Skip to main content

☁️ Azure App Services Short Notes


🟢 What is Azure App Service?

  • A Platform as a Service (PaaS) in Azure to host web apps, APIs, and mobile backends.
  • You focus on writing code → Azure handles infrastructure, scaling, patching, and security.
  • Supports multiple frameworks: .NET, Java, Python, Node.js, PHP, Ruby, Docker containers.

👉 Think of it like: “Just deploy your code, we’ll handle the servers.”

🟢 Key Features

  • Deployment Slots → test in staging before swapping to production (zero-downtime).
  • Scaling →
    • Vertical scaling → increase CPU/RAM.
    • Horizontal scaling → add more instances.
  • Authentication & Authorization → built-in support for Entra ID (Azure AD), Google, Facebook, GitHub.
  • DevOps Integration → CI/CD with GitHub Actions, Azure DevOps, Bitbucket, or FTP.
  • Monitoring → Deep integration with Application Insights for performance, exceptions, and telemetry.
  • Custom Domains & SSL → easy binding of your own domain with HTTPS.
  • Networking → VNET integration, hybrid connections, private endpoints.

🟢 App Service Plans (Pricing Tiers)

  • Free & Shared → testing, small apps.
  • Basic → simple production apps, dedicated VM.
  • Standard → scaling, staging slots, daily backups.
  • Premium → better performance, VNET, advanced scaling.
  • Isolated → dedicated environment (App Service Environment) for enterprise/secure workloads.

👉 Interview Tip:
They may ask: “If your app needs VNET access, which plan do you choose?” → Answer: Premium or Isolated.

🟢 Deployment Options

  • Continuous Deployment → GitHub, Azure DevOps, Bitbucket.
  • Manual Deployment → FTP, ZIP deploy, Visual Studio publish.
  • Containers → Run custom Docker images or pull from ACR/Docker Hub.

🟢 Security

  • Built-in Entra ID / OAuth authentication.
  • Integration with Azure Key Vault (store secrets securely).
  • Use Managed Identity → avoid hardcoding credentials.

🟢 Monitoring & Diagnostics

  • Integrated with Application Insights → monitor requests, failures, and performance.
  • Log Streaming → real-time logs for debugging.
  • Kudu Console → advanced diagnostics, environment info, and process explorer.

🟢 Common Interview Questions

  1. What is Azure App Service?
  2. Difference between App Service and Virtual Machines?
  3. What are Deployment Slots?
  4. How does scaling work in App Service?
  5. Explain App Service Plans (Free vs. Premium vs. Isolated).
  6. How do you secure secrets in App Service?
  7. How do you integrate App Service with Key Vault?
  8. How do you enable CI/CD with App Service?
  9. Difference between App Service and Function App?
  10. What are some limitations of App Service?

🟢 Pros & Cons

✅ Pros

  • Easy to set up and scale.
  • Multi-language support.
  • Deep Azure integration (Key Vault, App Insights, VNET).
  • Zero-downtime deployment (slots).

❌ Cons

  • Cost increases with scaling.
  • Some limitations in Free/Shared tiers.
  • Less control compared to VMs or AKS.

✅ Quick Recap

  • Azure App Service = PaaS for web apps & APIs.
  • Key features → deployment slots, scaling, CI/CD, built-in auth.
  • Plans → Free → Basic → Standard → Premium → Isolated.
  • Always mention → App Insights, Key Vault integration, Deployment Slots in interviews.


Comments

Post a Comment

Popular posts from this blog

🏗️ Deep Dive: Understanding Every Concept in Microsoft Entra API Onboarding for .NET Developers

When working with Microsoft Entra (formerly Azure Active Directory), you’ll hear terms like App Registration, Tenant, Client ID, Audience, Scopes, Roles, Tokens, OBO flow , and more. If you’re new, it can feel overwhelming. This guide breaks down every key term and concept , with definitions, examples, and how they connect when you onboard and consume a new API. 🔹 1. Tenant Definition : A tenant in Entra ID is your organization’s dedicated, isolated instance of Microsoft Entra. Think of it like : Your company’s identity directory. Example : contoso.onmicrosoft.com is a tenant for Contoso Ltd. 🔹 2. App Registration Definition : The process of registering an application in Entra to give it an identity and permission to use Microsoft identity platform. Why needed : Without registration, Entra doesn’t know about your app. What it creates : Application (Client) ID – unique identifier for your app Directory (Tenant) ID – your organization’s ID Types of apps : Web ...
Post a Comment
Read more

🗑️ Garbage Collection & Resource Management in .NET (C#) — Beginner Friendly Guide

When you start working with .NET and C#, one of the biggest advantages is that you don’t need to manually manage memory like in C or C++. The Garbage Collector (GC) does most of the work for you. But here’s the catch — not everything is managed automatically. Some resources like files, database connections, sockets, and native memory still need special handling. This blog will help you understand: ✔ How the GC works ✔ What are managed vs unmanaged resources ✔ The difference between Dispose , Finalize , and using ✔ The Dispose pattern with examples ✔ Best practices every C# developer should know 1) How Garbage Collection Works in .NET Managed resources → Normal .NET objects (string, List, etc.). GC frees them automatically. Unmanaged resources → External resources like file handles, database connections, sockets, native memory. GC cannot clean them up — you must do it. 👉 GC uses a Generational Model for performance: Gen 0 : Short-lived objects (local variables, t...
Post a Comment
Read more

☁️ Azure Key vault Short Notes

🟢 What is Azure Key Vault? A cloud service for securely storing and accessing secrets, keys, and certificates . Removes the need to keep secrets (like connection strings, passwords, API keys) inside code or config files. Provides centralized secret management, encryption, and access control . 👉 Think of it like a secure password manager but for your applications. 🟢 Key Features Secrets → store text values (e.g., DB connection string, API key). Keys → store cryptographic keys (RSA, EC) for encryption, signing. Certificates → store/manage SSL/TLS certificates. Access Control → Access Policies (older model). Azure RBAC (modern, preferred). Integration → works with App Service, Functions, AKS, VMs, SQL DB, etc. Logging → audit who accessed secrets via Azure Monitor / Diagnostic Logs. 🟢 Why Use Key Vault? Security → secrets are encrypted with HSM (Hardware Security Modules). Compliance → meet industry standards (PCI-DSS, ISO, GDPR). Automation → aut...
Post a Comment
Read more