-vs.aspx

More Stories By David Bermingham

David Bermingham is recognized within the technology community as a high availability expert and has been honored by his peers by being elected to be a Microsoft MVP in Clustering since 2010. His work as director of Technical Evangelist at SIOS has him focused on evangelizing Microsoft high availability and disaster recovery solutions as well as providing hands on support, training and professional services for cluster implementations.

David holds numerous technical certifications and draws from over twenty years of experience in IT, including work in the finance, healthcare and education fields, to help organizations design solutions to meet their high availability and disaster recovery needs. He has recently begun speaking on deploying highly available SQL Servers in the Azure Cloud and deploying Azure Hybrid Cloud for disaster recovery.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


IoT & Smart Cities Stories
The challenges of aggregating data from consumer-oriented devices, such as wearable technologies and smart thermostats, are fairly well-understood. However, there are a new set of challenges for IoT devices that generate megabytes or gigabytes of data per second. Certainly, the infrastructure will have to change, as those volumes of data will likely overwhelm the available bandwidth for aggregating the data into a central repository. Ochandarena discusses a whole new way to think about your next...
DXWorldEXPO LLC announced today that Big Data Federation to Exhibit at the 22nd International CloudEXPO, colocated with DevOpsSUMMIT and DXWorldEXPO, November 12-13, 2018 in New York City. Big Data Federation, Inc. develops and applies artificial intelligence to predict financial and economic events that matter. The company uncovers patterns and precise drivers of performance and outcomes with the aid of machine-learning algorithms, big data, and fundamental analysis. Their products are deployed...
Dynatrace is an application performance management software company with products for the information technology departments and digital business owners of medium and large businesses. Building the Future of Monitoring with Artificial Intelligence. Today we can collect lots and lots of performance data. We build beautiful dashboards and even have fancy query languages to access and transform the data. Still performance data is a secret language only a couple of people understand. The more busine...
All in Mobile is a place where we continually maximize their impact by fostering understanding, empathy, insights, creativity and joy. They believe that a truly useful and desirable mobile app doesn't need the brightest idea or the most advanced technology. A great product begins with understanding people. It's easy to think that customers will love your app, but can you justify it? They make sure your final app is something that users truly want and need. The only way to do this is by ...
CloudEXPO | DevOpsSUMMIT | DXWorldEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
Digital Transformation and Disruption, Amazon Style - What You Can Learn. Chris Kocher is a co-founder of Grey Heron, a management and strategic marketing consulting firm. He has 25+ years in both strategic and hands-on operating experience helping executives and investors build revenues and shareholder value. He has consulted with over 130 companies on innovating with new business models, product strategies and monetization. Chris has held management positions at HP and Symantec in addition to ...
Cell networks have the advantage of long-range communications, reaching an estimated 90% of the world. But cell networks such as 2G, 3G and LTE consume lots of power and were designed for connecting people. They are not optimized for low- or battery-powered devices or for IoT applications with infrequently transmitted data. Cell IoT modules that support narrow-band IoT and 4G cell networks will enable cell connectivity, device management, and app enablement for low-power wide-area network IoT. B...
The hierarchical architecture that distributes "compute" within the network specially at the edge can enable new services by harnessing emerging technologies. But Edge-Compute comes at increased cost that needs to be managed and potentially augmented by creative architecture solutions as there will always a catching-up with the capacity demands. Processing power in smartphones has enhanced YoY and there is increasingly spare compute capacity that can be potentially pooled. Uber has successfully ...
SYS-CON Events announced today that CrowdReviews.com has been named “Media Sponsor” of SYS-CON's 22nd International Cloud Expo, which will take place on June 5–7, 2018, at the Javits Center in New York City, NY. CrowdReviews.com is a transparent online platform for determining which products and services are the best based on the opinion of the crowd. The crowd consists of Internet users that have experienced products and services first-hand and have an interest in letting other potential buye...
When talking IoT we often focus on the devices, the sensors, the hardware itself. The new smart appliances, the new smart or self-driving cars (which are amalgamations of many ‘things'). When we are looking at the world of IoT, we should take a step back, look at the big picture. What value are these devices providing. IoT is not about the devices, its about the data consumed and generated. The devices are tools, mechanisms, conduits. This paper discusses the considerations when dealing with the...