liveBook · Manning

Azure Cloud Shell

As explained in Azure Security

Azure Cloud Shell is a browser-accessible interactive shell environment for managing Azure resources without local tool installation.

Azure Cloud Shell is a browser-accessible shell for managing Azure resources without installing tools locally. Open shell.azure.com or select the Cloud Shell icon in the Azure portal; first-time setup creates a storage account. section 2.1.3

Choose the environment that fits the task:

  • Use Bash when working with Azure CLI; Bash comes preinstalled with Azure CLI. section 2.1.3
  • Use PowerShell when PowerShell syntax or existing automation makes it the better choice. section 2.1.3
  • Run repeatable administration tasks, such as creating identities or deploying network resources, directly from the browser. section 2.1.3 section 3.2.3

Create an Azure resource

Azure Cloud Shell can run commands such as az ad user create for an Azure AD identity or az network firewall create for an Azure Firewall instance. Firewall deployment can also create a public IP and configure the firewall for an existing virtual network. section 2.1.3 section 3.2.3

Listing 2.1 Creating a user identity in Azure AD
az ad user create --display-name "Bob Miller"   #1
--password dQ76bmz7rMVs9gSP                   #2
--user-principal-name bob@contoso.com         #3
--force-change-password-next-sign-in true     #4
#1 Displays the name of the user identity
#2 The password used to sign in. The user can change it the next time they sign in.
#3 The username of the new user, which must contain one of the verified domains for your Azure tenant
#4 Requires the user to change their password the next time they sign in

Inspect the annotated Azure CLI listing to see identity parameters, including display name, unique username, password, and forced password change. section 2.1.3

How Azure Security covers it

How deep it goes
Explains access, shell choices, first-time storage setup, and command use, but not Cloud Shell internals.
Examples
Uses identity creation and Azure Firewall deployment as concrete command-line administration examples.
What it assumes
Requires browser access and Azure authentication; avoids local tool installation while resource creation may require administrative permissions.
What you can do after
Apply it via Azure CLI or PowerShell to create identities and deploy Azure resources from a browser.
How it connects
Connects Azure CLI and Azure PowerShell with the Azure portal, Azure Active Directory, storage accounts, and Azure Firewall.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.