Azure

Cloud Concepts — IaaS/PaaS/SaaS, the shared responsibility model, and the vocabulary the rest of this section assumes.

Getting Started with Azure — creating an account, the free tier, and installing and signing in with the Azure CLI, Bicep and azd.

Azure Global Infrastructure — regions, availability zones and datacenters, and how they shape resiliency decisions.

Resource Organization — management groups, subscriptions, resource groups, tags and naming conventions, applied to rg-bookshelf.

Identity and Access — Microsoft Entra ID, RBAC role assignments, managed identities and workload identity, the mechanisms every later page’s --assign-identity and az role assignment create calls build on.

Infrastructure as Code — Bicep modules and azd templates for provisioning Bookshelf repeatably, instead of one-off az commands.

Choosing a Compute Service — a decision guide across VMs, Container Apps, App Service, Functions and AKS.

Azure Container Registry — acrbookshelf, image builds, and pulling images by managed identity.

Container Apps — deploying catalog-api to cae-bookshelf, environments, ingress and revisions.

Container Apps: Scaling, Jobs and Dapr — scale rules, the notifier job, and the Dapr sidecar.

App Service and Azure Functions — the PaaS and serverless alternatives to Container Apps.

AKS Clusters — creating aks-bookshelf itself: node pools, networking and cluster-level autoscaling.

Deploying Microservices on AKS — moving catalog-api, orders-api and notifier onto that cluster with manifests, Helm and the Gateway API.

Storage Accounts — stbookshelf, redundancy options and access tiers.

Blob Storage — containers, lifecycle management, and serving Bookshelf’s static front end from $web.

Front Door and CDN — afd-bookshelf, WAF rules and edge caching in front of both the static site and API Management.

Managed Databases on Azure — a survey of Azure’s managed database options and how Bookshelf picks between them.

Azure SQL — Azure SQL Database and Managed Instance, for workloads that need them instead of PostgreSQL.

PostgreSQL and MySQL on Azure — pg-bookshelf, the flexible server tier, and where catalog-api persists its catalog.

Cosmos DB and Azure DocumentDB — docdb-bookshelf, and where orders-api persists its orders.

Redis and Partner Databases on Azure — redis-bookshelf (Azure Managed Redis) and the partner-hosted database marketplace offerings.

Key Vault and Secrets — kv-bookshelf, secret and certificate management, and RBAC versus access policies.

Runtime Configuration — appcs-bookshelf, feature flags, and Kubernetes ConfigMaps/Secrets as the AKS-side equivalent.

Virtual Networks — vnet-bookshelf, subnets, NSGs and private endpoints for the data-tier resources.

Gateways and Load Balancing — Application Gateway, Azure Load Balancer and the Gateway API in front of aks-bookshelf.

API Management — apim-bookshelf, the gateway in front of catalog-api and orders-api.

VPN Gateway and Hybrid Connectivity — vgw-bookshelf, the admin path into snet-data.

Email with Azure Communication Services — acs-bookshelf, and how notifier sends order-confirmation email.

Messaging and Integration Services — Service Bus, Event Grid and Event Hubs for the messaging Bookshelf could add next.

Monitoring and Observability — Azure Monitor, Log Analytics and Managed Grafana watching every resource in the diagram above.

Governance and Compliance — Azure Policy, Blueprints' successor, and compliance tooling.

Cost Management — budgets, Azure Advisor’s cost recommendations, and right-sizing Bookshelf’s resources.

Architecture, Migration and Hybrid Cloud — landing zones, the Cloud Adoption Framework, and migrating existing workloads onto Azure.

AI, Data and IoT Services Overview — a survey of the Azure services this section doesn’t otherwise cover.

Developer Tools and DevOps — GitHub Actions, Azure DevOps and azd tying CI/CD back to everything above.

Choosing a Foundry Tool (or a Foundry Model) — prebuilt tool vs LLM vs custom model, overlaps resolved, and AWS/Google Cloud equivalents.

Resources, Endpoints and Authentication — the Foundry resource, endpoints, keys vs Microsoft Entra ID, and keyless Bicep.

Networking, Security and Responsible AI — network rules, private endpoints, customer-managed keys and Limited Access.

Pricing, Quotas, Containers and Monitoring — billing units, rate limits, containers and diagnostics.

Speech to Text — real-time, fast, batch and LLM speech.

Text to Speech and Avatars — voices, SSML, batch synthesis, custom voice and avatars.

Speech Translation, Pronunciation Assessment and Other Speech Features — speech translation, Live Interpreter and pronunciation scoring.

Voice Live API for Voice Agents — managed speech-to-speech voice agents.

Text Translation with Translator — the 2026-06-06 API with NMT or LLM targets.

Document Translation, Custom Translator and Adaptive Translation — documents with layout, and custom terminology.

Language: PII, Entities, Language Detection and Health — the core Language features.

Language: Sentiment, Summarization, CLU and Question Answering — the legacy features and their LLM alternatives.

Vision: Image Analysis and OCR — captions, smart crops and OCR, and their retirement path.

Face Detection, Verification and Liveness — Face behind Limited Access, with a KYC example.

Document Intelligence: Read, Layout and Prebuilt Models — OCR, layout and Bookshelf’s supplier invoices.

Document Intelligence: Custom Models, Classification and RAG Ingestion — custom models, classifiers and Markdown chunking.

Content Understanding: Multimodal Analyzers — fields you describe, across documents, images, audio and video.

Content Safety, Prompt Shields and Groundedness — moderation and LLM-attack protection.

Azure AI Search with Foundry Tools — skillsets, integrated vectorization and agentic retrieval.

Using Foundry Tools from Agents (MCP and Toolbox) — MCP servers, templates and function tools.

Immersive Reader, Video Indexer and Retired Services — reading aids and the full retirement table.

End-to-End Scenarios: Combining Foundry Tools — three complete Bookshelf pipelines.

Foundry Tools Cheat Sheet — a one-page printable PDF.