シニアクラウドエンジニア向け Azure 面接対策：完全ガイド

# Traffic Manager プロファイルの作成
az network traffic-manager profile create \
  --name myTMProfile \
  --resource-group myResourceGroup \
  --routing-method Performance \
  --unique-dns-name mytmprofile

# エンドポイントの追加
az network traffic-manager endpoint create \
  --name eastus-endpoint \
  --profile-name myTMProfile \
  --resource-group myResourceGroup \
  --type azureEndpoints \
  --target-resource-id /subscriptions/.../appgw-eastus

# SQL geo レプリケーションの構成
az sql db replica create \
  --name myDatabase \
  --resource-group myResourceGroup \
  --server primary-server \
  --partner-server secondary-server \
  --partner-resource-group myResourceGroup

# AKS クラスターの作成
az aks create \
  --resource-group myResourceGroup \
  --name myAKSCluster \
  --node-count 3 \
  --enable-addons monitoring \
  --generate-ssh-keys \
  --network-plugin azure \
  --enable-managed-identity

# 資格情報の取得
az aks get-credentials \
  --resource-group myResourceGroup \
  --name myAKSCluster

# deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
spec:
  replicas: 3
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: myregistry.azurecr.io/myapp:v1
        ports:
        - containerPort: 80
        resources:
          requests:
            cpu: 100m
            memory: 128Mi
          limits:
            cpu: 250m
            memory: 256Mi
---
apiVersion: v1
kind: Service
metadata:
  name: myapp-service
spec:
  type: LoadBalancer
  ports:
  - port: 80
  selector:
    app: myapp

# デプロイ
kubectl apply -f deployment.yaml

# スケール
kubectl scale deployment myapp --replicas=5

# イメージの更新
kubectl set image deployment/myapp myapp=myregistry.azurecr.io/myapp:v2

// main.bicep
param location string = resourceGroup().location
param vmName string = 'myVM'
param adminUsername string

@secure()
param adminPassword string

resource vnet 'Microsoft.Network/virtualNetworks@2021-02-01' = {
  name: 'myVNet'
  location: location
  properties: {
    addressSpace: {
      addressPrefixes: [
        '10.0.0.0/16'
      ]
    }
    subnets: [
      {
        name: 'default'
        properties: {
          addressPrefix: '10.0.1.0/24'
        }
      }
    ]
  }
}

resource nic 'Microsoft.Network/networkInterfaces@2021-02-01' = {
  name: '${vmName}-nic'
  location: location
  properties: {
    ipConfigurations: [
      {
        name: 'ipconfig1'
        properties: {
          subnet: {
            id: vnet.properties.subnets[0].id
          }
          privateIPAllocationMethod: 'Dynamic'
        }
      }
    ]
  }
}

resource vm 'Microsoft.Compute/virtualMachines@2021-03-01' = {
  name: vmName
  location: location
  properties: {
    hardwareProfile: {
      vmSize: 'Standard_B2s'
    }
    osProfile: {
      computerName: vmName
      adminUsername: adminUsername
      adminPassword: adminPassword
    }
    storageProfile: {
      imageReference: {
        publisher: 'Canonical'
        offer: 'UbuntuServer'
        sku: '18.04-LTS'
        version: 'latest'
      }
    }
    networkProfile: {
      networkInterfaces: [
        {
          id: nic.id
        }
      ]
    }
  }
}

output vmId string = vm.id

# Bicep テンプレートのデプロイ
az deployment group create \
  --resource-group myResourceGroup \
  --template-file main.bicep \
  --parameters adminUsername=azureuser adminPassword='P@ssw0rd123!'

# デプロイ前の検証
az deployment group validate \
  --resource-group myResourceGroup \
  --template-file main.bicep

# Azure Advisor の推奨事項の使用
az advisor recommendation list \
  --category Cost \
  --output table

# VM の自動シャットダウンの構成
az vm auto-shutdown \
  --resource-group myResourceGroup \
  --name myVM \
  --time 1900 \
  --email [email protected]

# 予算の作成
az consumption budget create \
  --budget-name monthly-budget \
  --amount 1000 \
  --time-grain Monthly \
  --start-date 2024-01-01 \
  --end-date 2024-12-31

# 制限の厳しいルールを持つ NSG の作成
az network nsg create \
  --resource-group myResourceGroup \
  --name myNSG

# デフォルトですべての受信を拒否し、特定のもののみを許可
az network nsg rule create \
  --resource-group myResourceGroup \
  --nsg-name myNSG \
  --name DenyAllInbound \
  --priority 4096 \
  --access Deny \
  --direction Inbound

# 保存時の暗号化の有効化
az storage account update \
  --name mystorageaccount \
  --resource-group myResourceGroup \
  --encryption-services blob file

# SQL の TDE の有効化
az sql db tde set \
  --resource-group myResourceGroup \
  --server myserver \
  --database mydatabase \
  --status Enabled

# Key Vault の作成
az keyvault create \
  --name myKeyVault \
  --resource-group myResourceGroup \
  --location eastus

# シークレットの保存
az keyvault secret set \
  --vault-name myKeyVault \
  --name DatabasePassword \
  --value 'P@ssw0rd123!'

# セカンダリデータベースの作成 (読み取りレプリカ)
az sql db replica create \
  --resource-group myResourceGroup \
  --server primary-server \
  --name myDatabase \
  --partner-server secondary-server \
  --partner-resource-group myResourceGroup

# セカンダリへのフェイルオーバー
az sql db replica set-primary \
  --name myDatabase \
  --resource-group myResourceGroup \
  --server secondary-server

# フェイルオーバーグループの作成
az sql failover-group create \
  --name my-failover-group \
  --resource-group myResourceGroup \
  --server primary-server \
  --partner-server secondary-server \
  --partner-resource-group myResourceGroup \
  --failover-policy Automatic \
  --grace-period 1 \
  --add-db myDatabase

# フェイルオーバーの開始
az sql failover-group set-primary \
  --name my-failover-group \
  --resource-group myResourceGroup \
  --server secondary-server

// .NET の例
string connectionString = 
    "Server=tcp:my-failover-group.database.windows.net,1433;" +
    "Initial Catalog=myDatabase;" +
    "Persist Security Info=False;" +
    "User ID=myuser;" +
    "Password=mypassword;" +
    "MultipleActiveResultSets=False;" +
    "Encrypt=True;" +
    "TrustServerCertificate=False;" +
    "Connection Timeout=30;" +
    "ApplicationIntent=ReadWrite;";  // またはセカンダリの場合は ReadOnly

# レプリケーションラグの確認
az sql db replica list-links \
  --name myDatabase \
  --resource-group myResourceGroup \
  --server primary-server

# メトリクスの表示
az monitor metrics list \
  --resource /subscriptions/.../databases/myDatabase \
  --metric "connection_successful" \
  --start-time 2024-11-26T00:00:00Z

// C# HTTP トリガー
using System.IO;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.Http;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Logging;

public static class HttpTriggerFunction
{
    [FunctionName("ProcessOrder")]
    public static async Task<IActionResult> Run(
        [HttpTrigger(AuthorizationLevel.Function, "post", Route = null)] HttpRequest req,
        [Queue("orders", Connection = "AzureWebJobsStorage")] IAsyncCollector<string> orderQueue,
        ILogger log)
    {
        log.LogInformation("Processing order request");
        
        string requestBody = await new StreamReader(req.Body).ReadToEndAsync();
        
        // Validate and process
        if (string.IsNullOrEmpty(requestBody))
        {
            return new BadRequestObjectResult("Order data is required");
        }
        
        // Add to queue for processing
        await orderQueue.AddAsync(requestBody);
        
        return new OkObjectResult(new { message = "Order queued successfully" });
    }
}

# Function App の作成
az functionapp create \
  --resource-group myResourceGroup \
  --consumption-plan-location eastus \
  --runtime dotnet \
  --functions-version 4 \
  --name myFunctionApp \
  --storage-account mystorageaccount

# ローカルからのデプロイ
func azure functionapp publish myFunctionApp

# アプリケーション設定の構成
az functionapp config appsettings set \
  --name myFunctionApp \
  --resource-group myResourceGroup \
  --settings \
    "DatabaseConnection=..." \
    "ApiKey=..."

# Application Insights の有効化
az functionapp config appsettings set \
  --name myFunctionApp \
  --resource-group myResourceGroup \
  --settings "APPINSIGHTS_INSTRUMENTATIONKEY=..."

// function.json
{
  "bindings": [
    {
      "type": "queueTrigger",
      "direction": "in",
      "name": "orderMessage",
      "queueName": "orders",
      "connection": "AzureWebJobsStorage"
    },
    {
      "type": "blob",
      "direction": "out",
      "name": "outputBlob",
      "path": "processed/{rand-guid}.json",
      "connection": "AzureWebJobsStorage"
    },
    {
      "type": "cosmosDB",
      "direction": "out",
      "name": "outputDocument",
      "databaseName": "OrdersDB",
      "collectionName": "Orders",
      "createIfNotExists": true,
      "connectionStringSetting": "CosmosDBConnection"
    }
  ]
}

// オーケストレーター関数
[FunctionName("OrderOrchestrator")]
public static async Task<object> RunOrchestrator(
    [OrchestrationTrigger] IDurableOrchestrationContext context)
{
    var order = context.GetInput<Order>();
    
    // Step 1: Validate order
    var isValid = await context.CallActivityAsync<bool>("ValidateOrder", order);
    if (!isValid)
    {
        return new { status = "Invalid order" };
    }
    
    // Step 2: Process payment
    var paymentResult = await context.CallActivityAsync<PaymentResult>("ProcessPayment", order);
    
    // Step 3: Update inventory
    await context.CallActivityAsync("UpdateInventory", order);
    
    // Step 4: Send notification
    await context.CallActivityAsync("SendNotification", order);
    
    return new { status = "Order processed", orderId = order.Id };
}

// host.json
{
  "version": "2.0",
  "extensions": {
    "queues": {
      "maxPollingInterval": "00:00:02",
      "batchSize": 16,
      "maxDequeueCount": 5,
      "newBatchThreshold": 8
    },
    "http": {
      "routePrefix": "api",
      "maxConcurrentRequests": 100,
      "maxOutstandingRequests": 200
    }
  },
  "functionTimeout": "00:05:00"
}

# VNet ピアリングの作成 (A から B)
az network vnet peering create \
  --name vnetA-to-vnetB \
  --resource-group myResourceGroup \
  --vnet-name vnetA \
  --remote-vnet /subscriptions/.../resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/vnetB \
  --allow-vnet-access \
  --allow-forwarded-traffic

# リバースピアリングの作成 (B から A)
az network vnet peering create \
  --name vnetB-to-vnetA \
  --resource-group myResourceGroup \
  --vnet-name vnetB \
  --remote-vnet /subscriptions/.../resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/vnetA \
  --allow-vnet-access \
  --allow-forwarded-traffic

# ピアリングステータスの確認
az network vnet peering show \
  --name vnetA-to-vnetB \
  --resource-group myResourceGroup \
  --vnet-name vnetA \
  --query peeringState

# 共有サービスを備えたハブ VNet
# さまざまなアプリケーション/チーム向けのスポーク VNet

# ゲートウェイ転送の有効化 (ハブに VPN ゲートウェイがある場合)
az network vnet peering update \
  --name hub-to-spoke1 \
  --resource-group myResourceGroup \
  --vnet-name hub-vnet \
  --set allowGatewayTransit=true

# リモートゲートウェイの使用 (スポークがハブのゲートウェイを使用)
az network vnet peering update \
  --name spoke1-to-hub \
  --resource-group myResourceGroup \
  --vnet-name spoke1-vnet \
  --set useRemoteGateways=true

# ピアリングメトリクスの表示
az monitor metrics list \
  --resource /subscriptions/.../virtualNetworks/vnetA \
  --metric "BytesSentRate" \
  --start-time 2024-11-26T00:00:00Z