Home Courses Azure Cloud Architecture
☁ Microsoft Azure 🏗 Solutions Architecture ✔ 2 Levels Available

Microsoft Azure
Cloud Architecture

A master 48-hour hands-on curriculum engineered for enterprise cloud architects and infrastructure specialists. Master Microsoft Entra ID (Azure AD) & RBAC, Hub-and-Spoke VNets, VMSS & Serverless Microservices, Azure SQL & Cosmos DB Global Replication, Azure Bicep IaC, Enterprise Landing Zones (CAF), Zero-Trust Edge Security (Firewall Premium/Private Link), Agentless Migrations with Azure Migrate, Multi-Region BCDR with Azure Site Recovery (ASR), Enterprise AKS, and FinOps aligned with Microsoft Certified: Azure Administrator Associate (AZ-104) and Azure Solutions Architect Expert (AZ-305).

🎯
Format
Theory + Lab/Assignments (48 Hours)
🏆
Certificate
Arich Certified Azure Architect
Enrol Now →
Course Code
AZURE-ARCH
Click a Level to View its Syllabus
L1
AZ-104 · Administrator Associate
7 Modules · Core Infrastructure & IaC
›
L2
AZ-305 · Solutions Architect Expert
6 Modules · Enterprise Architecture & DR
›
📄 Azure Cloud Architecture — Associate Level (AZ-104 Aligned)
L1
AZ-104
Azure Foundations, Networking, Compute, Storage, Databases & IaC
01
Identity & Access Management (Microsoft Entra ID & RBAC)
▼
1.1 Microsoft Entra ID & RBAC: Microsoft Entra ID (Azure AD), Enterprise Applications, Custom RBAC Roles, Privileged Identity Management (PIM)
Conditional Access Policies, Multi-Factor Authentication (MFA), Subscriptions & Management Scopes
Hands-on Lab: Configure Fine-Grained Role-Based Access Control (RBAC) and Entra ID Conditional Access Rules
Mini-Capstone 1: Enterprise Identity Federation & Conditional Access Security Matrix
02
Virtual Networking & Hybrid Connectivity
▼
2.1 Azure Virtual Network Topology: VNets, Subnets, Network Security Groups (NSGs), Application Security Groups (ASGs), User Defined Routes (UDRs)
2.2 Hybrid & Global Networking: VNet Peering, Azure VPN Gateway, Azure ExpressRoute, Azure Front Door, Azure Application Gateway (WAF)
Hands-on Lab 1: Build Hub-and-Spoke VNet Topology with Custom Routing Tables and Network Security Groups
Hands-on Lab 2: Configure Global VNet Peering and Azure Front Door Route Acceleration with WAF Rules
Mini-Capstone 2 & 3: Isolated Enterprise Hub-and-Spoke Network Architecture & Global Hybrid Interconnect Infrastructure
03
Azure Compute Solutions & Serverless Microservices
▼
3.1 Infrastructure & App Services: Azure VMs, Virtual Machine Scale Sets (VMSS), Azure App Services, App Service Plans, Availability Zones
3.2 Containers & Serverless: Azure Container Instances (ACI), Azure Kubernetes Service (AKS) Basics, Azure Functions, Azure Event Grid
Hands-on Lab 1: Deploy Autoscaling Multi-Zone Web App using VMSS behind Azure Load Balancer
Hands-on Lab 2: Develop Event-Driven Microservice using Azure Functions Triggered by Azure Blob Storage
Mini-Capstone 4 & 5: Highly Available Web Application Infrastructure & Serverless Event-Driven Application Pipeline
04
Azure Storage Infrastructure & Data Lake Gen2
▼
4.1 Blob Storage & Files: Azure Blob Storage Access Tiers (Hot/Cool/Cold/Archive), Azure Data Lake Storage Gen2 (Hierarchical Namespace)
Azure Files, Azure File Sync, Private Endpoints, Immutable Storage & Lifecycle Management Policies
Hands-on Lab: Provision Storage Account with Private Endpoints, Blob Lifecycle Management & Immutable Storage Policies
Mini-Capstone 6: Secure Data Lake Storage Architecture with Private Network Access
05
Azure Database Solutions (SQL & Cosmos DB)
▼
5.1 SQL & NoSQL Databases: Azure SQL Database, Elastic Pools, Azure SQL Managed Instance, Business Critical vs General Purpose tiers
Azure Cosmos DB: Multi-Model APIs, Consistency Levels, Multi-Region Writes & Global Distribution
Hands-on Lab: Provision Azure SQL Auto-Failover Groups and Cosmos DB Global Multi-Region Replication Cluster
Mini-Capstone 7: Multi-Region High Performance Globally Distributed Database Architecture
06
Monitoring, Security & Observability Governance
▼
6.1 Observability & Governance: Azure Monitor, Log Analytics Workspaces, Application Insights Telemetry, Azure Workbooks
Azure Policy Definition & Initiatives, Microsoft Defender for Cloud Security Posture Management
Hands-on Lab: Configure Log Analytics Workspace with Custom KQL Queries and Azure Policy Compliance Guardrails
Mini-Capstone 8: Automated Enterprise Monitoring & Security Compliance Dashboard
07
Infrastructure as Code (IaC) & DevOps Automation (Bicep)
▼
7.1 Infrastructure as Code: ARM JSON Templates vs Azure Bicep DSL, Modules, Parameters, Variables, Outputs
Azure Automation, Azure DevOps Pipelines & GitHub Actions integration for Declarative Infrastructure Deployment
Hands-on Lab: Author Modular Azure Bicep Templates to Deploy Complete Multi-Tier Infrastructure Stack
Mini-Capstone 9: Automated CI/CD Infrastructure Deployment Pipeline with Azure Bicep
📄 Azure Cloud Architecture — Expert Level (AZ-305 Aligned)
L2
AZ-305
Enterprise Landing Zones, Zero-Trust Security, Cloud Migration, BCDR & FinOps
01
Cloud Adoption Framework (CAF) & Enterprise Landing Zones
▼
8.1 Enterprise-Scale Landing Zones: Azure Management Groups hierarchy, Subscription Vending Machines, Policy-Driven Governance
Azure Blueprints, Resource Graph queries, Enterprise Agreement (EA) & Microsoft Customer Agreement (MCA) scopes
Hands-on Lab: Deploy Enterprise-Scale Architecture using Management Groups, Custom Policies, and Subscription Vending Workflows
Enterprise Capstone 10: Multi-Subscription Enterprise Landing Zone Framework with Automated Compliance
02
Advanced Zero-Trust Perimeter Security & Encryption
▼
9.1 Zero-Trust Architecture: Azure Firewall Premium (IDPS & TLS Inspection), Azure Key Vault (HSM, Key Rotation, RBAC Access)
Azure Private Link, Private DNS Zones, Microsoft Defender for Cloud CSPM & CWPP threat protection
Hands-on Lab: Deploy Azure Firewall Premium with IDPS Features and Private Link Endpoints for Enterprise Apps
Enterprise Capstone 11: Zero-Trust Perimeter & Complete End-to-End Encryption Architecture
03
Enterprise Migration & Hybrid Cloud with Azure Arc
▼
10.1 Cloud Migration Strategies: Azure Migrate Discovery & Assessment, Database Migration Service (DMS), Data Box
Azure Arc for Hybrid Servers, Kubernetes & Data Services, Governance across On-Premises and Multi-Cloud
Hands-on Lab: Perform Agentless VM Migration from Hyper-V/VMware to Azure via Azure Migrate & Enroll Hybrid Servers with Azure Arc
Enterprise Capstone 12: Hybrid Enterprise Migration & Azure Arc Multi-Cloud Governance
04
High Availability, Business Continuity & Disaster Recovery (BCDR)
▼
11.1 Enterprise Business Continuity: Azure Site Recovery (ASR), Multi-Region Active-Active Architectures, Traffic Manager Failover
Designing for 99.99% Availability, Sub-Minute RTO/RPO SLAs, Automated Disaster Recovery Drills
Hands-on Lab: Configure Azure Site Recovery (ASR) Replication across Azure Regions with Automated Test Failover Drills
Enterprise Capstone 13: Mission-Critical Sub-Minute RTO Enterprise Disaster Recovery System
05
Advanced Enterprise AKS & Cloud-Native Integration
▼
12.1 Enterprise Cloud Native: Azure Kubernetes Service (AKS) Enterprise Azure CNI, Pod Subnetting, KEDA Event Autoscaling
Azure Service Bus Topics & Queues, Azure API Management (APIM) Enterprise Integration Gateway
Hands-on Lab: Deploy Secure AKS Cluster Integrated with Azure API Management and Azure Service Bus Messaging
Enterprise Capstone 14: Cloud-Native Microservices & Enterprise API Integration Gateway
06
Azure FinOps, Cost Optimization & Major Program Capstone
▼
13.1 Azure Cost Optimization: Microsoft Cost Management, Azure Reservations (1-yr/3-yr), Azure Savings Plans for Compute
Cost Allocation Rules, Budgets, Automated Anomaly Alerts, Azure Advisor Recommendations
Hands-on Lab: Perform Cost Audits, Setup Automated Cost Alerts, and Design Optimized Enterprise Reservation Architecture
MAJOR PROGRAM CAPSTONE (AZURE): Comprehensive Multi-Region Azure Enterprise Landing Zone, Security, Migration & FinOps Blueprint