Chapter 00: Foundation & Learning Path This guide is designed for AWS-experienced Cloud Architects preparing for Azure-focused roles that require:
Azure reference architecture ownership
AI-in-the-enterprise (Azure AI Foundry + Copilot Studio)
Identity-first security (Entra ID + Zero Trust)
Security & compliance standardization (Defender + Purview)
Infrastructure as Code (Terraform/Bicep)
Observability & FinOps
Quick Sync (5-10 minutes per topic) Each chapter contains a quick-reference.md
One-page cheat sheets
AWS-to-Azure mapping tables
Key commands and configurations
Decision flowcharts
Deep Dive (30-60 minutes per topic) Each chapter contains detailed topic files with:
Comprehensive explanations
Architecture diagrams
Bicep/Terraform code examples
Case studies with architectural decisions
Recommended Learning Path Based on the job requirements and Azure's architecture model, follow this sequence:
┌─────────────────────────────────────────────────────────────────────────┐
│ COMPREHENSIVE LEARNING PATH │
├─────────────────────────────────────────────────────────────────────────┤
│ │
│ WEEK 1-2: FOUNDATION & STRATEGY │
│ ┌──────────────────────────────────────────────────────────────────┐ │
│ │ Chapter 00: Foundation (this chapter) │ │
│ │ Chapter 01: Cloud Adoption Framework │ │
│ │ • Azure fundamentals, resource hierarchy │ │
│ │ • CAF phases, Landing Zones │ │
│ │ WHY FIRST: Understand Azure's organizational model │ │
│ └──────────────────────────────────────────────────────────────────┘ │
│ ↓ │
│ WEEK 3-4: IDENTITY & SECURITY │
│ ┌──────────────────────────────────────────────────────────────────┐ │
│ │ Chapter 02: Identity (Entra ID, RBAC) │ │
│ │ Chapter 03: Security (Zero Trust, Defender) │ │
│ │ Chapter 04: Compliance (Purview, DLP) │ │
│ │ WHY HERE: Identity-first approach is core to Azure │ │
│ └──────────────────────────────────────────────────────────────────┘ │
│ ↓ │
│ WEEK 5-6: NETWORKING │
│ ┌──────────────────────────────────────────────────────────────────┐ │
│ │ Chapter 05: Networking (VNets, VPN, ExpressRoute) │ │
│ │ Chapter 06: Network Security (NSG, Firewall, Private Link) │ │
│ │ Chapter 07: Load Balancing & CDN (App GW, Front Door) │ │
│ │ WHY HERE: Network foundation for all workloads │ │
│ └──────────────────────────────────────────────────────────────────┘ │
│ ↓ │
│ WEEK 7-8: COMPUTE, DATA & INTEGRATION │
│ ┌──────────────────────────────────────────────────────────────────┐ │
│ │ Chapter 08: Containers & AKS │ │
│ │ Chapter 09: Databases (SQL, Cosmos DB) │ │
│ │ Chapter 10: API & Integration (APIM, Service Bus) │ │
│ │ WHY HERE: Core services for application workloads │ │
│ └──────────────────────────────────────────────────────────────────┘ │
│ ↓ │
│ WEEK 9-10: ARCHITECTURE & PATTERNS │
│ ┌──────────────────────────────────────────────────────────────────┐ │
│ │ Chapter 11: Architecture Styles (N-Tier, Microservices) │ │
│ │ Chapter 12: Design Patterns (Reliability, Messaging) │ │
│ │ Chapter 13: Anti-Patterns (Performance issues) │ │
│ │ WHY HERE: Apply knowledge to real architectures │ │
│ └──────────────────────────────────────────────────────────────────┘ │
│ ↓ │
│ WEEK 11-12: AI, OPERATIONS & CERTIFICATION │
│ ┌──────────────────────────────────────────────────────────────────┐ │
│ │ Chapter 14-15: AI Platform (Azure OpenAI, ML) │ │
│ │ Chapter 16: Observability (Monitor, Log Analytics) │ │
│ │ Chapter 17: Infrastructure as Code (Bicep, Terraform) │ │
│ │ Chapter 18: FinOps (Cost optimization) │ │
│ │ Chapter 19-20: Case Studies & Certifications │ │
│ │ WHY LAST: Operational excellence and exam preparation │ │
│ └──────────────────────────────────────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────────┘
AWS to Azure Mental Model Shift The Big Difference: Identity-First vs Resource-First AWS Mental Model: Azure Mental Model:
───────────────── ──────────────────
Resources Identity
│ │
IAM Policies Entra ID
│ │
Security Groups Conditional Access
│ │
Identity Resources
│
RBAC + Policy
AWS: "What can this resource do?" Azure: "Who are you, and should
you even be here?"
AWS Thinking
Azure Thinking
IAM is for permissions
Entra ID is the security perimeter
Security groups protect resources
Identity + Conditional Access protect everything
GuardDuty detects threats
Defender is a comprehensive security platform
Macie classifies data
Purview governs the entire data estate
CloudWatch monitors
Azure Monitor + Log Analytics is the telemetry backbone
azure-architect-guide/
├── README.md # Main navigation & quick start
│
├── FOUNDATION & STRATEGY
│ ├── 00-foundation/ # This chapter - fundamentals
│ └── 01-cloud-adoption-framework/ # CAF, Landing Zones
│
├── IDENTITY & SECURITY
│ ├── 02-identity/ # Entra ID, RBAC, Conditional Access
│ ├── 03-security/ # Zero Trust, Defender, Key Vault
│ └── 04-compliance/ # Purview, DLP, Information Protection
│
├── NETWORKING
│ ├── 05-networking/ # VNets, VPN, ExpressRoute, DNS
│ ├── 06-network-security/ # NSG, Azure Firewall, Private Link
│ └── 07-load-balancing-cdn/ # App Gateway, Load Balancer, Front Door
│
├── COMPUTE & DATA
│ ├── 08-containers-aks/ # ACI, AKS, Container Apps
│ ├── 09-databases/ # SQL, Cosmos DB, PostgreSQL, Redis
│ └── 10-api-integration/ # APIM, Service Bus, Event Grid
│
├── ARCHITECTURE & PATTERNS
│ ├── 11-architecture-styles/ # N-Tier, Microservices, Event-Driven
│ ├── 12-design-patterns/ # Reliability, messaging, deployment
│ └── 13-anti-patterns/ # Busy Database, Chatty I/O, etc.
│
├── AI & MACHINE LEARNING
│ ├── 14-ai-platform/ # Azure OpenAI, Cognitive Services
│ └── 15-ai-ml-comprehensive/ # AI agents, RAG, Responsible AI
│
├── OPERATIONS
│ ├── 16-observability/ # Azure Monitor, Log Analytics
│ ├── 17-infrastructure-as-code/ # Bicep, Terraform, ARM
│ └── 18-finops/ # Cost management, optimization
│
└── LEARNING & CERTIFICATION
├── 19-case-studies/ # E-commerce, data platform, IoT
└── 20-certifications/ # AZ-305, AZ-104 study guides
Each chapter contains:
README.md - Chapter overview and navigationquick-reference.md - 5-10 minute cheat sheetTopic deep-dive files (e.g., 01-topic.md, 02-topic.md)
case-studies.md - Real-world scenariosextra-resources.md - Official docs, videos, labs
Here's how each chapter maps to key Cloud Architect skills:
Skill Area
Primary Chapters
Supporting Chapters
Azure reference architecture
11, 12, 19
All
AI-in-the-enterprise (Foundry/Copilot)
14, 15
02, 03, 04
Identity-first security (Entra/Zero Trust)
02, 03
04, 06
Security + compliance (Defender/Purview)
03, 04
06, 16
Networking (VNets, Firewall, LB)
05, 06, 07
08
Containers & Kubernetes
08
07, 09, 10
IaC (Terraform/Bicep/ARM)
17
All
Observability (Monitor/Grafana)
16
18
FinOps
18
16, 17
Next: Quick Reference | AWS-Azure Service Mapping
Author: Michel Abboud | AI-Assisted Content | APACHE 2.0 License