The Ultimate Azure Cheatsheet

# ── Install & Login ──
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
az login
az account set --subscription "My Subscription"
az account list --output table

# ── Create Resource Group ──
az group create --name myResourceGroup --location eastus

# ── Create Virtual Machine ──
az vm create   --resource-group myResourceGroup   --name myVM   --image Ubuntu2204   --size Standard_B2s   --admin-username azureuser   --generate-ssh-keys   --public-ip-sku Standard

# ── Open Port (NSG) ──
az vm open-port   --resource-group myResourceGroup   --name myVM   --port 80 --port 443 --port 22

# ── VM Management ──
az vm list --resource-group myResourceGroup -o table
az vm show --resource-group myResourceGroup --name myVM
az vm start --resource-group myResourceGroup --name myVM
az vm stop --resource-group myResourceGroup --name myVM
az vm restart --resource-group myResourceGroup --name myVM
az vm deallocate --resource-group myResourceGroup --name myVM
az vm delete --resource-group myResourceGroup --name myVM --yes

# ── Resize VM ──
az vm resize --resource-group myResourceGroup --name myVM --size Standard_B4ms

# ── Get Public IP ──
az vm show -d -g myResourceGroup -n myVM --query publicIps -o tsv

# ── App Service (Web Apps) ──
# Create App Service Plan
az appservice plan create   --name myAppPlan --resource-group myResourceGroup   --sku B1 --is-linux

# Create Web App
az webapp create   --resource-group myResourceGroup   --plan myAppPlan   --name my-webapp-unique123   --runtime "NODE|18-lts"

# Deploy from GitHub
az webapp deployment source config   --name my-webapp-unique123   --resource-group myResourceGroup   --repo-url https://github.com/user/repo   --branch main

# Deploy from local
az webapp up --name my-webapp-unique123 --resource-group myResourceGroup

# Configure Environment Variables
az webapp config appsettings set   --name my-webapp-unique123   --resource-group myResourceGroup   --settings DB_HOST=localhost DB_PORT=5432

# View Logs
az webapp log tail --name my-webapp-unique123 --resource-group myResourceGroup

# Custom Domain & SSL
az webapp config hostname add   --webapp-name my-webapp-unique123   --resource-group myResourceGroup   --hostname www.example.com
az webapp config ssl create   --name my-ssl-cert   --resource-group myResourceGroup   --hostname www.example.com

# ── Azure Blob Storage ──
# Create Storage Account
az storage account create   --name mystorageacct123   --resource-group myResourceGroup   --location eastus   --sku Standard_LRS   --kind StorageV2

# Create Container
az storage container create   --name my-container   --account-name mystorageacct123   --auth-mode login   --public-access container

# Upload Files
az storage blob upload   --account-name mystorageacct123   --container-name my-container   --name index.html   --file ./index.html

# List Blobs
az storage blob list   --account-name mystorageacct123   --container-name my-container   --output table

# Generate SAS Token (7 day expiry)
az storage blob generate-sas   --account-name mystorageacct123   --container-name my-container   --name index.html   --permissions r   --expiry 2025-12-31T23:59:00Z

# ── Azure SQL Database ──
# Create SQL Server
az sql server create   --name my-sql-server-123   --resource-group myResourceGroup   --location eastus   --admin-user sqladmin   --admin-password MyStr0ngP@ssw0rd!

# Create SQL Database
az sql db create   --resource-group myResourceGroup   --server my-sql-server-123   --name myDatabase   --service-objective S1

# Configure Firewall
az sql server firewall-rule create   --resource-group myResourceGroup   --server my-sql-server-123   --name AllowMyIP   --start-ip-address 0.0.0.0   --end-ip-address 255.255.255.255

# ── Azure Cosmos DB ──
az cosmosdb create   --name my-cosmos-123   --resource-group myResourceGroup   --kind MongoDB   --server-version 4.2   --locations regionName=eastus

az cosmosdb mongodb database create   --account-name my-cosmos-123   --resource-group myResourceGroup   --name myDatabase

az cosmosdb mongodb collection create   --account-name my-cosmos-123   --resource-group myResourceGroup   --database-name myDatabase   --name myCollection   --shard /_id

# ── Azure Cache for Redis ──
az redis create   --name my-cache-123   --resource-group myResourceGroup   --location eastus   --sku Basic   --vm-size C0

# ── Azure Functions (Serverless) ──
# Create Function App
az functionapp create   --resource-group myResourceGroup   --consumption-plan-location eastus   --runtime node   --functions-version 4   --name my-func-app-123   --storage-account mystorageacct123

# Create HTTP Trigger Function
func new --template "HTTP trigger" --name HttpExample

# Deploy Functions
func azure functionapp publish my-func-app-123

# ── Azure Kubernetes Service (AKS) ──
# Create AKS Cluster
az aks create   --resource-group myResourceGroup   --name myAKSCluster   --node-count 3   --node-vm-size Standard_B2s   --enable-managed-identity   --generate-ssh-keys   --enable-addons monitoring

# Get Credentials
az aks get-credentials   --resource-group myResourceGroup   --name myAKSCluster

# Scale Nodes
az aks scale   --resource-group myResourceGroup   --name myAKSCluster   --node-count 5

# Upgrade Cluster
az aks upgrade   --resource-group myResourceGroup   --name myAKSCluster   --kubernetes-version 1.29

# List Nodes
kubectl get nodes

// ── Azure Function: HTTP Trigger (Node.js) ──
const { app } = require('@azure/functions');

app.http('HttpExample', {
  methods: ['GET', 'POST'],
  authLevel: 'function',
  handler: async (request, context) => {
    context.log('HTTP trigger function processed a request.');

    const name = request.query.get('name') ||
                 (await request.json()).name;

    if (!name) {
      return {
        status: 400,
        body: JSON.stringify({ error: 'Please pass a name.' }),
        headers: { 'Content-Type': 'application/json' },
      };
    }

    return {
      status: 200,
      body: JSON.stringify({ message: `Hello, ${name}!` }),
      headers: { 'Content-Type': 'application/json' },
    };
  },
});

# ── Role-Based Access Control (RBAC) ──
# List available roles
az role definition list --output table

# Assign role to user
az role assignment create   --assignee user@example.com   --role "Contributor"   --resource-group myResourceGroup

# Assign role to a service principal (app)
az role assignment create   --assignee APP_ID   --role "Storage Blob Data Contributor"   --scope /subscriptions/SUB_ID/resourceGroups/myRG

# List role assignments
az role assignment list --assignee user@example.com -o table
az role assignment list --resource-group myResourceGroup -o table

# ── Service Principal (App Registration) ──
az ad sp create-for-rbac   --name "my-app-sp"   --role Contributor   --scopes /subscriptions/SUB_ID

# Output: appId, password, tenant
az ad sp list --display-name "my-app-sp" -o table
az ad sp show --id APP_ID

# ── Azure Key Vault ──
az keyvault create   --name my-kv-12345   --resource-group myResourceGroup   --location eastus

az keyvault secret set   --vault-name my-kv-12345   --name MySecret   --value "my-secret-value"

az keyvault secret show   --vault-name my-kv-12345   --name MySecret