Domina Microsoft Azure con el Editor Interactivo
Portal, CLI, ARM/Bicep, VMs, App Service, Functions, AKS, Cosmos DB, Redis, VNets, DevOps, Key Vault, Monitor — y los patrones reales que usan los equipos enterprise: Entra ID + MSAL, Spring Boot resource server, Service Bus, Azure Artifacts, Helm sobre AKS y Key Vault a escala. 36 lecciones con ejercicios y quizzes.
Fundamentos
0/8 vistasConceptos cloud, portal, CLI, ARM/Bicep, RBAC, costes, policy y tags.
- Paso 1
Azure 1: conceptos cloud y portal de Azure
Microsoft Azure is one of the three major cloud platforms. Understanding cloud computing models (Iaa...
Comenzar lección - Paso 2
Azure 2: grupos de recursos y suscripciones
Everything in Azure lives inside a hierarchy: Management Groups > Subscriptions > Resource Groups > ...
Comenzar lección - Paso 3
Azure 3: lo esencial de Azure CLI
The Azure CLI (`az`) is the primary command-line tool for managing Azure resources. Learning it is e...
Comenzar lección - Paso 4
Azure 4: plantillas ARM y Bicep
Infrastructure as Code (IaC) is how you define Azure resources declaratively. ARM templates use JSON...
Comenzar lección - Paso 5
Azure 5: control de acceso basado en roles (RBAC)
Azure RBAC controls who can do what on which resources. It uses role assignments that combine a prin...
Comenzar lección - Paso 6
Azure 6: gestión de costes y presupuestos
Azure costs can spiral quickly without monitoring. Cost Management + Billing helps you analyze spend...
Comenzar lección - Paso 7
Azure 7: Azure Policy y gobernanza
Azure Policy enforces organizational standards and assesses compliance at scale. Policies can audit,...
Comenzar lección - Paso 8
Azure 8: tags y organización de recursos
Tags are key-value pairs attached to Azure resources for organization, cost tracking, automation, an...
Comenzar lección
Cómputo
0/6 vistasVMs, App Service, Functions, Container Instances, AKS, Logic Apps.
- Paso 9
Azure 9: máquinas virtuales
Azure VMs are the core IaaS compute offering. Full control over OS, runtime, and configuration....
Comenzar lección - Paso 10
Azure 10: Azure App Service
App Service is Azure's PaaS for hosting web apps, REST APIs, and mobile backends. Deploy code or con...
Comenzar lección - Paso 11
Azure 11: Azure Functions (serverless)
Azure Functions is the serverless compute service. Write code that runs in response to events and pa...
Comenzar lección - Paso 12
Azure 12: Container Instances
Azure Container Instances (ACI) is the fastest way to run containers in Azure. No VM management, no ...
Comenzar lección - Paso 13
Azure 13: Azure Kubernetes Service (AKS)
AKS is Azure's managed Kubernetes. Azure manages the control plane; you manage worker nodes....
Comenzar lección - Paso 14
Azure 14: Logic Apps y automatización de flujos
Logic Apps is a low-code platform for building automated workflows that integrate services and data....
Comenzar lección
Almacenamiento y datos
0/5 vistasBlob, Table/Queue, Cosmos DB, SQL Database y Cache for Redis.
- Paso 15
Azure 15: Blob Storage
Azure Blob Storage is massively scalable object storage for unstructured data — images, videos, logs...
Comenzar lección - Paso 16
Azure 16: Table Storage y Queue Storage
Table Storage is a NoSQL key-value store. Queue Storage provides reliable messaging between componen...
Comenzar lección - Paso 17
Azure 17: Azure Cosmos DB
Cosmos DB is Azure's globally distributed, multi-model NoSQL database with single-digit ms reads and...
Comenzar lección - Paso 18
Azure 18: Azure SQL Database
Azure SQL Database is a fully managed relational database engine based on SQL Server with auto-patch...
Comenzar lección - Paso 19
Azure 19: Azure Cache for Redis
Azure Cache for Redis provides an in-memory data store for caching, session management, and real-tim...
Comenzar lección
Red
0/4 vistasVNets, NSGs, Load Balancer, App Gateway, DNS y dominios personalizados.
- Paso 20
Azure 20: redes virtuales y subredes
Azure VNet is the foundation of Azure networking — isolation, segmentation, and connectivity for clo...
Comenzar lección - Paso 21
Azure 21: Network Security Groups (NSGs)
NSGs are Azure's built-in firewall for filtering traffic based on IP, port, and protocol....
Comenzar lección - Paso 22
Azure 22: Load Balancer y Application Gateway
Azure Load Balancer (Layer 4) and Application Gateway (Layer 7 with WAF) distribute traffic across b...
Comenzar lección - Paso 23
Azure 23: Azure DNS y dominios personalizados
Azure DNS hosts your DNS zones on Azure's global anycast network for both public and private resolut...
Comenzar lección
DevOps y CI/CD
0/4 vistasAzure Pipelines, GitHub Actions, Terraform y ACR.
- Paso 24
Azure 24: pipelines de Azure DevOps
Azure DevOps Pipelines provides CI/CD with YAML-based pipelines that live in your repo....
Comenzar lección - Paso 25
Azure 25: GitHub Actions para Azure
GitHub Actions integrates natively with Azure using official actions for login, deployment, and reso...
Comenzar lección - Paso 26
Azure 26: Terraform sobre Azure
Terraform is a multi-cloud IaC tool. The AzureRM provider lets you manage Azure resources with HCL....
Comenzar lección - Paso 27
Azure 27: Azure Container Registry (ACR)
ACR is a managed Docker registry integrated with AKS, App Service, and Azure DevOps....
Comenzar lección
Seguridad y observabilidad
0/3 vistasKey Vault, Azure Monitor y Application Insights.
- Paso 28
Azure 28: Azure Key Vault
Key Vault centralizes secrets, encryption keys, and certificates. Never store secrets in code....
Comenzar lección - Paso 29
Azure 29: Azure Monitor y Application Insights
Azure Monitor is the unified monitoring platform. App Insights adds APM with request tracking and an...
Comenzar lección - Paso 30
Azure 30: arquitectura cloud — uniendo todo
Final lesson! Combine everything to architect a complete solution using the Azure Well-Architected F...
Comenzar lección
Patrones de producción
0/6 vistasEntra ID en SPA y Spring, Service Bus, Artifacts, Helm y Key Vault a escala.
- Paso 31
Azure 31: Entra ID y MSAL.js — autenticación SPA
Microsoft Entra ID (formerly Azure AD) is Azure's identity platform. MSAL.js lets Single-Page Apps s...
Comenzar lección - Paso 32
Azure 32: Entra ID + Spring Boot — Resource Server
A resource server accepts a JWT access token and validates it before serving data. Spring Boot apps ...
Comenzar lección - Paso 33
Azure 33: Service Bus — topics, queues y dead-letter
Azure Service Bus is the enterprise messaging broker — **queues** for 1-to-1 work distribution, **to...
Comenzar lección - Paso 34
Azure 34: Azure Artifacts — feeds privados de paquetes
Azure Artifacts hosts private Maven, npm, NuGet, and Python package feeds inside Azure DevOps. Feeds...
Comenzar lección - Paso 35
Azure 35: Helm en AKS — overlays de values
Helm is the package manager for Kubernetes. A **chart** is a templated bundle of manifests + a `valu...
Comenzar lección - Paso 36
Azure 36: integración con Key Vault a escala — pipeline, CSI y App Service
A Key Vault full of secrets is only useful if your workloads can read them safely. In practice there...
Comenzar lección
Patrones de producción Lythia
Nuevo0/24 vistasEl stack real completo: pipeline-templates, agentes VMSS, Service Bus, AKS multi-cluster, Istio + Argo Rollouts, terraform-common, Datadog APM y despliegue end-to-end.
- Paso 37
Azure 37: plantillas de pipeline YAML — el patrón `extends` + `parameters`
Lythia has ~35 service repos. Each repo's `pipelines/{env}.yml` is tiny — 30-50 lines — because all ...
Comenzar lección - Paso 38
Azure 38: Variable Groups y Service Connections — la columna vertebral de los secretos
Pipeline YAML is public in git. The credentials it uses to talk to Azure (ARM SPN, AKS kubeconfig, A...
Comenzar lección - Paso 39
Azure 39: GitVersion → tag de imagen → versión del chart
Every artifact Lythia ships — a Docker image, a Helm chart, an npm package, a Maven JAR — needs the ...
Comenzar lección - Paso 40
Azure 40: Docker build & push multi-registro — el patrón loop
Lythia runs one ACR per environment: `drivewaydevcontainerregistry.azurecr.io`, `drivewaytestcontain...
Comenzar lección - Paso 41
Azure 41: agentes de build ADO auto-hospedados en VMSS — pipeline-agents
Microsoft-hosted ADO agents are fine for small projects, but Lythia builds JVMs with private Gradle ...
Comenzar lección - Paso 42
Azure 42: Service Bus con módulos terraform-common publisher/subscriber
Lythia's microservices talk asynchronously through **Azure Service Bus topics**: `availability`, `ec...
Comenzar lección - Paso 43
Azure 43: topología AKS multi-cluster — apps + elasticsearch
Lythia runs **two** AKS clusters per environment: `AKS-apps-k8s-{env}` for the customer-facing micro...
Comenzar lección - Paso 44
Azure 44: Helm Universal Charts — api | headless | cron | frontend
Instead of every service maintaining its own chart, Lythia ships **four** charts in `platform-univer...
Comenzar lección - Paso 45
Azure 45: Istio VirtualService + DestinationRule para canary
Istio is the data plane that turns AKS into a real service mesh: mTLS between every pod, weighted tr...
Comenzar lección - Paso 46
Azure 46: pasos de canary y Analysis en Argo Rollouts
Argo Rollouts is the controller that orchestrates Lythia's canary releases. The `api` universal char...
Comenzar lección - Paso 47
Azure 47: estrategias por entorno — dev=directo, uat=canary opcional, prod=canary+promote
Different environments need different release safety. Lythia's `mesh.canary.requiresApproval` value ...
Comenzar lección - Paso 48
Azure 48: nombrado de Key Vault por servicio — `{service}-{abrev}-kv-{env}`
Lythia provisions a Key Vault **per service per environment**, not one giant vault per env. The nami...
Comenzar lección - Paso 49
Azure 49: PostgreSQL Flex por servicio + imágenes auxiliares de Liquibase
Most Lythia services own their own **Azure Database for PostgreSQL Flexible Server** instance. The h...
Comenzar lección - Paso 50
Azure 50: feed npm de Azure Artifacts — `@driveway/react` (Lib)
Lythia's shared React component library lives at `Lib/` and is published as `@driveway/react` to a *...
Comenzar lección - Paso 51
Azure 51: Maven/Gradle en Azure Artifacts — `ado_artifacts_token` para libs backend
Lythia's Java/Kotlin services publish shared libraries to a Maven feed in Azure Artifacts. The `Dock...
Comenzar lección - Paso 52
Azure 52: AzureKeyVault@2 encadenado con Helm `--set secrets`
The final piece of Lythia's secret-flow puzzle: how a value in Key Vault becomes an environment vari...
Comenzar lección - Paso 53
Azure 53: Terraform plan/apply con gating por exit code 2
`pipeline-templates/cd/stages/terraform-deploy.yaml` is Lythia's IaC entry point. It runs `terraform...
Comenzar lección - Paso 54
Azure 54: createprodcr — work items de Change Request para prod
Prod deploys at Lythia require a **Change Request** (CR) work item in Azure Boards before the apply ...
Comenzar lección - Paso 55
Azure 55: Front Door + APIM + AKS Ingress — el camino del tráfico norte-sur
A customer request reaching `cart-api` traverses: **Azure Front Door** (global TLS termination, WAF,...
Comenzar lección - Paso 56
Azure 56: despliegue end-to-end — desde `git push v1.5.0` al promote en prod
Time to wire everything together. A merge to `cart-service/main` with `+semver: minor` and a `v1.5.0...
Comenzar lección - Paso 57
Azure 57: Datadog APM cableado a través del universal chart
Every Lythia backend service ships with **Datadog APM** baked in: a `dd-java-agent.jar` copied into ...
Comenzar lección - Paso 58
Azure 58: App Registrations en AAD vía terraform-common
Every Lythia API that authenticates with Entra ID needs an **AAD App Registration**: a service princ...
Comenzar lección - Paso 59
Azure 59: tagging estandarizado — `terraform-common/azure/tags`
Lythia has thousands of Azure resources across 5 environments. Without standardised tagging, asking ...
Comenzar lección - Paso 60
Azure 60: servicios multi-componente — `services[]` + `auxiliaryImages[]`
Many Lythia services are not a single container. `offer-api` ships an `api` (REST endpoint), an `off...
Comenzar lección
Fiabilidad y operaciones
0/7 vistasHealth probes, SLOs y error budgets, tracing distribuido, logging estructurado, retries/timeouts/circuit breakers, failover multi-región y un capstone de chaos engineering.
- Paso 61
Azure 61: Health Probes — Liveness, Readiness & Startup
Resilience starts with honesty: a pod must tell the platform when it's alive, when it's ready for tr...
Comenzar lección - Paso 62
Azure 62: SLOs, SLIs & Error Budgets
You can't prioritize reliability without a number. SLIs measure, SLOs target, and the error budget t...
Comenzar lección - Paso 63
Azure 63: Distributed Tracing with OpenTelemetry
When a request crosses five services, a single stack trace is useless. Distributed tracing stitches ...
Comenzar lección - Paso 64
Azure 64: Structured Logging & Dashboards
A log line is only useful if a machine can query it. Structured logs — JSON with consistent fields —...
Comenzar lección - Paso 65
Azure 65: Retries, Timeouts & Circuit Breakers
A flaky dependency shouldn't take you down with it. Timeouts bound the wait, retries paper over blip...
Comenzar lección - Paso 66
Azure 66: Multi-Region Failover & Traffic Manager
A single region is a single point of failure. Health-based global routing sends users to a healthy r...
Comenzar lección - Paso 67
Azure 67: Capstone — Chaos Engineering & a Resilience Scorecard
Chaos engineering is the discipline of breaking things on purpose, in controlled experiments, to fin...
Comenzar lección
Infraestructura como Código — a fondo
Nuevo0/3 vistasEscribí módulos Terraform reutilizables, iterá recursos con for_each y bloques dynamic, y templatizá charts de Helm desde values — después practicá los comandos en el Command Lab.
- Paso 68
Azure 68: Terraform Module Authoring
A reusable Terraform module is a folder with variables.tf (inputs), main.tf (resources), and outputs...
Comenzar lección - Paso 69
Azure 69: Terraform for_each & dynamic blocks
for_each creates one resource per element of a map/set, keyed stably. dynamic blocks generate repeat...
Comenzar lección - Paso 70
Azure 70: Helm Chart Templating
A Helm template renders Kubernetes manifests by interpolating values. Change values.yaml and the sam...
Comenzar lección