Project 2: Tailwind Traders — hub-spoke app with governance and operations

المشروع 2: Tailwind Traders — تطبيق Hub-spoke بالحوكمة والتشغيل

Design brief. Tailwind Traders runs an online shop. Build its production landing zone: a management group with a governance initiative, least-privilege RBAC per team, SSPR, locks and tag inheritance; a hub-spoke network with peering, a forced route through a hub NVA, private and public DNS; a highly available IIS web tier behind a Standard load balancer and an Application Gateway; a locked-down storage account with Azure File Sync for the branch office; a helper container on ACI; and day-2 operations: VM backup, diagnostics/log settings, Network Watcher checks and alerts. Requirements only — you design the clicks and commands.

The 18 tasks you will do

• Task 1 — Management group and resource groupsالمهمة 1 — الـ Management group والـ Resource groups
• Task 2 — Team identities and least-privilege RBACالمهمة 2 — هويات الفريق وصلاحيات أقل حاجة لازمة
• Task 3 — Self-service password reset for the network teamالمهمة 3 — Self-service password reset لفريق الشبكات
• Task 4 — Governance initiative at the management groupالمهمة 4 — Initiative للحوكمة على الـ Management group
• Task 5 — Locks and tag inheritanceالمهمة 5 — الـ Locks وتوريث الـ Tags
• Task 6 — Hub and spoke networks with peeringالمهمة 6 — شبكات Hub و Spoke بالـ Peering
• Task 7 — Force app traffic through the hub NVAالمهمة 7 — خلّي ترافيك الـ app يعدّي على الـ NVA
• Task 8 — Name resolutionالمهمة 8 — حل الأسماء (DNS)
• Task 9 — Highly available web tierالمهمة 9 — طبقة ويب High availability
• Task 10 — Publish the web tier with a Standard load balancerالمهمة 10 — انشر الويب بـ Standard Load balancer
• Task 11 — Layer-7 routing with Application Gatewayالمهمة 11 — توجيه Layer 7 بالـ Application Gateway
• Task 12 — Verify traffic with Network Watcherالمهمة 12 — اتأكد من الترافيك بـ Network Watcher
• Task 13 — Secure the storage accountالمهمة 13 — أمّن الـ Storage account
• Task 14 — File shares synced with the branch file serverالمهمة 14 — File share متزامنة مع سيرفر الفرع
• Task 15 — Run a helper container on ACIالمهمة 15 — شغّل Container مساعد على ACI
• Task 16 — Back up the web VMsالمهمة 16 — Backup للـ Web VMs
• Task 17 — Diagnostics and log settingsالمهمة 17 — الـ Diagnostics والـ Log settings
• Task 18 — Alerts that wake the right peopleالمهمة 18 — Alerts توصل للناس الصح