Posts

Showing posts with the label Cloud

About Flex Consumtion Plan and enable Managed Identity in Azure Function

Image
Micrsoft bring a new plan for Azure Function - Flex Consumtion Plan for hosting. It is Linux based Azure Functions hosting plan. Below a quick sneek preview of the plan. And here is more details . Pretty simple way to create Azure Function. Created by a minute, and below my Azure Function is up and running. Let's try to enable managed identity in Azure Function. 1. Click on your Azure Function and bring the Function dashborad 2. Click on Identity under Settings 3. On the System assigned tab, switch the status to On and click save Next, you need to assign the roles to he Managed identity. To do so, first you browse to the respective Azure resources like Azure Storage/SQL DB/key Vault and assign the necesarry role-based-access-control (RBAC). Let's create a key Vault first and assign the  Afterwards, select the subscription and search your RBAC role and assigned the sale. Click on Save. Now, go back to Functon dashboard and then Settings >> Identity and then Azure Role ...

How to bring on-premise SQL Server data into Azure Fabric Lakehouse

Image
On-premise data gateway - one of the important feature/service Azure Fabric platform is using to bring your on-premise data into Azure cloud. The data movement is secure and encrypted. You can review my my earlier post  https://splaha.blogspot.com/2025/03/use-on-premise-gateway-in-fabric-and.html   where I explain how to configure On-premise data gateway using Step 1 and Step 2. In this exaple, I'm going to use the same data conenction to pull my on-premise SQL tables using custom join SQL into Lakehouse. The entire post is self explanatory with step-by-step snapshot. I hope this will help you to understand each and individual steps as well as to execute the same at your end. Let's start with my on-premise SQL server details. As you can see the below picture, it talks about the database Employee where there are two tables EMP and DEPT. I'm going to use the same SQL into Fabric to pull the data. I assume you already created the on-premise data gateway using my earlier post...

Use On-Premise-Gateway In Fabric and copy data from On-prem to Azure Fabric

Image
On-Premise data gateway is an application which is required to be installed in your laptop/computer/server which connect to cloud and uses cloud services to send data back-and-forth from on-prem to cloud. This is secure data connection and data encryption is in place. Here is more about on-premise data gateway - https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem?toc=%2Ffabric%2Fdata-factory%2Ftoc.json https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem?toc=%2Ffabric%2Fdata-factory%2Ftoc.json Architecture of it - https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem-indepth?toc=%2Ffabric%2Fdata-factory%2Ftoc.json https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem-indepth?toc=%2Ffabric%2Fdata-factory%2Ftoc.json Step 1 First thing first - You need to install on-premise data gateway in your lcoal. Second thing is to open the on-premise data gateway and ensure th...

Shared Access Signature (SAS) in Azure

A shared access signature (SAS) is a signed URI that points to one or more storage resources and includes a token that contains a special set of query parameters.  Here, the token plays an important part, it indicates how the resources might be accessed by the client. Signature query parameters (sig) is constructed from the SAS parameters and signed with the key that was used to create the SAS. This signature is used by Azure Storage to authorize access to the storage resource. Azure Storage supports three types of SAS: User delegation SAS Secured with Microsoft Entra credentials and also by the permissions specified for the SAS. Applies to Blob storage only. Service SAS Secured with the storage account key. A service SAS delegates access to a resource in the following Azure Storage services: Blob storage, Queue storage, Table storage, or Azure Files. Account SAS Secured with the storage account key. An account SAS delegates access to resources in one or more of the storage service...

Azure Function to call API and display information

Image
In this post, will review on how to create an Azure Function to call an API to get the data and back the json data to requester. This is developed using Visual Studio in Windows environment. Open Visual Studio and then click to create a new project. Search Azure Function Template and then click next. Put a meaningfull name and location of your project. Click next. Next, select Http trigger from Function dropdown box. In this project, this would be a Http call. Finally turned on Authorization level to Anonymous . Click to create the project. Once the project created, you will found the local.settings.json file. Replace the following code with the following one. We place environment/configuration variable in local.settings.json file under Values . {     "IsEncrypted": false,   "Values": {     "AzureWebJobsStorage": "UseDevelopmentStorage=true",     "FUNCTIONS_WORKER_RUNTIME": "dotnet-isolated",     "APIURL": "h...

Intelligent Detections Configuration - Microsoft Purview

Image
To meet the compliance needs for your organization, we need to configure several insider risk management settings. These settings apply to all insider risk management policies, regardless of the template we are going to use when creating a policy.  Several areas we need to look and configure right settings there, starting from policy indicators, timeframes, detection groups, intelligent detections, data sharing, groups, assets etc. One interesting configuration area is intelligent detections. Why we need Intelligent Detections and how we can see the value Detecting unusual activities within a minimum number of daily events and place a score for unusual event. Events like increase/decrease access specific media/files/data, access request from specific range of IP or some unallowed domains, access volume data in unusual time - All these unusual events detecting by intelligent detections configuration are getting scored up, and lately this score will be transformed into low, med...