Azure Arc: Extending Azure for hybrid and multi-cloud management | BRK183

0:00 Awesome.

0:02 Well, it's great to see you or at least see the glare.

0:05 I'm Brendan Burns.

0:07 I'm the corporate Vice President for Azure Cloud Native and Management Platform.

0:11 And with me.

0:12 I'm Steven Booker.

0:13 I am one of the product managers on Azure Arc.

0:15 Cool.

0:16 And we're trying to talk today about Azure Arc and how we're thinking about

0:21 unifying hybrid and multi cloud management across

0:24 Azure on premise and other clouds as well.

0:27 So, you know, here are the the key challenges that we see when

0:30 we're looking out into the world and we're looking into a hybrid world.

0:35 There's a ton of complexity and inefficiency

0:37 in how people manage in multiple environments,

0:39 different tools, sometimes even different teams.

0:43 There's fragmented visibility.

0:44 It's difficult.

0:45 We were talking on the way over about how even just understanding all

0:49 of the different versions that you may have deployed out to a series

0:53 of remote sites or stores or other places

0:55 is challenging and, and a, and a important

0:58 problem to be able to solve to maintain security and compliance,

1:01 to ensure that when ACVE comes in, you're patched,

1:05 you know exactly what your, your landscape is looking like.

1:08 And even the act of patching, making sure that you have that everywhere is,

1:12 is incredibly important, going from cloud all the way out to the edge.

1:16 And to take these challenges and illustrate them a little bit more concretely,

1:20 we can take a look at doing IT operations for energy delivery.

1:25 Obviously energy delivery is a very hybrid scenario.

1:28 Some of the things that's going to be happening are going

1:30 to be happening within our data centres or within a public cloud environment.

1:33 But obviously the actual production is not going

1:35 to happen inside of our data centre and the transmission

1:38 of power from one end to the other

1:40 is not going to happen inside the data centre.

1:42 And so in order to be able to deliver the the IT

1:46 and the applications and the insight and monitoring necessary to reliably

1:50 deliver power from the place of generation all the way through

1:54 the grid and out into people's

1:57 houses requires a very hybrid management solution.

2:00 And this is one that's been put together.

2:01 And you can see the testimonial here.

2:03 This isn't just sort of a, a conjured up example,

2:06 but this is an actual customer who's using Azure Arc to connect their servers

2:10 and their hybrid environments and manage it

2:13 with consistent operations in the Azure data centre.

2:16 So ARC is that platform that can manage all of your workloads,

2:19 wherever your workloads happen to be and can meet your business or your area,

2:24 wherever it needs to be deployed.

2:27 And we're really excited about whether it's public cloud,

2:30 whether it's hybrid cloud out to the edge,

2:32 multi cloud, we can meet your needs for management,

2:35 security and deployment no matter where they are.

2:38 But this isn't really a product by itself.

2:42 ARC is actually built on the backbone of the Azure Resource Manager.

2:47 So I'm sure everybody who's here, at least I hope that everybody's here,

2:51 is familiar with the Azure Resource Manager.

2:53 Azure Resource Manager is our control plane

2:55 for everything that you do with Azure.

2:58 So if you interact with the CLI,

2:59 you interact with the portal, you're interacting with Azure Resource Manager.

3:03 But more importantly,

3:04 Azure Resource Manager is there to deliver at scale scenarios for things

3:09 like access control or for policy

3:11 enforcement or for inventory management and governance.

3:14 All of these capabilities are available and have been used

3:18 hopefully by most of you to manage your estate in Azure.

3:22 But when you talk about how we can connect it

3:25 to hybrid and how we can connect it to multi cloud, that's where ARC comes in.

3:29 Because ARM is traditionally been just for resources that were in Azure.

3:34 But with Azure ARC, you can connect a server.

3:36 I connected my servers that are actually running in my attic.

3:40 I connected a Kubernetes cluster that's running on those servers in the attic,

3:44 and I can manage it consistently just like I do

3:46 with an Azure Kubernetes Service cluster that's running in Azure itself.

3:50 And so in order to sort of illustrate how

3:53 this can be used for a variety of different scenarios,

3:56 we have a series of different categories and demos to go along with each.

4:01 Each of these sort of acts or each of these ways

4:04 that you can use ARC to help make your world easier.

4:08 The first is to talk about how we

4:10 can simplify operations management and security across distributed environments,

4:14 whether that's, you know, servers in a closet,

4:17 servers under a desk, servers in a different cloud.

4:20 Then we're going to be talking about how

4:22 you can do application deployments with cloud agility,

4:24 but to an on premise environment.

4:27 Maybe it's to a retail store or to a restaurant

4:29 or to any other sort of a bank location where

4:32 you need to be able to have an application

4:34 that is both cloud based and deployed to that remote location.

4:38 And then finally, we're going to talk about how

4:40 you can do centralized inventory operations across multi cloud environments.

4:44 And that's enabling you to have that consistent, single pane of glass,

4:48 consistent experience all the way from edge to multi cloud to Azure itself.

4:54 All right, so we're going to start

4:56 with centralised management and security and governance.

4:58 And what we're going to go through here is

5:00 we're going to talk about how you can deploy, secure and govern an application.

5:05 And to show us more about how that's going to be done,

5:07 I'm going to welcome Stephen in, who's going to give

5:09 you a demo on managing cloud and hybrid infrastructure from Azure.

5:13 Awesome.

5:13 Thank you, Brendan.

5:14 So I'm going to be an IT admin for our company

5:17 Zava today and we have resources running all over the place.

5:21 We have resources in Azure, we have resources on Prem.

5:24 I mean we even have resources running in Brendan's closet.

5:26 So we have things all over the place.

5:28 We have to juggle all sorts of different dashboards,

5:31 different management tools, different services, scripts all over the place.

5:35 You know, show of hands,

5:36 how many people sound like this is a situation you're kind of in today?

5:40 You know, you have a lot of OK, there's a good amount of hands there.

5:43 Yeah.

5:43 Distribution of these services and these management tools is a real pain.

5:48 So I'm going to show you how you can use Azure ARC to leverage the rich

5:53 Azure management tools that you can do

5:55 and and make things a lot more simplified.

5:58 So let's jump over to the Azure ARC Centre in the Azure portal here and straight

6:03 away you can see that I have all

6:06 of my different locations kind of categorised here.

6:09 So I can see what's running on Prem with ARC,

6:12 I can see what's running even in a WSGCPHCI and more

6:16 so here you can actually see the machines we have running here.

6:20 We can see their statuses, their connections.

6:23 We have our Azure local machines, we even have some VM Ware machines all

6:28 connected with ARC in a singular place here,

6:30 so we can get a great view of what's

6:33 running where straight away from the Azure portal.

6:36 With ARC.

6:37 It's not just an inventory view.

6:39 We can also operate on these by, you know,

6:41 clicking these, assigning tags, doing whatever we'd like to them.

6:45 But you know, recently I got a new directive from my CSO saying we need

6:50 to make sure all of these machines are up to date with the latest OS patches.

6:57 I don't want to go to each of these machines and and do that individually.

7:00 Let's jump over to the Azure update Manager here and I'm going to show you how

7:04 easy it is to be able to manage

7:07 your cloud environment and your on Prem environment,

7:09 no matter where they are easily here.

7:11 So Azure Update Manager, we've enrolled a bunch of these machines

7:14 already into the update management service.

7:17 You can see here we got 52 machines and 29 arc machines.

7:21 I'm going to jump over to the list of machines

7:24 here and take a look at what has pending updates.

7:28 We can see here.

7:29 There's a lot of pending updates and we can see

7:31 all of our ARC and Azure machines kind of together here.

7:33 I'm going to select a couple here.

7:35 Hey, even these ones here, these I dash ones, those are actually running in AWS.

7:40 So we can do and we can have patches and updates go from the Azure portal

7:46 into an AWS machine and make sure we satisfy

7:50 the requirements for, for keeping things up to date.

7:54 So I can go ahead and create a maintenance configuration and call it, you know,

7:59 my schedule and specify a date and time that works best for my business.

8:03 You know, you can schedule a maintenance window so

8:06 that you know when your machines are actually being updated.

8:09 And so this can be, you know, during non business hours or non critical times.

8:14 It's it's super easy to schedule it that way.

8:17 So I'm not going to go ahead and do this, but you know,

8:20 simple as this, we can review and create at the time and it's easy as that.

8:27 Security is essential, you know to a well managed infrastructure,

8:31 but there is also resiliency that has to happen on the edge here.

8:36 Recently there was a a new update for some

8:40 of the Safe OS and Win RE environments with Windows that we are able to now have

8:47 dynamic updates to these machines in case there's any problems.

8:52 You know, I think a year ago, you remember Brendan,

8:55 there was this particular driver update from a third party piece of software

8:59 that kind of left a lot of machines stuck in a reboot cycle.

9:03 Does anyone remember this one?

9:05 I'm yeah, I'm seeing some head nods.

9:07 Anyone was running around with the USB key?

9:09 No.

9:09 OK, I don't want to admit it.

9:10 So anyways, we're really focused on making

9:14 your resiliency with Microsoft and Windows computers much better.

9:18 And so with this dynamic OSS,

9:21 you can now send patches when machines are in this Win RE mode.

9:26 But the first step is figuring out what machines actually

9:30 have the Win RE or the Safe OS mode enabled.

9:32 And so we've recently published a couple of new policies here

9:38 to audit and configure the Win RE environment across your ARC machines.

9:44 And so this way you can see you can apply this policy to your subscription,

9:48 see how many machines don't have Win RE enabled.

9:51 And then you can actually use a policy to configure

9:54 the Win RE to be enabled across your whole fleet here.

9:57 So I've gone ahead and done this already where we

10:00 have a, our policy assignment specified to this scope here.

10:05 And you can see here that I actually have

10:07 a machine that does in fact have the Winrari enabled here.

10:11 And you can we can dive in a little bit more,

10:13 take a look at the machine and you'll notice as well,

10:15 you know, this is an AWS machine.

10:17 So we can do this across no matter where these machines are on Prem multi cloud,

10:23 wherever we can make sure that Win RE is enabled and your machines

10:28 are more resilient to these kind of incidents in the future.

10:35 But there's often times when there needs to be a break glass scenario, you know,

10:39 not very often that this happens,

10:41 but you want to be able to get onto the machines.

10:44 In this case, you need a fast and secure

10:47 way to get onto the machines really, really fast.

10:50 And so we've worked really hard on SSH over ARC

10:53 to be able to give you a very simple way

10:56 to connect to these machines without exposing a public IP

10:59 and without without having to do additional configuration on the machine itself.

11:05 So with SSH over ARC, I'm in one of my Linux machines here and I'm

11:09 actually going to connect to it with intra ID.

11:11 We can of course connect to it with SSH key based auth and password as well,

11:16 but I'm going to use intra ID here.

11:18 So I'm going to click connect in the browser

11:20 and it's going to run this SSH ARC command.

11:23 And you'll notice in this command, there's no specification for a key path.

11:28 There's no specification for a username.

11:30 That's because it's using my entry ID when

11:33 I've logged into a ZCLI or AZ PowerShell.

11:35 And it's going to check that I have

11:37 the right permissions to actually access this machine or not.

11:40 And then it's going to go ahead and do it.

11:41 So as it's setting up the Cloud Shell instance, it's going to run this command.

11:45 It's going to take a moment here.

11:46 It's going to install it there,

11:48 and then it's going to ask me if I want to trust it.

11:51 Yep.

11:51 And I am now on my Linux machine, so I can say host name.

11:57 Oh, if I can spell, there we go.

12:00 We're on the SB Dash Linux one machine just like that.

12:04 And I didn't have to expose any public IP.

12:05 I didn't have to do any additional configuration on the machine.

12:09 It was super fast and easy.

12:13 We, you know, Brendan was talking about earlier.

12:15 We have a lot of management tools in Azure today.

12:19 You kind of have to go ahead and configure a lot of these across your machines.

12:23 And we've heard from customers that it's quite a pain to do that.

12:26 We don't want to be clicking through.

12:27 You saw earlier I had, I had like 80 machines in Azure Update management.

12:31 I didn't want to enable all of Azure Update management,

12:34 periodic assessment for all of those.

12:36 And so we're really excited to announce

12:38 a new workflow that we're introducing here at Ignite called kind of the machine

12:43 enrollment workflow with machine management services here.

12:47 So this is in the brand new operation centre in Azure.

12:50 It's currently in preview, but we want it to show off the the flow

12:55 that we've created to make your management smarter, simple and easy to do.

12:59 So all I have to do here is go to the machine enrollment tab here.

13:03 I'm going to click enable and I'm going to select a subscription.

13:07 I want to enroll in this machine management, a bundle of sorts.

13:12 It's going to load up here and it's going to show

13:15 my subscriptions and the number of Azure and ARC machines.

13:19 If the Internet was working, who's on the Internet?

13:24 Someone's taking up all the bandwidth in in the crowd here.

13:28 Let's try this again.

13:33 Oh well, let me refresh it.

13:36 Someone's really downloading a big package.

13:39 There we go.

13:40 OK, so here we can see all of our subscriptions.

13:43 And so I'm going to Scroll down here to my Zava

13:46 subscription and you'll see I have 52 machines and 37 ARC machines.

13:51 I'm going to select this subscription and it says I have the right permissions.

13:55 I'm going to select a user managed identity to do the jobs for me.

13:59 We figure out all the dependencies that you need

14:02 to enable a bunch of services to this machine enrollment flow.

14:07 So we have Log Analytics workspace.

14:10 We can add some more security measures with Defender

14:14 CSPM and Defender for Servers Plan 2 if we'd like.

14:17 We're just going to go ahead and now we can review and enable.

14:20 So let's actually talk about what services we're enabling here.

14:24 So we've included a bunch of these services that this enrollment is

14:27 going to do across your Azure and Arc machines very seamlessly and easily.

14:31 We're going to enable Azure monitoring, VM Insights.

14:35 There is a brand new preview experience.

14:36 We're also going to be enabling Azure policy,

14:40 policy and machine configuration on these machines.

14:44 Additionally, if you want deep inventory and change tracking for your machines,

14:49 we enable change tracking and inventory.

14:51 And then of course, as you saw earlier,

14:53 we are using Azure Update management for seamless

14:56 patching and keeping things up to date.

14:58 We're going to include all of that into this bundle

15:00 here so that all AD machines that you saw previously,

15:03 they're going to have these services enabled once I click enroll here.

15:07 So I'm going to go ahead and press enable here and it's going

15:11 to go ahead and work and Add all of these features to these services.

15:17 It's also a lot cheaper.

15:18 And we've we've really worked to streamline this process

15:21 rather than doing the a la carte version.

15:22 So we're excited to talk about that more as it evolves,

15:25 but we want to show the preview of that today here.

15:30 So we're bringing all the management services together

15:33 and we're really trying to align to some of the essential scenarios that a lot

15:37 of folks are familiar with with System Centre.

15:40 How many people use System Centre today?

15:42 Raise their hands?

15:43 OK, a lot, a good amount of folks.

15:45 Well, we actually have a strategy we want to talk about about System Centre.

15:48 Absolutely.

15:48 So you know, I think there's a lot of people who've been using.

15:52 We can switch back to the to the slides.

15:56 All right, right on.

15:57 There's a lot of people who are using System Centre

16:00 today for managing configurations in their on Prem environments and there's

16:04 a lot of people who are using ARC to deliver a lot

16:07 of the benefits of cloud based management to on Prem environments.

16:11 And So what we are doing today and and into the future as we're

16:14 taking a look at the capabilities in each and trying to reason about,

16:18 you know, for example, config manager in system centre has capabilities that are

16:23 challenged would be challenging to implement in ARK today,

16:26 such as you know, peer optimizations for updates and things like that.

16:30 Whereas ARK has very rich infrastructure as code and inventory

16:34 scenarios driven by the needs of AT scale cloud users.

16:38 We want to bring all of those, we want

16:40 to bring all of those experiences together so that we can

16:44 really deliver the best of both worlds for people who

16:46 are managing both cloud and on premise infrastructure going forward.

16:50 Because we truly expect that into the future,

16:52 there won't be people who just manage on Prem infrastructure,

16:55 there won't be people who just manage cloud infrastructure,

16:58 but the management of both of those services is going to be essential.

17:02 And so, you know, you can see some of the the illustrations of the various

17:06 capabilities within on premise and and ARC based solutions up on the slide here.

17:12 But as part of that scenario, over the last few years,

17:14 we've been doing a lot to modernise Windows Server licensing.

17:18 And I think this is a great example

17:20 of the power of Arc to deliver real value on premise.

17:23 It started with extended support enabled by ARC with Server 2012.

17:28 It's extending out into Windows Server,

17:31 being able to consume Windows Server in a usage based

17:34 pay as you go model that's familiar to cloud users,

17:38 but on premise as well or in private cloud.

17:42 And then finally being able to do things like

17:44 hot patching and extend capabilities that previously were only

17:48 available within Azure out to other environments via Azure

17:51 ARC and the insights that Azure Arc delivers for us.

17:56 And then I think there's a lot of other management capabilities

17:59 that we are going to be bringing forward as well as all

18:03 of the built in capabilities with Azure and the Azure Resource Manager

18:06 that enable people to truly manage both

18:09 cloud and on premise resources with efficiency.

18:12 To give you a real illustration of how this happens.

18:15 I wanted to, sorry, I'm switching gears.

18:19 I'm just going to switch gears now

18:21 from the management of individual servers to application deployments, right?

18:25 So it's not just about deploying updates,

18:27 it's not just about deploying security patches

18:30 or understanding the inventory of your environment.

18:33 It's also about deploying applications.

18:35 And so with ARC for Kubernetes, we're also really we're very excited to be

18:39 able to not just manage individual servers,

18:41 but actually manage clusters of servers.

18:43 And again, like it's not just about us talking about what's valuable.

18:47 There's a really great customer testimonial here

18:49 from Delta Dental who talks about how

18:52 ask both on Prem and in the cloud enabled them to accelerate their business.

18:57 What we're really excited about today is

18:59 to be able to announce we're bringing Azure,

19:03 the Azure Kubernetes Fleet Manager to Azure ARC.

19:06 So previously fleet Manager was available within AKS and was available

19:10 to people to manage fleets of AKS clusters in the public cloud.

19:15 Now you can manage clusters across all sorts of environments,

19:18 whether it's on Prem or in multi cloud environments.

19:21 And I think a great illustration of the usage

19:24 of this and the value of this is some of our gaming.

19:27 And as you know, gaming is a very latency sensitive environment.

19:31 It's kind of an inherently multi cloud workload

19:33 because they're going to deploy game servers for whatever

19:36 game it happens to be as close as possible

19:38 to the people who are playing those games.

19:41 But they want to manage it all with a single pane of glass,

19:44 a single a single inventory and a single deployment target.

19:47 And so now with Azure Arc for Kubernetes and the fleet manager,

19:51 you can manage deployment of applications to Kubernetes

19:55 infrastructure literally anywhere with a single pane of glass.

19:59 And to show us more about that with a demo,

20:01 Steve is going to have a little look at how

20:03 we do application deployments with a KS and ARC enabled Kubernetes.

20:07 Sweet.

20:07 Thank you, Brendan.

20:08 So let's switch over to the demo environment here and I'm going

20:12 to show off a couple of applications that I am responsible for AD Sava.

20:17 The first one is our e-commerce website here,

20:19 which is running in the cloud across multiple regions.

20:23 And then of course, we have retail sites.

20:26 We have real retail stores where that are running a point of sale service

20:32 application in these stores to actually process

20:35 transactions and handle these transactions for customers.

20:41 However, you know, there's a big holiday coming up here in the US and no,

20:45 I'm not talking about Thanksgiving, Black Friday.

20:49 We are going to have to scale out our infrastructure to handle the traffic.

20:53 We're going to have to add discounts to attract customers.

20:56 There's a lot of changes that have to have to happen fast across the edge

21:00 and the cloud and we want to make sure this happens seamlessly and easily.

21:05 And so let's take a look into my Kubernetes

21:07 cluster or our Kubernetes fleet here actually,

21:10 excuse me, that Brendan was just talking about here.

21:13 We look here into this fleet.

21:16 We can take a look at our member clusters

21:19 and see we have a variety of different clusters here

21:22 running in the different cloud regions hosting our website

21:25 and then different retail stores in Chicago and in Seattle here.

21:30 I don't want to go to each of these clusters,

21:32 make the changes, and then, you know, deploy them out again.

21:36 Things could go wrong, things could happen,

21:38 and then we could have an outage in a region or even,

21:42 you know, across regions as well.

21:44 It could be really dangerous.

21:45 And so we're showing how with a single pane of glass,

21:49 you guys can manage deployments from this space.

21:52 I'm going to go into one of these clusters here,

21:56 into my edge cluster and I'm going to take a look at the extensions.

22:00 So first of all, you can see here we have a number of Azure extensions

22:04 for monitoring policy to help us keep

22:06 track of what's going on about the cluster.

22:09 But we have this other extension called the Flux extension.

22:13 And this is what's going to really help us out today.

22:15 The Flux extension will allow us

22:18 to connect our customisations and configurations

22:20 for our application to a GitHub repo so that we can deploy out changes.

22:26 It can see that there's changes in a repo and then do the work

22:30 to make sure our clusters are actually

22:32 in compliance or actually made those changes.

22:36 So I've gone ahead and actually connected

22:39 a GitHub repo already here to these clusters here.

22:42 And so this is my single repository.

22:45 And so my developer has created 2 PRS here

22:48 for changing and scaling out and being prepared for Black Friday.

22:55 Let's take a look at the first one here.

22:56 This is the this is the cloud one.

23:02 And so here my, my developer has actually increased

23:06 the replicas and also pointed this to a different application.

23:12 So this is looking good.

23:13 I'm going to actually, oh, I got to log into GitHub first.

23:17 Don't mind me.

23:20 Oh, excuse me.

23:21 Oh, all right.

23:22 Well, we're going to have to go ahead.

23:26 She's good news is she's actually already merged a bunch of pull requests,

23:30 so we can take a look at one of the past ones here.

23:33 And so we've merged the changes and then

23:38 gone ahead and had Flux see these changes.

23:44 And now it's going to go do the work on the edge, on the cloud clusters.

23:48 And so she's also created APR for our edge clusters.

23:52 And so this is going to be a very

23:55 similar experience here where she's targeting different application,

23:59 different container images and different values

24:02 for increasing the the size of the clusters

24:06 so that we can be ready for all the big Black Friday traffic here.

24:11 And so this looks great.

24:12 We'll merge this and Flux will take a look

24:15 at it and it will start working ahead.

24:18 Let's jump back to the slides real quick and I'll

24:20 show you a little bit about what this has done.

24:24 So here is kind of a rough architecture of what we've been doing here,

24:28 where I have our Kubernetes fleets in the edge and in the cloud.

24:33 And with the Flux extension,

24:34 I'm able to connect them to a single GitHub repo and all

24:38 my developers can have a single source of truth for that GitHub repo.

24:42 It's also great that it's in a repository because

24:44 it's now auditable and it's it has rollback capabilities.

24:48 So if anything went wrong with one of their changes, well,

24:50 we can just rollback that commit and go back to a well known state no problem.

24:54 And that's easy and great.

24:58 Now you might be more familiar with the the flux open source project.

25:03 And so you might be asking yourself, why should I,

25:06 why should I bother with the Azure managed flux?

25:08 Well, the Azure Managed Flux enables ARM native resource deployment,

25:13 so you can actually include the flux extension

25:16 into your infrastructure as code into your Terraform or Bicep files.

25:21 It's super easy to deploy out with your clusters that way.

25:24 Additionally, we have improved security postures so that we

25:27 roll out fixes to CV ES much quicker and easier.

25:30 And then lastly, we have easy monitoring of deployments in the Azure portal.

25:35 So if we swap back to my demo environment here,

25:38 we can actually see that we are with Flux,

25:41 we're able to connect to Azure managed Grafana and so we can create

25:45 advanced dashboards to monitor the deployments

25:48 and the changes to the applications here.

25:51 So you'll see here we got loads of all these clusters here,

25:54 the versions, the success dates and stuff, the compliance, non compliant stuff,

25:59 everything that we need is all kind of here like that.

26:03 And so now if I actually go back and kind of refresh the page,

26:06 you can see, oh, it's already changed here.

26:09 The Black Friday discounts were applied to my Edge cluster here.

26:14 Previously, we didn't have the Black Friday discount banner.

26:17 And you can see all the prices and stuff for the boots have been slashed.

26:21 We're we're super ready and excited for Black Friday to come as a business here.

26:30 So this is a little bit about how we've been

26:33 consolidating application management across the cloud

26:36 and the edge with Kubernetes.

26:39 Let's jump over and talk a little bit about our other key area of investment,

26:43 which is multi cloud.

26:47 Cool.

26:48 Alright, So you know I think one of the things that was interesting,

26:51 we developed ARC initially because we were thinking

26:54 about people who are running in a hybrid world,

26:56 who are running between Azure and on premise.

26:58 But what we've realised in talking to customers

27:01 and in understanding the way that they're managing many

27:04 of our customers aren't just hybrid between a public cloud

27:07 and an on premise data centre or a private cloud.

27:10 They're actually multi.

27:11 They're hybrid because they're multi cloud

27:14 and there's a lot of different reasons,

27:16 whether it's regulatory or resiliency or just

27:19 freedom and flexibility or being near to a customer from a network latency

27:24 perspective that people might be in multiple clouds.

27:27 But obviously there are certain things that this makes much,

27:30 much more painful and a lot of them

27:31 are the capabilities that ARC brings to the table.

27:34 So centralized identity management, inventory.

27:37 You don't want to have to be going through multiple dashboards to determine

27:41 if you have a vulnerable machine or if the patches have been applied.

27:45 If you have applications that are deployed into multiple clouds,

27:49 you want to be able to to seamlessly perform updates across those applications.

27:55 There's a lot of value that comes

27:56 from that single pane of glass for managing applications.

28:00 And then finally, you can also use the exact same tools,

28:04 whether it's Defender or Azure Monitor or Update

28:08 Manager to, to provide consistency in your operations.

28:12 You don't have to have three

28:14 different operations teams for three different clouds.

28:17 You can centralise operations in a single infrastructure

28:20 as code language and in a single experience, a single portal and a single API.

28:25 So this is really, really powerful for a lot of people

28:27 who find themselves needing to deploy into all these different environments.

28:31 And to illustrate exactly what that looks like,

28:33 I'm going to hand back over to Steven to give

28:36 a demo of multi cloud management using Azure Arc.

28:40 Sweet yeah.

28:42 So how many how many people here have run a multi cloud environment?

28:47 Rough show of hands yeah,

28:48 it's becoming a bigger thing nowadays and becoming multi cloud.

28:53 You know, like I said in the beginning is

28:55 it's hard to juggle everything and so we're really trying

28:57 to unify things for you in Azure so you

29:00 can have a single management place for these tools here.

29:03 So let's jump over to the Azure arc view here.

29:07 And so you know, I don't really want to be jumping through consoles different,

29:12 you know, AWS, GCP, Azure stuff.

29:14 I want everything in one place.

29:17 Like I said in the beginning,

29:18 the starting off I got to know what I'm managing and where it is.

29:23 And so the multi cloud connector is what is

29:25 going to help and make our lives so much easier.

29:28 Now.

29:29 The multi cloud connector is a resource in Azure

29:33 here that will actually connect us to AWS and GCP in a way that we can see

29:38 and replicate the resources in those clouds in Azure, in Azure Resource Manager.

29:44 And so you can treat them like kind of Azure resources that way.

29:48 So let's go ahead and actually create 1.

29:50 So I've gone ahead and started the creation of an AWS connector.

29:54 Here I've selected my resource group, gave it my connector name,

29:58 and then down here I can connect it

30:00 to AWS with a couple different kinds of ways.

30:03 The first way is through a single account.

30:05 And so the single account can be thought of very

30:08 similar to a subscription in Azure, but for AWS.

30:11 Or if I want, you know, a much more broader capturing of resources in AWS,

30:16 I can use the organizational account and that is like a tenant in Azure.

30:21 Just to, you know, connect the dots here a little bit.

30:24 All I have to do is provide my AWS ID number which

30:27 I've copied already here and then I'm going to collect click next.

30:31 So here is where I get to select solutions.

30:35 Now solutions are what the multi cloud connector is kind of built to do.

30:39 And so the first one here is inventory.

30:42 I'm going to select add here.

30:43 And so this is going to, this is

30:46 an agentless solution that will use the authentication

30:49 in AWS to pull in those resources and replicate

30:52 them in Azure ARM or Azure Resource Management.

30:56 And so in the settings here we can select the different services we want.

31:00 We have over 44 different AWS services,

31:03 which equates out to about 125 plus resource types that will be shown in Azure.

31:09 So we can cover not just your machines,

31:11 but your other specialised workloads that might be running in AWS.

31:19 We also have periodic sync and so every hour we

31:22 can set it to scan AWS and check for new resources.

31:26 This way, in case there's new resources that are created later,

31:30 it will get caught up and you'll be

31:32 able to see it populate within Azure no problem.

31:36 We can also filter it by region if we really want.

31:38 You know, I'm going to just say we support all of those, you know, regions,

31:42 we're going to go there and the the next

31:45 solution is the ARC onboarding solution.

31:47 You saw earlier how I was doing a bunch

31:49 of management tasks on my ARC machines running in Azure.

31:53 Well, this is what did the work for me.

31:55 I didn't actually have to go into AWS

31:57 and install the agents on all those ARC machines.

32:00 All I had to do was add this solution here and it's going

32:04 to discover all EC2 instances in AWS and install the ARC agent immediately.

32:11 Additionally, it's also got a scanner, so if there's new EC2 instances,

32:14 those will automatically get captured and shown into ARC there.

32:17 So you're really not losing new things that are created.

32:21 You really have a grasp and a handle

32:23 on the inventory of what's been going on across your multi,

32:28 your multi cloud world.

32:31 So I'm going to just hit save here.

32:33 And then the last one is a brand new

32:35 one that we're excited to announce here at Ignite,

32:37 which is the storage mover solution.

32:39 This allows you to actually move your data

32:42 from S3 into a Azure container very quick and easily.

32:46 So I'll show that one as well too.

32:48 But I'm going to add this all.

32:49 I'm going to click next here now the the next step I have to do is download

32:54 this cloud formation template and deploy it into AWS

32:56 and then I'll have all the proper permissions.

32:59 Once that's done, it's going to take a look.

33:01 It's going to process,

33:02 see everything that I have in AWS and then bring that into Azure.

33:05 And so that takes a little time.

33:07 So for the sake of time, I've actually done so already.

33:10 So I can go into my ARC Centre here, my multi cloud connector,

33:13 and then I can go into my AWS connector here where

33:17 I can see kind of everything that you know, I want.

33:20 I can scan now, test permissions, delete it.

33:23 I can take a look at all the resources

33:25 that it's found here graphically in this page here.

33:27 But since it's in Azure Resource management,

33:30 we can actually query it with Azure Resource Graph.

33:34 So let's jump over to this page here and what I'm doing here.

33:40 Let me zoom in a bit.

33:42 Oh, there we go.

33:47 So what I'm doing here is I can actually create a query

33:51 to see how many resources and of what kind I want here.

33:54 So let me do this one here.

33:55 It's going to execute this query and then look at that.

33:58 I'm able to see the resource type, the resource count and what cloud it's in.

34:04 So you can see I I have quite a bit of virtual machines.

34:06 I also have quite a bit of, you know,

34:08 machine extensions, EC2 subnets, I have network interfaces, EC2 service groups.

34:13 So you can see that we're not just helping you with your AWS machines,

34:17 but any other AWS resource kind of within this space here.

34:21 So we can see a whole count here.

34:22 You can see AWS think I have some GCP here too.

34:25 It might be a little, yeah, there we go some cloud functions from GCP,

34:30 public cloud connectors and there we go there.

34:33 So we can also do some more fun things with Arg.

34:36 We can, you know, filter by OS details for the machines that we have.

34:41 So I can, if I, if, if I'm ever asked a question, hey,

34:44 what Windows machines do I have running

34:47 in our infrastructure here we can go to Arg,

34:50 create a query and actually say, you know,

34:53 I want to see where OS details contains Windows.

34:58 I can see where all my Windows machines might be running,

35:02 whether it be an on Prem hybrid in Azure, in AWS 2.

35:05 We can see all the details that we want about these machines very easily.

35:09 So we can create quick reports out and make

35:12 sure that we know you know what's going on where.

35:16 The best part too with it being an Arg is we can also create awesome dashboards.

35:22 So we can create customized dashboards

35:24 with Arg in Azure dashboards and actually have

35:26 a quick view that will always be updated and take a look at, you know,

35:31 anything that you'd like to query by.

35:33 We have right now have, you know,

35:36 machines by environment, Kubernetes clusters by environment,

35:39 storage accounts, you know,

35:41 all these different things here with AWS and GCP together here.

35:48 And so showing a little bit.

35:49 We also have, you know, of course,

35:52 the GCP connector for, well, connecting to GCP,

35:55 we can do the exact same thing where we just

35:58 have to provide the project ID and then the project number.

36:03 Right now we have the two solutions, the inventory and the ARC solution,

36:06 but this is a brand new thing that we've announced.

36:08 So definitely if you have GCP, give this a try.

36:11 Let us know what you think.

36:13 We're really excited to be announcing that, you know, here at Ignite.

36:20 Cool.

36:20 So the last solution I wanted to show

36:23 off was the storage mover solution for AWS.

36:27 And so once I create a storage mover solution for my connector here,

36:31 it's going to go ahead and actually create me a storage mover resource.

36:36 I'm going to then be able to start a job here.

36:39 Let me see if this will refresh here.

36:41 I'm going to start this job here and it's going

36:44 to let me specify what storage accounts I want to connect to.

36:48 I can specify what S3 bucket I want to move to my what AWS or sorry,

36:53 Azure container I want to specify to here.

36:57 So here I have very important asset backups in AWS right now.

37:03 You can see here I have my Zava asset backups for 2023-2024, 2025, whatever.

37:09 These are all very important files that I want to move across clouds here.

37:14 And so the job has started.

37:16 It's going to run it just completed a little bit ago.

37:21 And so here is my container that I told it to go to here.

37:25 And so there's nothing in it just yet.

37:26 But if I refresh the page,

37:28 the job should have completed while I was talking and boom, there we go.

37:32 The asset backups are now in Azure.

37:36 Just like a couple clicks, the job starts, it goes through the storage account,

37:41 brings in, copies all the files from AWS into Azure very quick and easily here.

37:48 But you know, we've been talking a lot about multi cloud servers, Kubernetes.

37:53 There's a lot of stuff that we haven't had a chance to talk about yet,

37:57 but we're really excited to share about.

37:59 Why don't we jump back to the slides here and we'll

38:01 talk a little bit more about what else is new.

38:04 Sure.

38:05 So in ARC, these are the various things that we've done.

38:09 You know, the team is constantly listening to the customers

38:12 and constantly trying to deliver new features and new functionality.

38:15 So we've added things like auto upgrade,

38:17 which will enable you to more easily ensure that your agents

38:20 are up to date and you don't get caught by, you know, vulnerability scanners.

38:25 It's cruelly ironic if you're using ARC to improve the security posture

38:29 of your machines and yet the security scanner is flagging the ARC agent itself.

38:34 So auto upgrade for the agent will help ensure

38:36 that we always have the latest patches applied to the agent.

38:41 We've added Machine Configuration edit features to Machine

38:44 Configuration customizable baselines so that you can

38:46 set up a baseline policy for what you want your machines to be looking like.

38:52 I'm really excited actually about the Windows Server 2025 recovery

38:55 environment configuration through policy

38:57 and the connections that that will enable.

39:00 I, you know, I don't want anyone in this room to have

39:03 to run around with a USB stick ever again to patch a machine.

39:07 And with Win RE Plus ARC, that's possible.

39:11 And of course, it's only actually possible if you actually get it turned on.

39:14 And so this is going to enable everybody to both audit and turn on at scale.

39:19 So I strongly encourage if you have any amount of Windows Server out there,

39:23 first of all, get it to 2025.

39:26 Second of all, enable Win RE plus ARC and you will no longer have to, you know,

39:30 have have your USB stick in the army of people to run around through

39:34 the halls of a hospital or an airport or a train station or wherever,

39:39 probably this conference centre,

39:41 wherever there are those sorts of servers deployed into on premise environments.

39:46 With ARC enabled Kubernetes,

39:48 we've got the ability to access other resources using

39:51 workload identity that provides Entra ID down into the clusters

39:55 that you can use that's independent of your own

39:58 identity that you can use for accessing various resources.

40:02 We've got offline access for secrets so that you know,

40:05 you don't have to necessarily have a cluster online all

40:08 the time in order to be able to access secrets.

40:10 We're working on Argo CD that's been a really.

40:14 Major ask from a lot of people is to have Argo

40:17 for get OPS in addition to Flux and so that's becoming available.

40:21 And then in multi cloud management, you know,

40:24 we talked about how we have Google Cloud Platform

40:27 support in preview and we have AWSS 3 to storage.

40:29 We saw a really great demo of that and we'll

40:32 continue to add new capabilities in Multi Cloud as we truly

40:35 want Azure to be the best place to manage your cloud

40:39 environment wherever your cloud environment happens to be running and.

40:43 And we actually, you know, so you might be asking yourself,

40:45 you know, where can I go to learn about all this stuff?

40:48 Well, we've posted a really in depth,

40:50 comprehensive blog showcasing all this stuff.

40:52 And then actually if we switch back to the demo slides at this AKA Ms.

40:56 link, I'll pause here for a moment so you guys can take a picture or whatever.

40:59 But we want to make sure that you guys are coming to this conference

41:02 to learn about stuff that you can take away immediately after this session.

41:05 And so with all this stuff,

41:07 we've created a very comprehensive blog here showing off

41:10 all of the new things that we've talked about,

41:13 as well as links to other sources and other

41:16 kind of information that you can read up more about.

41:19 You know, there was so much time and so much things that we wanted to do,

41:22 but so little time that we had here today

41:24 just in this session that we wanted to show off.

41:26 But definitely go to the blog site and go there and learn

41:31 more so we can jump back and yeah, there we go.

41:34 There's the AKMS link.

41:36 And if you want to stay up to date on everything Arc going forward,

41:39 I strongly encourage you to join the Azure Arc Monthly customer meet up.

41:45 This will give you an opportunity to interact with the product team,

41:48 learn about the features without having to, you know,

41:51 come to, although we love it when you come to our this, this conference,

41:54 it will give you up to date features on what we're

41:57 doing with ARC and opportunities to provide feedback about what's working,

42:00 what's not working, areas that we want that you want us to improve

42:04 in both hybrid on premise management as well as multi cloud management.

42:08 So check that out.

42:09 And there's also an AKA dot Ms.

42:10 link if you prefer it that way.

42:11 And we'll be booting the whole week.

42:13 We will be.

42:14 Booting as well.

42:16 Definitely find us in the Migrate and Modernize booth.

42:18 We'll be happy to chat more about anything ARC related you're at this week.

42:22 Absolutely.

42:23 Thank you so much for listening and we hope you enjoy Microsoft Ignite.