Tag: AI

I was reading This in azure Docs in which I will use the Pricing calculator to figure out how much this arch will cost me : ​ The architecture ​ The result of : 2 VMs + Azure SQL + 2 application Gateway = 1291.82 ​ The final cost ​ ​ Is it only me that I find this very expensive because I live in a third world country or is it normal ? ​ ​ submitted by /u/TopPerspective8217 [link] [comments]

Title, thanks! submitted by /u/xVepres [link] [comments]

I just passed AZ104 first time go but only with a 718 so like just barely. I’ve heard some people say to just jump into AZ305 right after since the learning curve isn’t as high. I was wondering though if I could get some advice on how to proceed. submitted by /u/love_your_eyeholes [link] [comments]

i want to just lock one azure webapp down by IP. This is an a dev/test account, our live account works fine. when webapp A talks to webapp B i get IP 10.10.2.253 when logging the IP in the application. so private address space. so if i then block unknown IPs in the webapp network restrictions and whitelist 10.10.2.253/32 or even 10.0.0.0/8 it doesnt work. could they be using IPv6 or voodoo or something 🙁 submitted by /u/megadonkeyx [link] [comments]

ive been taking the az-900 practice exams on the microsoft site and passing them with ease now - however the questions do seem to repeat or just re-worded slightly. is there any other free practice exams out there? also is the style the same the way the practice exams are just like the real exam? submitted by /u/FOXY_1991 [link] [comments]

I have a hybrid user that wants another username. Do I need to create new user or is it possible to just change it? -note it’s the prefix that needs to changed. submitted by /u/Euphoric-Refuse-2594 [link] [comments]

We are planning host ADFS on Azure IAAS VM and it will be a multi region setup . It consists of a traffic manager and the two external endpoint for it would be the external Application gateways . From App gateways the requests would get routed to two WAP servers and then towards the two ADFS servers. So my question whether should we make use of internal load Azure balancer (layer 4) or internal App gateway (layer 7) between WAP servers and ADFS servers submitted by /u/psr1987 [link] [comments]

Is it normal that AZ-400 (which I am studying rn) seems to be easier than AZ-204 which I passed in March? Consider that I daily work with Azure Cloud and .NET, and also the AZ-204 seemed to me though, not too much but a bit, now AZ-400 seems just a discursive exam, repeating itself again and again, with almost zero technical stuff. Almost all the exercises are just they that teaches you to use Azure DevOps. I am at module 6 /9. Am I underexstimating its difficulties or is it really easier for a tech? How's about the exam? The AZ-204 exam was full of technical concepts, code snippets, azure cli commands, architecture scenario examples, docker file exercises and so on... Considering what I am studying for AZ-400 I think that the max tech question I can expect is a YAML snippet.. and all the others just conceptual ones. Am I valuating this exam wrongly? Do you recognize as my impressions? What was your experience with this exam? Did you find it easier or thougher than AZ-204? Why? submitted by /u/Forward_Ad_1606 [link] [comments]

We've recently started tuning our application permissions, and set up the recommended user approval for Verified Publishers, and low impact permissions. We used the recommended OpenID permissions for the initial low impact classifications from this article: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-permission-classifications?pivots=portal We received an approval request today, but the requested permissions were both included in the low impact classification, so the user should have been able to consent, View, and Maintain Access. Initial Request We approved the request, and then reviewed the permissions in the application and they were different. Instead of View and Maintain Access, it was now View, and Sign-in. Actual Permissions Then, we went back into the request and reviewed the requested permissions again, and they had changed for a third time, and were now Sign-in and Read, and Access Dynamics 365 as the User. After Approval Is this normal, or are we completely misunderstanding the consent process? Should the actual permissions granted not match what the request says? submitted by /u/NetworkCanuck [link] [comments]

Hi all! The question is the following: first, I’ll try to describe our infrastructure in two words. We have a hybrid infrastructure, there are a number of services that are on-premise located, and we also have some users who use AVD for work. They use on-prem services in their work. For Azure and on-prem communication, we use an IPsec tunnel. Recently, a network engineer suggested switching to ExpressRoute. We deployed a test network and a test AVD farm in Azure and configured ExpressRoute between Azure and on-perm; at this stage, everything is fine, and everything works. Latency has decreased slightly (as expected because there are fewer hops in the route, and the jitter has become more stable), but the ability to connect via the Internet to AVD hosts has disappeared. It seems that this could have been implemented through Azure Public Peerings earlier, but this is now deprecated. Is there any other way to simultaneously use a connection to AVD via the Internet and ExpressRoute (for a more stable channel between Azure and on-prem) submitted by /u/r0manych [link] [comments]

While trying to run a training job I am getting the following error : """""""" File "main.py", line 113, in <module> main() File "main.py", line 34, in main mlflow.sklearn.autolog() File "/azureml-envs/azureml_4c5bf9f2575042242b593ee72ffb5e77/lib/python3.8/site-packages/mlflow/utils/autologging_utils/__init__.py", line 413, in autolog return _autolog(*args, **kwargs) File "/azureml-envs/azureml_4c5bf9f2575042242b593ee72ffb5e77/lib/python3.8/site-packages/mlflow/sklearn/__init__.py", line 1224, in autolog _autolog( File "/azureml-envs/azureml_4c5bf9f2575042242b593ee72ffb5e77/lib/python3.8/site-packages/mlflow/sklearn/__init__.py", line 1737, in _autolog if flavor_name == mlflow.xgboost.FLAVOR_NAME: AttributeError: module 'mlflow' has no attribute 'xgboost' """"""""" Is it because of the latest mlflow version upgrade? If that is the case then can you please suggest a solution to it? submitted by /u/Nishchay_GL [link] [comments]

Hi all, i want to increase my RAM for my VM running in region northern europe but i simply cant choose more than 64gb RAM under "Size". what am i doing wrong? im a newbie to azure. sorry if i miss any basic things but chatgpt, youtube and other documentation didnt help. i read to choose region to fix but it seems it doesnt change anything. i also turned VM off but no more options appeared submitted by /u/pfinzl [link] [comments]

submitted by /u/jaydestro [link] [comments]

I cannot think of any elegant way to deny traffic from malicious IP ranges in Azure Firewall. As DNAT rules always take precedence over Network and App rules, how can you deny external traffic towards a public IP on the firewall that has an 'any source' DNAT rule in place? Since there is no Deny DNAT rule, and you cant make a Network deny rule, as it will be already accepted by the DNAT rule. Any help? submitted by /u/Wregghh [link] [comments]

Hi all, I'm in a Hybrid Azure AD environment (comanaged SCCM/Intune). I recently set up a Conditional Access Policy for no persistent browser sessions on non Hybrid Joined devices. (basically all I did is use the Microsoft Policy Template and removed the device.isCompliant setting from the device filter) Here are my settings: Target Resources - All Cloud Apps Conditions - Client apps - Browser, Filter for devices - Include trustType Not Equals Microsft Entra Hybrid Joined Session - Sign-in frequency 1 hour, Persistent browser session - Never Persistent I deployed to my User account several weeks ago and it seemed to work just fine. Stayed signed into the cloud apps on my company laptop, but on my personal phone and personal laptop I got signed out. Yesterday afternoon I added the rest of IT to the policy for further testing and later in the day started getting reports of other IT people getting logged out of cloud apps on their company computers. When I checked those devices in Azure they show up as 'Microsoft Entra hybrid joined'. I reverted the policy back to Reporting Only now but I'm not sure how to figure out what's going on. Any help is appreciated. ​ submitted by /u/Natural_Sherbert_391 [link] [comments]

We have many Azure SQL databases across different resource groups. Today one of those databases reached their max size. Now I'm trying to set up an alert rule to notify me when the database has reached 80% of it's max size. Initially I created an alert rule for a single Azure SQL DB, but now I'm wondering if there is a way to do this across all my azure SQL DBs. Even more, I would love it if any future azure SQL DBs could also have this alert applied to it. The problem is that when I move to the alerts interface and create a new alert I select the "scope" as multiple azure SQL DBs and a message tells me "Metric and Log signals might not be available if the scope includes multiple resources." On the condition tab I want to monitor the "signal name" "Data space used percent" but when I have selected multiple databases that signal name is not available. Can someone help me understand why this option isn't available and if there are any other ways to accomplish what I want? I would prefer to not have to set up 30ish alert rules, one for each database. submitted by /u/watchoutfor2nd [link] [comments]

Hi all, My current environment is running AD on-prem and we are scoping out our move to a hybrid AD model (Entra). Our particular scenario is a bit different than I have worked on in the past: We already have users setup in O365 with their email (accounts are obviously not synchronized between on-prem and Entra yet.) I have added an alternate UPN suffix (.com version of our .local UPN) to the on-prem AD configuration and will roll this change to all on-prem user objects soon. Currently decided to go with Entra Connect Sync instead of Cloud Sync. Connect sync is installed but it automatically selected the sourceAnchor to be: ms-DS-ConsistencyGuid My questions are as follows: Should I rely on soft-matching the UPN attributes between the on-prem AD accounts and Entra accounts for the initial synchronization? Is it best to re-install Connect Sync and manually change the sourceAnchor to UPN instead of ms-DS-ConsistencyGuid? Are there any other pitfalls I need to be aware of in this particular scenario? (Syncing on-prem AD users to pre-existing Entra users) ​ As always, thanks! ​ ​ submitted by /u/sudocp [link] [comments]

I have a simple AKS setup within a hub-spoke architecture with a WAF in front of it. Using terraform to create AKS. Everything works fine until I turn on authorized_ip_ranges, then suddenly I cannot restart containers etc. I've tried to allow all ranges I can think of, but the only way to get things working again is to either disable authorized_ip_ranges or to set it to "0.0.0.0/0". Any hints on what I might be missing here? submitted by /u/rdragz [link] [comments]

I'm about to take az104 on site in friday, so i got some questions 1. I've seen posts ms learn bugged during online test, are ms learn for onsite test buggy as well? 2. Any tips to search ms learn better? 3. The browser for ms learn looks like a custom apps, does it have feature like ctrl+ F? 4. If i open several tabs ms learn, will it slow down? 5. Am i allowed to bring blank paper and pen? After trying test in TD, i find that i can understand the question better if i wrote it down on paper. TIA submitted by /u/AirLancer56 [link] [comments]

Has anyone here ever attempted to use Bicep to enable a Azure SQL VM in an availability group in azure backup recovery services vault? I have it working perfectly in the portal but struggling to know where to start when it comes to automating it for many environments. Documentation and examples seems to be lacking online. Thanks in advance! submitted by /u/rubberDonkey20 [link] [comments]