Managed services
Look for areas in the architecture where it may be natural to incorporate platform-as-a-service (PaaS) options. These include caching, queues, and data storage. PaaS reduces time and cost of managing servers, storage, networking, and other application infrastructure.
With PaaS, the infrastructure cost is included in the pricing model of the service. For example, you can provision a lower SKU virtual machine as a jumpbox. There are additional costs for storage and managing a separate server. You also need to configure a public IP on the virtual machine, which is not recommended. A managed service such as Azure Bastion takes into consideration all those costs and offers better security.
Azure provides a wide range of PaaS resources. Here are some examples of when you might consider PaaS options:
| Task | Use |
|---|---|
| Host a web server | Azure App Service instead of setting up IIS servers. |
| Indexing and querying heterogenous data | Azure Cognitive Search instead of ElasticSearch. |
| Host a database server | Azure offers many SQL and no-SQL options such as Azure SQL Database and Azure Cosmos DB. |
| Secure access to virtual machine | Azure Bastion instead of virtual machines as jump boxes. |
| Network security | Azure Firewall instead of virtual network appliances. |
For more information, reference Use platform as a service (PaaS) options.
Reference architecture
To see an implementation that provides better security and lowers cost through PaaS services, see [Network DMZ between Azure and an on-premises datacenter]((/azure/architecture/reference-architectures/dmz/secure-vnet-dmz).
Povratne informacije
Pošalјite i prikažite povratne informacije za