Azure Cloud Fundamentals
Microsoft Azure is the second largest cloud provider. Used by thousands of enterprises in India and worldwide. Understanding Azure opens doors to cloud engineering roles worth ₹12–25 LPA.
Cloud computing = renting compute power, storage, and services from a company (Azure, AWS, GCP) that already manages the infrastructure. You pay only for what you use — like electricity or mobile data.
Key Benefits
- Elasticity — scale up when traffic spikes, scale down when it drops
- Pay-as-you-go — no upfront hardware cost, pay only for usage
- Global reach — deploy in data centres across the world in minutes
- Managed services — Azure manages OS patches, backups, high availability
- Speed — provision a new server in 2 minutes, not 2 weeks
IaaS = buying ingredients, cooking at home. You manage everything.
PaaS = delivery pizza dough + toppings to your door. You just bake it (your app).
SaaS = ordering a delivered, ready pizza. You just eat it (no management).
| Model | You manage | Provider manages | Azure Example |
|---|---|---|---|
| IaaS — Infrastructure as a Service | OS, Runtime, App, Data | Hardware, Network, Storage | Azure Virtual Machines |
| PaaS — Platform as a Service | App, Data | OS, Runtime, Hardware | Azure App Service |
| SaaS — Software as a Service | Your data only | Everything | Microsoft 365, Azure DevOps |
Create a free Azure account
Go to azure.microsoft.com/free and sign up. You get:
₹15,000 (USD 200) in credits for 30 days + 12 months of free popular services (App Service B1, SQL Database, etc.).
Explore the portal
Log in at portal.azure.com. Key areas: Home → All resources, Resource Groups, the search bar at the top (find any service quickly), and the Cost Management section.
App Service
Host your Spring Boot app. Managed Tomcat, auto-scaling, HTTPS included.
Azure SQL Database
Managed PostgreSQL or SQL Server. Automatic backups, scaling.
AKS
Azure Kubernetes Service. Managed Kubernetes cluster for containers.
Container Registry
Store Docker images. Like Docker Hub but private, integrated with AKS.
Azure Functions
Serverless. Run code in response to events without managing servers.
Key Vault
Securely store secrets, API keys, and certificates. Never hardcode passwords.
Build the JAR
Create App Service via Azure CLI
Deploy the JAR
Your app is live at: https://student-api-app.azurewebsites.net
Cloud computing is the delivery of computing services (servers, storage, databases, networking, software) over the internet on a pay-as-you-go basis.
Public cloud — resources owned by cloud provider, shared among customers. (Azure, AWS, GCP)
Private cloud — dedicated infrastructure for one organisation. More control, more cost.
Hybrid cloud — combination of public and private. Sensitive data on private, scalable workloads on public.
IaaS (Infrastructure as a Service) — provides virtualised computing resources. You manage OS, runtime, apps. Example: Azure Virtual Machines. Like renting a blank computer in the cloud.
PaaS (Platform as a Service) — provides a platform to develop and deploy apps. Provider manages OS and runtime. You manage only your app and data. Example: Azure App Service, Google App Engine.
SaaS (Software as a Service) — fully managed software accessed via browser. You just use it. Example: Gmail, Salesforce, Microsoft 365.
A Resource Group is a logical container that holds related Azure resources for an application or project. All resources that share the same lifecycle are grouped together.
Benefits: manage all resources as a unit (deploy, monitor, delete), apply access controls at group level, see aggregate costs per project, group by environment (dev-rg, prod-rg).
Azure App Service is a PaaS offering for hosting web applications, REST APIs, and mobile backends. For Java developers, it manages Tomcat/Java runtime, HTTPS certificates, custom domains, auto-scaling, and deployment slots (staging → production).
You just deploy your JAR file — no server management needed. It can auto-scale horizontally based on CPU/memory thresholds.
Never hardcode secrets in code or application.properties committed to Git. Use:
- Azure Key Vault — store secrets, retrieve via managed identity (no passwords needed)
- Environment variables — set in App Service → Configuration → Application Settings, injected at runtime
- Managed Identity — allows App Service to authenticate to Azure SQL and Key Vault without any passwords at all (zero-trust)