Module 2: Azure Architecture and Services

Azure Global Infrastructure & Geography

Discover how Microsoft Azure's global infrastructure spans continents, regions, and availability zones to deliver high availability, fault tolerance, and compliance. Learn theory and practice with hands-on Azure Portal exercises using your free trial account.

Crafted with care by Venu Vallepu

🚀 Get Ready for Hands-On Learning!

🎯 What You'll Practice Today:

1

Explore Azure Global Map

Navigate Azure's interactive global infrastructure map

2

Compare Region Services

See which services are available in different regions

3

Check Pricing Differences

Discover how location affects pricing

4

Explore Availability Zones

See AZ support in your preferred regions

5

View Compliance Certifications

Check regulatory compliance by region

📋 Prerequisites:

✅ Required:

  • • Active Azure free trial account
  • • Web browser (Chrome, Edge, Firefox)
  • • Internet connection
  • • 30-45 minutes of focused time

💡 Pro Tips:

  • • Open Azure Portal in a new tab
  • • Take screenshots for reference
  • • Don't worry - we're just exploring!
  • • All activities are within free tier limits

⚠️ Important:

These labs are completely free - we'll only be viewing information, not creating resources that cost money. Perfect for learning!

Azure Global Infrastructure: Building for the World

Imagine you're building an app that needs to serve users in New York, London, and Tokyo simultaneously with lightning-fast response times, while ensuring data stays in each country for legal compliance, and maintaining 99.99% uptime even if an entire city loses power. This is exactly what Azure's global infrastructure makes possible through a carefully designed hierarchy of geographies, regions, availability zones, and datacenters.

🏗️ Azure Infrastructure Hierarchy: From Global to Local

Geography

Largest boundary (e.g., United States, Europe)

Region

East US, West Europe

AZ

Zone 1

AZ

Zone 2

AZ

Zone 3

Region

West US, North Europe

AZ

Zone 1

AZ

Zone 2

AZ

Zone 3

🌍 Why This Hierarchy Matters:

🎯 User Experience

Users in Tokyo get <100ms response times from Japan East region, not 300ms from US West

⚖️ Legal Compliance

EU data stays in European geography, US government data stays in US government regions

🛡️ Disaster Recovery

Hurricane hits East US? Your app automatically failovers to West US region pair

💰 Cost Optimization

Different regions have different pricing - choose wisely for non-latency-sensitive workloads

📊 Azure Global Scale (2025):

60+
Azure Regions Worldwide
140+
Countries Available
200+
Data Centers
100+
Compliance Offerings
🏆 What Makes Azure Unique:
  • Largest global footprint of any cloud provider
  • More regions than AWS and Google Cloud combined
  • Government clouds for US, China, Germany
  • Edge zones for ultra-low latency applications

🌐 Real-World Example: Global E-commerce Platform Architecture

🎯 Business Requirements:

Company: Global e-commerce platform serving 50 million users across North America, Europe, and Asia-Pacific regions.

Performance: <200ms response time globally
Compliance: GDPR (Europe), CCPA (California), local data residency
Availability: 99.99% uptime (4.3 minutes downtime per year)
Scale: Handle Black Friday traffic spikes (10x normal load)
☁️ Azure Architecture Solution:
🌍 Multi-Geography Deployment

US Geography (East US, West US), Europe (West Europe, North Europe), Asia (Southeast Asia, East Asia)

🔗 Region Pairs for DR

East US ↔ West US, West Europe ↔ North Europe for automatic disaster recovery

🛡️ Availability Zones

Deploy across 3 AZs in each region for 99.99% VM uptime SLA

⚡ Global Load Balancing

Traffic Manager routes users to nearest healthy region automatically

📊 Performance Results
95ms
Average Latency
Target: <200ms ✅
99.995%
Actual Uptime
Target: 99.99% ✅
100%
Compliance
GDPR, CCPA ✅
12x
Peak Scale
Black Friday handled ✅

🗺️ Hands-On Lab 1: Explore Azure Global Infrastructure

Let's start by exploring Azure's global infrastructure through their interactive map. This will give you a visual understanding of where Azure's datacenters are located worldwide and which services are available in each region.

📋 Step-by-Step Instructions:

1

Open Azure Global Infrastructure

Navigate to the Azure Global Infrastructure page to see all regions and datacenters worldwide.

URL: https://azure.microsoft.com/en-us/explore/global-infrastructure/

💡 Tip: Open this in a new tab so you can follow along with the lesson

2

Explore the Interactive Map

Click on different regions on the world map to see:

  • • Region name and location
  • • Number of availability zones
  • • Available Azure services
  • • Compliance certifications
3

Compare Different Geographies

Click on regions in different geographies and notice:

  • United States: East US, West US, Central US
  • Europe: West Europe (Netherlands), North Europe (Ireland)
  • Asia Pacific: Southeast Asia (Singapore), East Asia (Hong Kong)
  • Australia: Australia East (Sydney), Australia Southeast (Melbourne)
4

Check Region Pairs

Look for the "Region pairs" section or information to see which regions are paired for disaster recovery.

What to look for: Notice how paired regions are always within the same geography but geographically separated.

🎯 What You'll Discover:

🌍 Global Reach:

  • • 60+ regions across 6 continents
  • • More regions than any other cloud provider
  • • Presence in 140+ countries
  • • Strategic placement near major population centers

🔍 Key Observations:

  • • Each region shows its geography (US, Europe, etc.)
  • • Availability zones are clearly marked
  • • Service availability varies by region
  • • Compliance certifications differ by location

📝 Take Notes:

As you explore, write down which regions are closest to your location and which services are available there. This will help you make informed decisions later!

📸 Take a screenshot of the Azure global map showing your region of interest

Azure Geographies: Data Residency & Compliance Boundaries

Think of Azure Geographies as legal and regulatory boundaries rather than just physical locations. They exist to ensure that your data never crosses certain borders without your explicit permission. This is crucial for organizations that must comply with laws like GDPR in Europe, data sovereignty requirements in China, or security regulations for US government agencies.

🌍 Azure Geographies: Where Data Sovereignty Meets Global Scale

🎯 What Are Azure Geographies?

🏛️ Definition

A geography is a discrete market that preserves data residency and compliance boundaries

Contains two or more regions for high availability
⚖️ Legal Purpose

Ensures customer data remains within specific legal jurisdictions

Meets data sovereignty and compliance requirements
🔐 Data Boundaries

Data never crosses geography boundaries during replication or disaster recovery

Unless explicitly configured by customer
🌐 Market Focus

Each geography targets specific market needs and regulatory requirements

Localized services and compliance certifications

🗺️ Major Azure Geographies:

🇺🇸 United States

8 regions including East US, West US, Central US

Special: US Government regions for federal agencies
🇪🇺 Europe

8 regions including West Europe, North Europe, France Central

GDPR compliant, data never leaves EU
🌏 Asia Pacific

10 regions including Southeast Asia, East Asia, Japan East

Covers Australia, Japan, Korea, India, Singapore
🇨🇳 China

Operated by 21Vianet, separate from global Azure

Meets Chinese data sovereignty requirements
🇩🇪 Germany

Special sovereign cloud with data trustee model

Extra privacy protections under German law

⚖️ Real-World Compliance Scenario: European Healthcare Company

🏥 Business Challenge:

Company: European pharmaceutical company with patient data subject to strict GDPR requirements and medical device regulations.

Requirement: Patient data MUST remain in EU
Compliance: GDPR Article 44-49 (data transfers)
Audit: Regular EU regulatory inspections
Backup: Disaster recovery within geography
☁️ Azure Geography Solution:
🌍 Europe Geography

Deploy in West Europe (primary) and North Europe (disaster recovery)

🔒 Guaranteed Boundaries

Data never leaves Europe geography, even during automated failovers

📋 EU Certifications

ISO 27001, SOC 1/2, GDPR compliance built-in

🔍 Audit Trail

Complete data location tracking and audit logs for regulators

✅ Compliance Outcomes
GDPR Compliant
Zero violations
Data Security
Encrypted at rest & transit
Audit Success
EU regulator approved
99.99% Uptime
With EU-only DR

⚙️ Hands-On Lab 2: Compare Service Availability Across Regions

Not all Azure services are available in every region. Let's explore which services are available where, and understand how this affects your architecture decisions.

📋 Step-by-Step Instructions:

1

Access Products by Region

Navigate to the Azure Products by Region page to compare service availability.

URL: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/
2

Select Services to Compare

Try filtering by these common services:

  • Virtual Machines: Available in all regions
  • Azure Kubernetes Service (AKS): Most regions
  • Azure AI Services: Limited regions
  • Azure Functions: Most regions
  • Azure Database for PostgreSQL: Most regions
3

Compare Key Regions

Select and compare these regions:

  • East US: Primary US region (most services)
  • West Europe: Primary EU region (most services)
  • Southeast Asia: Primary APAC region
  • Australia Central: Newer region (fewer services)
4

Note Service Categories

Pay attention to which service categories are available:

  • Compute: Available everywhere
  • AI + Machine Learning: Limited regions
  • Analytics: Most regions
  • Blockchain: Very limited regions

🔍 What You'll Learn:

✅ Service Patterns:

  • Core services (VMs, Storage) are everywhere
  • AI/ML services are in fewer regions
  • Newer regions have fewer services initially
  • Specialized services may be region-specific

💡 Key Insights:

  • • Choose regions based on required services
  • • Major regions (East US, West Europe) have most services
  • • Check service availability before committing to a region
  • • Consider service roadmap for future needs

⚠️ Architecture Impact:

If you need AI services but they're not available in your preferred region, you might need to: • Use a different region for AI services • Wait for service to be available • Use alternative services

📸 Screenshot: Service availability comparison for East US vs your local region

Azure Regions: Your Application's Physical Home

Azure regions are the physical locations where your applications actually run. Each region contains one or more datacenters connected by a dedicated low-latency network. When you deploy a virtual machine in "East US," it's physically running in a Microsoft datacenter in Virginia. Understanding regions is crucial for optimizing performance, managing costs, and ensuring your applications are close to your users.

🏢 Azure Regions: Where the Magic Happens

🎯 What Makes an Azure Region?

🏗️ Physical Infrastructure

One or more datacenters within the same geographic area (typically within 300 miles)

Connected by dedicated fiber network with <2ms latency
⚡ Network Connectivity

High-speed, redundant connections to Azure backbone and internet

Multiple ISP connections for reliability
🔋 Power & Cooling

Redundant power sources, backup generators, and climate control systems

99.9%+ infrastructure availability
🛡️ Physical Security

24/7 security, biometric access, surveillance, and environmental monitoring

SOC 2 Type II certified facilities

🌐 Popular Azure Regions:

East US (Virginia)

Primary US region, all services available

West Europe (Netherlands)

Primary EU region, GDPR compliant

Southeast Asia (Singapore)

APAC hub, serves 16 countries

Japan East (Tokyo)

Low latency for Japanese users

Australia East (Sydney)

Primary Australia region

🎮 Interactive Region Latency Demo

📍 Select Your User Location:
New York, USA
East Coast
London, UK
Western Europe
Tokyo, Japan
East Asia
Sydney, Australia
Australia East
⚡ Latency to Azure Regions:
East US -- ms
West Europe -- ms
Japan East -- ms
Australia East -- ms

Best Choice: Select a location above

💰 Hands-On Lab 3: Compare Regional Pricing

Azure pricing varies by region due to local costs, regulations, and market conditions. Let's explore how location affects your costs using the Azure Pricing Calculator.

📋 Step-by-Step Instructions:

1

Open Azure Pricing Calculator

Access the official Azure pricing calculator to estimate costs.

URL: https://azure.microsoft.com/en-us/pricing/calculator/
2

Add a Virtual Machine

Click "Virtual Machines" and configure:

  • Type: Virtual Machines
  • OS: Linux
  • Tier: Standard
  • Instance: D2s v3 (2 vCPUs, 8 GB RAM)
  • Hours: 730 (full month)
3

Compare Regions

Change the "Region" dropdown and note the price for:

  • East US: Baseline pricing
  • West Europe: Compare EU pricing
  • Japan East: Asia Pacific pricing
  • Brazil South: Premium pricing region
4

Add Storage and Compare

Add "Storage Accounts" (100 GB) and see how storage pricing varies by region too.

📊 Expected Findings:

💰 Typical Price Variations:

  • East US: Often the cheapest (~$70/month)
  • West Europe: Slightly higher (~$75/month)
  • Japan East: Moderate premium (~$80/month)
  • Brazil South: Highest cost (~$90/month)

💡 Key Insights:

  • • Price differences can be 20-30% between regions
  • • US Central often has the lowest prices
  • • Some regions have regulatory surcharges
  • • Storage pricing also varies by region

⚠️ Cost Optimization Tips:

  • • Choose cheaper regions for non-latency-sensitive workloads
  • • Consider data egress costs between regions
  • • Factor in compliance requirements vs. cost savings
  • • Use Reserved Instances for predictable workloads
📸 Screenshot: Pricing comparison table for VM in different regions

Region Pairs: Built-in Disaster Recovery

Region pairs are Azure's insurance policy against disasters. Each Azure region is paired with another region within the same geography, at least 300 miles away. This pairing ensures that if a hurricane, earthquake, or major power outage affects one region, your applications can automatically failover to the paired region. It's like having a backup datacenter that's always ready, without any effort from you.

🔗 How Azure Region Pairs Work

🎯 Region Pair Design Principles:

📏 Minimum Distance

At least 300 miles (480 km) apart to avoid simultaneous disasters

Distance protects against natural disasters, power grid failures
🌍 Same Geography

Both regions within same geography for compliance and data residency

Ensures data never crosses legal boundaries during disaster recovery
🔄 Planned Maintenance

Only one region in a pair is updated at a time

Ensures paired region is always available during maintenance
⚡ Automatic Features

Some Azure services automatically replicate to paired regions

Geo-redundant storage, Azure SQL Database geo-replication

🗺️ Common Azure Region Pairs:

East US ↔ West US

Virginia ↔ California (2,400 miles apart)

West Europe ↔ North Europe

Netherlands ↔ Ireland (700 miles apart)

Japan East ↔ Japan West

Tokyo ↔ Osaka (250 miles apart)

Australia East ↔ Australia Southeast

Sydney ↔ Melbourne (550 miles apart)

Availability Zones: Ultimate High Availability

Availability Zones are like having multiple datacenters within a single region, each with independent power, cooling, and networking. Think of them as insurance against smaller-scale failures: if one datacenter loses power, your application keeps running in the other zones. This is how Azure achieves 99.99% uptime SLAs - by eliminating single points of failure within a region.

🏢 Inside Availability Zones: Physical Separation for Digital Resilience

🎯 What Are Availability Zones?

🏭 Physical Isolation

Separate buildings or data halls within the same region

Each zone has independent power, cooling, and networking
⚡ High-Speed Connectivity

Connected by private fiber networks with <2ms latency

Fast enough for synchronous replication between zones
🛡️ Fault Isolation

Failure in one zone doesn't affect other zones

Protects against power outages, hardware failures, networking issues
📊 Enhanced SLAs

99.99% uptime SLA when deployed across multiple zones

vs. 99.9% for single-zone deployments

🏗️ Availability Zone Architecture:

East US Region - 3 Availability Zones
1
Zone 1

Datacenter A

2
Zone 2

Datacenter B

3
Zone 3

Datacenter C

High-speed fiber network (<2ms latency)
Key: Each zone has independent power, cooling, and networking infrastructure

🛡️ Hands-On Lab 4: Explore Availability Zone Support

Not all Azure regions support Availability Zones. Let's explore which regions have AZ support and understand how to check this information for your architecture planning.

📋 Step-by-Step Instructions:

1

Access Azure Portal

Sign in to your Azure Portal to explore availability zone information.

URL: https://portal.azure.com

💡 Use your free trial account credentials

2

Navigate to Virtual Machines

We'll use VM creation to see availability zone options:

  • • Click "Create a resource"
  • • Select "Virtual machine"
  • Don't worry - we won't actually create it!
3

Test Different Regions

In the VM creation form, change the "Region" and observe the "Availability zone" dropdown:

  • East US: Should show Zones 1, 2, 3
  • West Europe: Should show Zones 1, 2, 3
  • Japan East: Should show Zones 1, 2, 3
  • West US: May not show AZ options
4

Explore VM Sizes and AZ Support

Click "See all sizes" to explore which VM sizes support AZ deployment.

Important: Close the VM creation without clicking "Create" to avoid charges!

🔍 What You'll Discover:

✅ AZ-Supported Regions:

  • Major regions typically have 3 availability zones
  • Newer regions may not support AZs initially
  • Premium regions (like Government) may have different AZ setup
  • Service availability varies by zone

💡 Key Observations:

  • • When AZ dropdown is visible, the region supports AZ
  • • "No infrastructure redundancy required" = single zone
  • • Different VM sizes may have different AZ support
  • • AZ support affects pricing (slightly higher)

📝 Architecture Planning:

Always verify AZ support in your target region before committing to a high-availability architecture. Some newer or specialized regions may not support availability zones yet.

📸 Screenshot: VM creation form showing availability zone options for East US

Data Residency & Compliance: Meeting Global Regulations

In today's regulatory landscape, where your data lives can determine whether your business succeeds or fails. Azure's geography-based approach ensures compliance with data sovereignty laws, privacy regulations, and industry standards worldwide. From GDPR in Europe to HIPAA in healthcare, Azure's infrastructure is designed to meet the most stringent requirements without compromising performance or functionality.

🛡️ Azure's Comprehensive Compliance Portfolio

📋 Major Compliance Certifications:

🌍 Global Standards
• ISO 27001 (Information Security)
• ISO 27018 (Cloud Privacy)
• SOC 1, 2, 3 (Service Organization Controls)
• CSA STAR (Cloud Security Alliance)
🇪🇺 European Union
• GDPR (General Data Protection)
• EU Model Clauses
• EN 301 549 (Accessibility)
• ENISA (European Cybersecurity)
🇺🇸 United States
• FedRAMP (Federal Risk Management)
• HIPAA (Healthcare)
• FERPA (Education)
• CJIS (Criminal Justice)
🏦 Financial Services
• PCI DSS (Payment Card)
• SOX (Sarbanes-Oxley)
• FFIEC (US Banking)
• MiFID II (EU Markets)

🌐 Regional Compliance Examples:

🇩🇪 Germany: Enhanced Data Protection

Azure Germany operated with data trustee model under German law for maximum privacy protection.

Now integrated into standard Azure with same protections through Germany West Central region
🇨🇳 China: Local Data Sovereignty

Azure China operated by 21Vianet ensures compliance with Chinese data sovereignty laws.

Completely separate infrastructure, no data transfer to global Azure
🇺🇸 US Government: FedRAMP High

Azure Government cloud provides FedRAMP High authorization for federal agencies.

Separate infrastructure, US citizen administrators, enhanced security controls
🇦🇺 Australia: IRAP Assessment

Azure Australia Central regions provide PROTECTED-level hosting for government workloads.

Assessed by Australian Signals Directorate for government use

📋 Hands-On Lab 5: Explore Azure Compliance Offerings

Let's explore Azure's compliance offerings to understand which certifications and standards are available in different regions and services.

📋 Step-by-Step Instructions:

1

Access Microsoft Trust Center

Visit the official Microsoft Trust Center to explore compliance information.

URL: https://www.microsoft.com/en-us/trust-center
2

Navigate to Compliance Offerings

Click on "Compliance offerings" or search for specific standards:

  • GDPR: European data protection
  • HIPAA: US healthcare compliance
  • ISO 27001: Information security management
  • SOC 2: Service organization controls
3

Check Regional Availability

For each compliance standard, check:

  • • Which Azure services are covered
  • • Which regions support the compliance
  • • What documentation is available
  • • Customer responsibilities vs Microsoft responsibilities
4

Explore Service Trust Portal

Visit the Service Trust Portal for detailed compliance documentation.

URL: https://servicetrust.microsoft.com

🔍 What You'll Learn:

✅ Key Insights:

  • 100+ compliance offerings cover most global standards
  • Regional compliance varies by geography
  • Service-specific compliance depends on what you use
  • Shared responsibility model affects compliance

💡 Pro Tips:

  • • Always check compliance before choosing regions
  • • Download compliance documents for auditors
  • • Understand customer vs Microsoft responsibilities
  • • Monitor compliance updates and changes

⚠️ Important Notes:

Compliance is a shared responsibility. While Azure provides the compliant infrastructure, you must configure your applications and data handling practices correctly to maintain compliance.

📸 Screenshot: Microsoft Trust Center compliance dashboard

Session Summary & Key Takeaways

🎯 Azure Global Infrastructure: Your Foundation for Success

🌍 What You Learned Today:

  • Azure Geographies: Legal boundaries ensuring data sovereignty and compliance
  • Azure Regions: Physical locations with 300+ mile separation for disaster protection
  • Region Pairs: Built-in disaster recovery with automatic failover capabilities
  • Availability Zones: 99.99% uptime SLA through physical infrastructure separation
  • Compliance: 100+ certifications meeting global regulatory requirements

🛠️ Hands-On Skills Gained:

  • Global Map Navigation: Found regions and services worldwide
  • Service Comparison: Analyzed service availability across regions
  • Pricing Analysis: Compared regional pricing differences
  • AZ Exploration: Identified availability zone support
  • Compliance Research: Explored regulatory certifications

🎯 Architecture Decision Framework:

1. Compliance First

Always start with legal and regulatory requirements

2. User Proximity

Choose regions closest to your users for best performance

3. Service Availability

Verify required services are available in chosen regions

4. High Availability

Use availability zones for mission-critical applications

5. Cost Optimization

Balance performance needs with regional pricing differences

Hands-On Labs Completed
Global Map
Infrastructure overview
Service Comparison
Regional availability
Pricing Analysis
Cost comparison
AZ Exploration
High availability
Compliance Research
Regulatory standards
🚀 Ready for the Next Level?

Excellent work! You now understand Azure's global infrastructure hierarchy and have hands-on experience exploring regions, services, pricing, and compliance. Next, we'll dive into Azure subscriptions, resource groups, and management hierarchies to organize and manage your Azure resources effectively.

AZ-900 Exam Tips for Global Infrastructure
🎯 Key Concepts to Remember:
  • • Geography = compliance boundary, Region = physical location
  • • Availability Zones provide 99.99% SLA vs 99.9% single zone
  • • Region pairs enable automatic disaster recovery
  • • Data residency is guaranteed within geography boundaries
  • • Minimum 300 miles between paired regions
💡 Common Exam Scenarios:
  • • European company needing GDPR compliance → Europe geography
  • • Banking app requiring 99.99% uptime → Multi-AZ deployment
  • • Global app with low latency requirements → Multi-region
  • • US government workload → Azure Government cloud
  • • Disaster recovery planning → Region pairs and backup strategies