Resource Groups - CodeForce2020/AZ-900-Microsoft-Azure-Fundamentals GitHub Wiki
Explore resource groups
A resource group is a unit of management for your resources in Azure. You can think of your resource group as a container that allows you to aggregate and manage all the resources required for your application in a single manageable unit. This allows you to manage the application collectively over its lifecycle, rather than manage components individually. Before any resource can be provisioned, you need a resource group for it to be placed in.
You can manage and apply the following resources at resource group level:
- Metering and billing
- Policies
- Monitoring and alerts
- Quotas
- Access control
Remember that when you delete a resource group you delete all resources contained within it.
Considerations
When creating and placing resources within resource groups there are a few considerations:
Each resource must exist in one, and only one, resource group.
A resource group can contain resources that reside in different regions.
You decide how you want to allocate resources to resource groups based on what makes the most sense for your organization.
You can add or remove a resource to a resource group at any time.
You can move a resource from one resource group to another.
Resources for an application do not need to exist in the same resource group. However, it is recommended that you keep them in the same resource group for ease of management.
✔️ Do you have a strategy on how you will organize your Azure resources?
Logical grouping
Resource groups exist to help manage and organize your Azure resources. By placing resources of similar usage, type, or location, you can provide some order and organization to resources you create in Azure. Logical grouping is the aspect that we're most interested in here, since there's a lot of disorder among our resources.
Conceptual image showing a resource group box with a Function, VM, database, and app included
Life cycle
If you delete a resource group, all resources contained within are also deleted. Organizing resources by life cycle can be useful in non-production environments, where you might try an experiment, but then dispose of it when done. Resource groups make it easy to remove a set of resources at once.
Authorization
Resource groups are also a scope for applying role-based access control (RBAC) permissions. By applying RBAC permissions to a resource group, you can ease administration and limit access to allow only what is needed.