Summary
Over the course of this module, you explored the planning and deployment of Azure Arc-enabled servers at scale for customers like Wide World Importers. You learned how Azure Arc-enabled servers delivers Azure services, such as Microsoft Defender for Cloud, Azure Policy, Azure Monitor, and virtual machine (VM) extensions, to servers across on-premises, multicloud, and edge environments through the Connected Machine agent.
First, you explored how to easily simulate an Azure Arc-enabled server using an Azure VM. Next, you learned about the built-in and added security considerations around planning a large deployment. You also learned about the range of different deployment methods supported by Azure Arc-enabled servers. Finally, you learned about best practices with deploying Azure Arc-enabled servers.
The compute infrastructure of Wide World Importers is complex, global, and hybrid. Your testing and research found that using Azure Arc-enabled servers is a powerful way to streamline security, governance, and visibility across your firm's entire digital estate. While deploying at-scale across your enterprise can be daunting, Azure Arc-enabled servers offers the testing, security, and support guidance to help you realize Azure capabilities more easily.
More Info
The following resources support the module's procedures and technical review. Source IDs are also used in the review reports.
Overview and architecture
Use these resources for overview and architecture:
- R08: Manage extensions on Azure Arc-enabled servers
- R42: Azure Arc agent connection status
- R51: Azure Arc overview
- R52: Azure Arc-enabled servers overview
- R53: Azure Arc-enabled servers | Azure Arc Jumpstart
- R54: Connected Machine agent components
- R60: GitOps application deployment on Azure Arc-enabled Kubernetes
Preparation and onboarding
Use these resources for preparation and onboarding:
- R11: Supported operating systems for Arc-enabled servers
- R12: Evaluate Azure Arc-enabled servers on an Azure VM
- R13: Azure VM evaluation prerequisites
- R14: Azure Arc-enabled servers prerequisites
- R17: Connect hybrid machines with a portal-generated script
- R18: azcmagent show command reference
- R19: Verify the Azure Arc connection
- R20: Troubleshoot Connected Machine agent onboarding
- R21: Disconnect and uninstall the Connected Machine agent
- R23: Create a service principal for onboarding at scale
- R37: Azure Arc-enabled servers deployment options
- R38: Onboard Azure Arc-enabled servers with PowerShell
- R39: Onboard Azure Arc-enabled servers with a service principal
- R40: Create and run scripts in Microsoft Configuration Manager
- R57: Connect-AzConnectedMachine command reference
- R58: Onboard Azure Arc-enabled servers with Windows Admin Center
Identity, governance, and configuration
Use these resources for identity, governance, and configuration:
- R01: Azure Machine Configuration concepts and assignment modes
- R09: Azure Machine Configuration prerequisites
- R22: Azure Connected Machine Onboarding role
- R24: Protect an Arc server's Microsoft Entra ID managed identity
- R25: Microsoft cloud security benchmark
- R26: Azure Policy built-in initiatives
- R27: Azure Policy deployIfNotExists effect
- R28: Azure Policy modify effect
- R29: Remediate noncompliant resources with Azure Policy
- R50: Migrate service configuration to Azure Policy
- R55: Azure Connected Machine Resource Administrator role
- R56: Azure Arc identity and authorization
Networking
Use these resources for networking:
- R15: Required Azure Arc endpoint URLs
- R16: Connected Machine agent network requirements
- R30: Configure Connected Machine agent proxy settings
- R31: Azure Arc networking configuration
- R32: Configure Azure Arc Private Link
- R33: Azure Monitor Private Link Scope
- R34: Azure Monitor data collection endpoints
- R35: Azure ExpressRoute overview
- R36: Azure VPN Gateway overview
Monitoring, protection, and maintenance
Use these resources for monitoring, protection, and maintenance:
- R02: Install an extension-based Hybrid Runbook Worker
- R03: Azure Update Manager operations and update sources
- R04: Azure Update Manager frequently asked questions
- R05: Change Tracking and Inventory with Azure Monitor Agent
- R06: Defender for Cloud agentless scanning
- R07: Microsoft Defender Vulnerability Management assessment
- R10: VM insights Map and Dependency Agent retirement guidance
- R41: Deploy Azure Monitor Agent on Arc-enabled servers
- R43: Azure Monitor roles and permissions
- R44: Create Azure Resource Health alerts
- R45: Create an Azure Monitor action group
- R46: Test an Azure Monitor action group
- R47: Create an Azure Advisor alert rule
- R48: Manage and upgrade the Connected Machine agent
- R49: Azure Automanage retirement notice for Arc-enabled servers
- R59: Create Azure Advisor recommendation alerts