az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg
Percentage CPU > 800"

Scenario: An alert must be raised if the ContentUploadService uses more than 80 percent
of available CPU-cores
Reference:
https://docs.microsoft.com/sv-se/cli/azure/monitor/metrics/alert

Azure Event Hub

Azure Event Hub is used for telemetry and distributed data streaming.
This service provides a single solution that enables rapid data retrieval for real-time
processing as well as repeated replay of stored raw data. It can capture the streaming data
into a file for processing and analysis.
It has the following characteristics:
low latency
capable of receiving and processing millions of events per second
at least once delivery
Reference:
https://docs.microsoft.com/en-us/azure/event-grid/compare-messaging-services

Box 1: allowedMemberTypes
allowedMemberTypes specifies whether this app role definition can be assigned to users
and groups by setting to "User", or to other applications (that are accessing this application
in daemon service scenarios) by setting to "Application", or to both.
Note: The following example shows the appRoles that you can assign to users.
"appId": "8763f1c4-f988-489c-a51e-158e9ef97d6a",
"appRoles": [
{
"allowedMemberTypes": [
"User"
],
"displayName": "Writer",
"id": "d1c2ade8-98f8-45fd-aa4a-6d06b947c66f",
"isEnabled": true,
"description": "Writers Have the ability to create tasks.",
"value": "Writer"
}
],
"availableToOtherTenants": false,
Box 2: User
Scenario: In order to review content a user must be part of a ContentReviewer role.
Box 3: value
value specifies the value which will be included in the roles claim in authentication and
access tokens.

Box 1: Valid root certificate
Scenario: All websites and services must use SSL from a valid root certificate authority.
Box 2: Azure Application Gateway
Scenario:
Any web service accessible over the Internet must be protected from cross site
scripting attacks.
All Internal services must only be accessible from Internal Virtual Networks
(VNets)
All parts of the system must support inbound and outbound traffic restrictions.
Azure Web Application Firewall (WAF) on Azure Application Gateway provides centralized
protection of your web applications from common exploits and vulnerabilities. Web
applications are increasingly targeted by malicious attacks that exploit commonly known
vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.
Application Gateway supports autoscaling, SSL offloading, and end-to-end SSL, a web
application firewall (WAF), cookie-based session affinity, URL path-based routing, multisite
hosting, redirection, rewrite HTTP headers and other features.
Note: Both Nginx and Azure Application Gateway act as a reverse proxy with Layer 7
loadbalancing features plus a WAF to ensure strong protection against common web
vulnerabilities and exploits.
You can modify Nginx web server configuration/SSL for X-XSS protection. This helps to prevent cross-site scripting exploits by forcing the injection of HTTP headers with X-XSS
protection.

Box 1: "oauth2Permissions": ["login"]
oauth2Permissions specifies the collection of OAuth 2.0 permission scopes that the web
API (resource) app exposes to client apps. These permission scopes may be granted to
client apps during consent.
Box 2: "oauth2AllowImplicitFlow":true

For applications (Angular, Ember.js, React.js, and so on), Microsoft identity platform
supports the OAuth 2.0 Implicit Grant flow.

Box 1: [BlobTrigger(..)]
Box 2: [Blob(..)]
Azure Blob storage output binding for Azure Functions. The output binding allows you to modify and delete blob storage data in an Azure Function.
The attribute's constructor takes the path to the blob and a FileAccess parameter indicating
read or write, as shown in the following example:
[FunctionName("ResizeImage")]
public static void Run(
[BlobTrigger("sample-images/{name}")] Stream image,
[Blob("sample-images-md/{name}", FileAccess.Write)] Stream imageSmall)
{
}
Scenario: You must create an Azure Function named CheckUserContent to perform the
content checks.
The company’s data science group built ContentAnalysisService which accepts user
generated content as a string and returns a probable value for inappropriate content. Any
values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

Add the following markup to line CS23:
types: Private

Explanation:
Scenario: All Internal services must only be accessible from Internal Virtual Networks
(VNets)

There are three Network Location types – Private, Public and Domain
Reference:
https://devblogs.microsoft.com/powershell/setting-network-location-to-private/

Box 1: eventgrid
To create event subscription use: az eventgrid event-subscription create

Box 2: event-subscription
Box 3: servicebusqueue
Scenario: Azure Service Bus and Azure Event Grid
Azure Event Grid must use Azure Service Bus for queue-based load leveling.
Events in Azure Event Grid must be routed directly to Service Bus queues for use in
buffering.
Events from Azure Service Bus and other Azure services must continue to be routed to
Azure Event Grid for processing.

Scenario: Corporate website
While testing the site, the following error message displays:
CryptographicException: The system cannot find the file specified.
Step 1: Generate a certificate
Step 2: Upload the certificate to Azure Key Vault

Scenario: All SSL certificates and credentials must be stored in Azure Key Vault.
Step 3: Import the certificate to Azure App Service
Step 4: Update line SCO5 of Security.cs to include error handling and then redeploy the
code

Update the function to be stateful by using Durable Functions to process the request
payload.

Async operation tracking
The HTTP response mentioned previously is designed to help implement long-running
HTTP async APIs with Durable Functions. This pattern is sometimes referred to as the
polling consumer pattern.
Both the client and server implementations of this pattern are built into the Durable
Functions HTTP APIs.
Function app
You perform local testing for the RequestUserApproval function. The following error
message displays:
'Timeout value of 00:10:00 exceeded by function: RequestUserApproval'

The same error message displays when you test the function in an Azure development
environment when you run the following Kusto query:
FunctionAppLogs
| where FunctionName = = "RequestUserApproval"
References:
https://docs.microsoft.com/en-us/azure/azure-functions/durable/durable-functions-httpfeatures