Learn Azure SQL: Security, Performance, and Availability

In my last post on #learnazuresql I describe the first two modules of the Azure Learning content Anna Hoffman and I have built across Microsoft Learn, YouTube, and GitHub. These modules include the introduction to "What is Azure SQL" as well as the fundamentals of how to deploy and configure Azure SQL as compared to SQL Server.

In this post, I'd like to briefly describe the core of the content which I affectionately call the "meat and potatoes" including security, performance, and availability. These areas are the core of the SQL Server engine and for anyone to be successful with Azure SQL I feel it is important to study these three areas. You will find a common theme in each of these modules: capabilities and tasks. Our thinking was to ensure you know what capablities are at your disposal and then go through the common tasks using those capabilities. All done from the perspective of SQL Server. Which means, we won't go into every capability in each area but we will focus on what is different, specific to Azure, or capabilities we just think are important enough for you to know.

Module 3 - Azure SQL Security

Securing your deployment and data is critical for any business. In this module we will cover areas of Network Security, Identity and Access (authentication), Data Protection (encryption), and Security Management (audting and monitoring).

We included Network Security in this module because it is an important topic when ensuring your deployment is secure. You may not be a networking expert so we give you what you need to understand your options and then work with your network team to implement all the details.

One very cool capability specific to Azure is Advanced Data Security (ADS). One of the features of ADS is Advanced Threat Protection (ATP). Imagine, Azure watching behind the scenes for potential intrusions like SQL injections and alerting you to take action.

Module 4 - Azure SQL Performance

It is not just important to be fast but also to stay fast. Therefore in this module we will focus on how to monitor and tune performance. We will talk about capabilities and configuration but the heart of this module is about looking at performance issues and understanding how to use the right tools for the right solution. Worried you won't get Dynamic Management Views (DMV) or Extended Events (XEvent) like your SQL Server? We have you covered and even new DMVs specific to Azure. You will love the exercises in this module as you learn how to easily scale a workload both using deployment choices and application tuning.

We will also introduce you to a capability unique to Azure called Automatic Tuning (specifically Automatic Indexing). We use machine learning models to look at performance telemtry (not your data) including data from the Query Store and collected DVMs. Over time, if we believe a specific index would make your workload faster, we will recommend it. You can then choose to automate this process and we would automatically create the index. We don't stop there. We keep monitoring and if we believe the index we created is hurting your workoad, we will drop it.

Module 5 - Azure SQL Availability

Have you ever had to deploy and configure a Failover Cluster Instance or Always On Availability Group? Sure the technology is great and helps keep you available but it can be cumbersome to deploy and configure.

In this module you will learn the architecture of General Purpose, Business Critical, and Hyperscale service tiers and how availability is "just built-in" to Azure SQL. Then take this step a further with Availability Zones, Geo-Replication, and Auto-Failover groups. You will also learn how backups are automated, geo-redundant, and even available for long-term retention for up to 10 years.

This module also covers the amazing story of Accelerated Database Recovery (ADR). Tired of long-running recovery or transaction logs growing out of control? ADR just solves this and it is on by default in Azure SQL. In fact, the combination of built-in HA, ADR, and other aspects of Azure SQL allow us to give you an official industry-leading Service Level Agreement (SLA).

There is so much in these three modules you will want to go through them but come back refer to them again and again.

Remember all of the Learn Azure SQL content is available in multiple forms (based on the same content). Want to go through these modules with hands-on labs using a provided Azure free sandbox from Microsoft Learn? Go to https://aka.ms/azuresqlfundamentals.

You can use your own Azure resources with GitHub which has labs, is completely open-source, and includes a slide deck. Go to https://aka.ms/sqlworkshops and look for Azure SQL Workshop. GitHub has more labs than what is on Microsoft Learn. Get the latest up to date content here.

Then you can watch a series of videos on-demand for these modules where you will see Anna Hoffman and myself give you the details and demo the labs. Go to https://aka.ms/azuresql4beginners. We have had an incredible response and viewership to these videos so we know they are working.

Azure SQL is not just for folks who know SQL Server. But if you know SQL Server and are still not comfortable with Azure, I promise this content will get you where you need to go.

In my next post, I'll conclude my series on Learn Azure SQL by talking about the final module which helps you put your knowledge of Azure SQL together.

Bob Ward

Principal Architect, Microsoft Azure Data