Azure Fundamentals [2026]: Getting Started with Microsoft Cloud

Microsoft Azure is the cloud platform for the enterprise world. If you work at a company that runs Windows servers, uses Office 365, manages Active Directory, or has a Microsoft enterprise agreement, you are already in Azure's orbit whether you know it or not.

Azure is not just a Microsoft-products-in-the-cloud service — it is a full-stack cloud platform with compute, storage, databases, AI, DevOps, and networking services that compete directly with AWS and GCP. But its genuine edge is the integration with the Microsoft ecosystem, the enterprise sales relationships that put Azure in 95% of Fortune 500 companies, and the identity platform that manages access for hundreds of millions of enterprise users.

This guide is your starting point for Azure: what it offers, how to get certified, and how to build your first application on Microsoft's cloud.

Why Azure: The Microsoft Cloud Advantage

Azure's core advantage over AWS and GCP is its deep integration with the tools that enterprises already use: Microsoft 365 (formerly Office 365), Active Directory, Teams, SharePoint, Dynamics 365, and the Power Platform. For an IT department that manages these tools, extending into Azure is an extension of existing knowledge — not a leap into the unknown.

The specific advantages that drive enterprise Azure adoption:

Azure Active Directory / Entra ID: The world's most widely used enterprise identity platform, used by over 600 million users. Every Azure subscription is tied to an Azure AD tenant. Single sign-on from corporate credentials to cloud applications works out of the box.

Azure OpenAI Service: Enterprise access to OpenAI's GPT-4, GPT-4o, and DALL-E models with Azure's compliance posture — HIPAA, FedRAMP, GDPR, and more. Healthcare companies, financial institutions, and government agencies that cannot send data to OpenAI's public API often choose Azure OpenAI specifically for this reason.

Microsoft enterprise agreements: Companies with existing Microsoft EA agreements often get Azure credits or discounted Azure pricing as part of their existing contract. This makes Azure financially attractive without any new procurement process.

Hybrid cloud with Azure Arc: Azure Arc extends Azure management to on-premises servers, other cloud providers, and edge locations. For enterprises with significant on-premises infrastructure that cannot move fully to the cloud, Azure Arc provides a single management plane that spans both environments.

AZ-900: The Azure Fundamentals Certification

The Azure Fundamentals certification (AZ-900) is the entry point to the Azure certification path. It is a non-technical exam designed for anyone who wants to demonstrate cloud literacy and familiarity with Azure services — from business analysts to project managers to new developers.

The exam covers six domains:

• Cloud concepts (25-30%): What is cloud computing, service models (IaaS/PaaS/SaaS), consumption model, high availability, scalability, elasticity
• Azure architecture and services (35-40%): Regions, AZs, resource groups, core compute/storage/networking/database services
• Azure management and governance (30-35%): Azure Portal, CLI, Resource Manager, cost management, compliance and privacy

The exam is 40-60 questions in 60 minutes. Pass score is 700/1000. Cost: $165 USD. Most candidates pass on their first attempt with 3-4 weeks of preparation.

Study resources:

• Microsoft Learn (free): The official AZ-900 learning path on learn.microsoft.com. Interactive, browser-based labs included. This is the best starting point.
• John Savill's AZ-900 Study Cram (free, YouTube): 4-hour video covering every exam topic. Widely regarded as the best single free resource.
• MeasureUp practice tests ($30): The official Microsoft-endorsed practice test provider. Questions closely match exam style.

After AZ-900, the next steps are AZ-104 (Azure Administrator) for IT/ops roles or AZ-204 (Azure Developer) for developers. The AZ-900 is not required to attempt these — it is optional as a foundation builder.

Azure Global Infrastructure: Regions, AZs, and Edge

Azure has 60+ regions globally, more than any other cloud provider. Each region is a geographic area with one or more datacenters. Most regions contain availability zones — physically separate datacenters within the same region that are close enough for low-latency replication but far enough apart to have independent power, cooling, and networking.

Key infrastructure concepts:

Regions: Azure regions are named for geography (East US, West Europe, Southeast Asia). Each region is independent — choosing the right region for your workload matters for latency (choose closest to your users), compliance (choose a region in the required jurisdiction), and price (pricing varies slightly by region).

Region Pairs: Azure pairs each region with a second region at least 300 miles away. Region pairs are used for geo-redundant storage replication and for managing planned maintenance updates so both regions in a pair are not updated simultaneously. If you need cross-region disaster recovery, deploying to a region pair reduces networking latency and ensures Azure sequenced maintenance.

Availability Zones (AZs): Most Azure regions have 3 availability zones, each with independent power, cooling, and networking. Resources deployed across 3 AZs achieve 99.99% uptime SLA. Azure Virtual Machines, Azure SQL, and Azure Kubernetes Service all support zone-redundant deployment.

Azure Edge Zones and CDN: Azure Front Door and Azure CDN cache content at edge nodes globally, reducing latency for static assets and dynamic API calls by serving from the nearest point of presence.

Core Services: Compute, Storage, Networking, Databases

Azure Compute

• Azure Virtual Machines: On-demand Windows and Linux VMs in hundreds of sizes. D-series for general purpose, E-series for memory-optimized, N-series for GPU workloads.
• Azure App Service: PaaS for deploying web apps and APIs. Deploy a .NET, Node.js, Python, or Java application directly from Git or a Docker container — no VM management required.
• Azure Functions: Serverless functions triggered by HTTP, timer, queue messages, blob events, and more. The Azure equivalent of AWS Lambda.
• Azure Kubernetes Service (AKS): Managed Kubernetes. Azure handles the control plane; you manage worker nodes and deploy containerized workloads.
• Azure Container Instances (ACI): Run containers without managing a cluster. For simple, short-lived container workloads.

Azure Storage

• Blob Storage: Object storage equivalent to AWS S3. Hot, Cool, Cold, and Archive tiers mirror S3 storage classes.
• Azure Files: Managed file shares accessible via SMB and NFS protocols. Lift-and-shift for Windows file shares to the cloud.
• Azure Disk Storage: Managed block storage for VMs. Ultra Disk, Premium SSD, Standard SSD, and Standard HDD tiers.

Azure Networking

• Virtual Network (VNet): Isolated private network in Azure. Equivalent to AWS VPC.
• Azure Load Balancer and Application Gateway: L4 and L7 load balancing. Application Gateway is the equivalent of AWS ALB.
• Azure DNS and Azure Front Door: DNS hosting and global CDN with WAF capabilities.

Azure Databases

• Azure SQL Database: Managed SQL Server. Serverless tier auto-scales compute. Hyperscale tier reaches 100 TB.
• Azure Cosmos DB: Multi-model, globally distributed NoSQL database. Supports document, key-value, graph, and column-family data models.
• Azure Database for PostgreSQL/MySQL: Managed open-source databases. Flexible Server deployment model provides zone-redundant HA.

Azure Active Directory (Entra ID): Identity for Everything

Azure Active Directory — rebranded as Microsoft Entra ID in 2023 — is the identity and access management platform for Azure and Microsoft 365. It is not the same as on-premises Windows Server Active Directory, though it integrates with it. Entra ID is a cloud-native identity platform used by over 600 million users across 300,000+ organizations.

What Entra ID provides:

• Single Sign-On (SSO): Users sign in once and access all connected applications — Microsoft 365, Azure, Salesforce, ServiceNow, and thousands of pre-integrated SaaS apps.
• Multi-Factor Authentication: Built-in MFA for all accounts. Microsoft Authenticator app, SMS, phone call, and hardware token options.
• Conditional Access: Policy engine that evaluates every sign-in request: who is signing in, from where, on what device, to access what resource — and enforces requirements (MFA, compliant device, trusted network) before granting access.
• B2B and B2C: Invite external partners to collaborate on shared Azure resources (B2B). Manage customer identities for consumer-facing applications (B2C) with support for social logins.

For developers, Entra ID integration means using the Microsoft Authentication Library (MSAL) and the Microsoft Identity Platform to add secure sign-in to applications. For system administrators, it means managing groups, licenses, device policies, and conditional access policies through the Entra admin center.

Understanding Entra ID is a career asset even for AWS developers — many enterprise clients use Azure AD/Entra ID as their identity provider even when their applications run on AWS, using Entra as the SSO provider via SAML or OIDC federation.

Deploy Your First Application on Azure

The fastest path to running something on Azure: deploy a web app to Azure App Service. You can do this in under 10 minutes with the Azure CLI or VS Code.

Prerequisites: Free Azure account (create at azure.microsoft.com/free — includes 12 months of free services and $200 credit), Azure CLI installed, a simple web application.

Deploy a Python Flask app:

# Install Azure CLI and login
az login

# Create a resource group
az group create --name my-first-app --location eastus

# Create an App Service plan (B1 is cheapest paid tier)
az appservice plan create \
  --name my-plan \
  --resource-group my-first-app \
  --sku B1 \
  --is-linux

# Create the web app
az webapp create \
  --name my-unique-app-name \
  --resource-group my-first-app \
  --plan my-plan \
  --runtime "PYTHON:3.11"

# Deploy your code from local directory
az webapp up --name my-unique-app-name

Your app is now live at https://my-unique-app-name.azurewebsites.net. Azure App Service handles the runtime, SSL certificate, auto-scaling, and deployment slots. You manage only the application code.

From here, explore: add a connection to Azure SQL Database, set up Continuous Deployment from a GitHub repository via GitHub Actions, configure custom domain and SSL via the Azure portal, and set up Application Insights for monitoring.

The Azure Learning Path: From AZ-900 to AZ-104

The Azure certification path is well-structured for both administrators and developers. Here is the recommended progression:

AZ-900 Azure Fundamentals: Non-technical introduction to cloud and Azure. Good for any professional touching Azure in any capacity. 3-4 weeks to pass. Cost: $165.

AZ-104 Azure Administrator Associate: Manages Azure subscriptions, virtual machines, virtual networks, storage accounts, and identity. The equivalent of AWS SysOps Administrator. Target role: cloud administrator, IT operations. 8-10 weeks to pass. Cost: $165.

AZ-204 Azure Developer Associate: Develops Azure solutions — App Service, Functions, Cosmos DB, Service Bus, Key Vault, and Azure Active Directory. Target role: software developer, cloud developer. 8-10 weeks to pass. Cost: $165.

AZ-305 Azure Solutions Architect Expert: Designs cloud solutions across all Azure service categories. Requires passing AZ-104 or AZ-204 first, or equivalent experience. The most prestigious Azure associate-to-expert cert. Target role: solutions architect, technical lead. 3-6 months to pass. Cost: $165.

The Microsoft Learn platform is free and provides learning paths aligned with each certification. Use official Microsoft Learn, John Savill's YouTube channel, and WhizLabs practice tests as your primary study stack for any Azure cert.

Frequently Asked Questions

Is Azure easier to learn than AWS?

Azure and AWS have similar complexity at the service level. Azure is often described as more approachable for professionals with a Microsoft background — Windows Server, Active Directory, SQL Server — because the concepts map directly. For developers with no Microsoft background, the learning resources for AWS are more abundant, but Microsoft Learn is excellent and fully free.

What is the Azure equivalent of AWS Lambda?

Azure Functions is the Azure equivalent of AWS Lambda. Both are serverless, event-driven compute services where you deploy code without managing servers and pay per invocation. Azure Functions supports triggers from HTTP, timers, queues (Azure Storage Queues, Service Bus), blob events, CosmosDB changes, and many other sources.

Do I need an Azure account to study for AZ-900?

No. The AZ-900 exam tests conceptual knowledge and service awareness, not hands-on skills. You can pass AZ-900 entirely through Microsoft Learn content (free, browser-based labs included) without creating a paid Azure account. For AZ-104 and AZ-204, hands-on practice is essential — the free Azure account with $200 credit is sufficient for exam preparation.

How is Azure Government different from commercial Azure?

Azure Government is a physically separate cloud environment with datacenters located exclusively in the United States, operated by personnel who are US citizens. It holds FedRAMP High, DoD Impact Level 5, and other federal compliance authorizations not available in commercial Azure. Government agencies and federal contractors handling controlled unclassified information (CUI) or classified data must use Azure Government. Pricing is approximately 20-30% higher than commercial Azure for equivalent services.

Note: Information in this article reflects the state of the field as of early 2026. Technology evolves rapidly — verify specific version numbers, pricing, and service availability directly with vendors before making decisions.