Azure AZ-204 Cheat Sheet

1# Create ACR
2az acr create -g RG -n myregistry --sku Basic
3
4# Login and push
5az acr login -n myregistry
6docker build -t myregistry.azurecr.io/myapi:1.0.0 .
7docker push myregistry.azurecr.io/myapi:1.0.0

 1FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 2WORKDIR /src
 3COPY . .
 4RUN dotnet publish -c Release -o /out
 5
 6FROM mcr.microsoft.com/dotnet/aspnet:8.0
 7WORKDIR /app
 8COPY --from=build /out .
 9ENV ASPNETCORE_URLS=http://+:8080
10EXPOSE 8080
11ENTRYPOINT ["dotnet","MyApi.dll"]

1# Example: build on source context (conceptual)
2az acr build -r myregistry -t myapi:<build-id> .

1# Minimal Container Apps flow (conceptual)
2az containerapp env create -g RG -n ca-env --location eastus
3az containerapp create -g RG -n myapi --environment ca-env \\
4  --image myregistry.azurecr.io/myapi:1.0.0 --ingress external --target-port 8080

 1# Plan + web app
 2az appservice plan create -g RG -n plan-az204 --sku P1v3 --is-linux
 3az webapp create -g RG -p plan-az204 -n mywebapp --runtime \"DOTNETCORE:8.0\"
 4
 5# App settings (configuration) + connection strings
 6az webapp config appsettings set -g RG -n mywebapp --settings ASPNETCORE_ENVIRONMENT=prod
 7az webapp config connection-string set -g RG -n mywebapp -t SQLAzure --settings Db=\"<conn-string>\"
 8
 9# Zip deploy (one option)
10az webapp deploy -g RG -n mywebapp --src-path ./artifact.zip --type zip
11
12# Slots (safe releases)
13az webapp deployment slot create -g RG -n mywebapp --slot staging
14az webapp deployment slot swap -g RG -n mywebapp --slot staging --target-slot production

 1name: build-and-deploy
 2on: [push]
 3jobs:
 4  deploy:
 5    runs-on: ubuntu-latest
 6    steps:
 7      - uses: actions/checkout@v4
 8      - uses: azure/login@v2
 9        with:
10          creds: ${{ secrets.AZURE_CREDENTIALS }}
11      - uses: azure/webapps-deploy@v3
12        with:
13          app-name: mywebapp
14          package: ./artifact.zip

1{
2  "version": "2.0",
3  "retry": {
4    "strategy": "fixedDelay",
5    "maxRetryCount": 5,
6    "delayInterval": "00:00:10"
7  }
8}

 1using Azure.Messaging.ServiceBus;
 2using Microsoft.Azure.Functions.Worker;
 3using Microsoft.Extensions.Logging;
 4
 5public class ProcessOrders
 6{
 7    private readonly ILogger _logger;
 8    public ProcessOrders(ILoggerFactory loggerFactory) => _logger = loggerFactory.CreateLogger<ProcessOrders>();
 9
10    [Function("ProcessOrders")]
11    public async Task Run(
12        [ServiceBusTrigger("orders", Connection = "ServiceBusConnection")]
13        ServiceBusReceivedMessage message,
14        ServiceBusMessageActions messageActions)
15    {
16        try
17        {
18            var body = message.Body.ToString();
19            _logger.LogInformation("Order received: {Body}", body);
20
21            // Do work...
22
23            await messageActions.CompleteMessageAsync(message);
24        }
25        catch (Exception ex)
26        {
27            _logger.LogError(ex, "Failed processing message");
28            await messageActions.AbandonMessageAsync(message);
29        }
30    }
31}

1var read = await container.ReadItemAsync<MyItem>(id, new PartitionKey(pk));
2var etag = read.ETag;
3
4item.Version = item.Version + 1;
5await container.ReplaceItemAsync(item, id, new PartitionKey(pk), new ItemRequestOptions
6{
7    IfMatchEtag = etag
8});

 1var client = new CosmosClient(endpoint, credential);
 2var container = client.GetContainer("db", "items");
 3
 4var query = new QueryDefinition("SELECT * FROM c WHERE c.type = @t")
 5    .WithParameter("@t", "invoice");
 6
 7using var iterator = container.GetItemQueryIterator<dynamic>(query);
 8while (iterator.HasMoreResults)
 9{
10    foreach (var item in await iterator.ReadNextAsync())
11    {
12        Console.WriteLine(item);
13    }
14}

 1var processor = container
 2    .GetChangeFeedProcessorBuilder<MyItem>(
 3        processorName: "proc",
 4        onChangesDelegate: async (changes, cancellationToken) =>
 5        {
 6            foreach (var doc in changes)
 7            {
 8                // react to changes
 9            }
10        })
11    .WithInstanceName("worker-1")
12    .WithLeaseContainer(leaseContainer)
13    .Build();
14
15await processor.StartAsync();

 1using Azure.Storage.Blobs;
 2using Azure.Storage.Blobs.Models;
 3
 4var container = new BlobContainerClient(connectionString, "docs");
 5await container.CreateIfNotExistsAsync();
 6
 7var blob = container.GetBlobClient("reports/2025-q4.pdf");
 8await blob.UploadAsync(fileStream, new BlobHttpHeaders { ContentType = "application/pdf" });
 9
10await blob.SetMetadataAsync(new Dictionary<string, string>
11{
12    ["owner"] = "finance",
13    ["classification"] = "internal"
14});

 1{
 2  "rules": [
 3    {
 4      "name": "tier-old-logs",
 5      "enabled": true,
 6      "type": "Lifecycle",
 7      "definition": {
 8        "filters": { "blobTypes": ["blockBlob"], "prefixMatch": ["logs/"] },
 9        "actions": {
10          "baseBlob": {
11            "tierToCool": { "daysAfterModificationGreaterThan": 30 },
12            "tierToArchive": { "daysAfterModificationGreaterThan": 180 },
13            "delete": { "daysAfterModificationGreaterThan": 365 }
14          }
15        }
16      }
17    }
18  ]
19}

 1using Azure.Storage.Sas;
 2
 3var builder = new BlobSasBuilder
 4{
 5    BlobContainerName = "docs",
 6    BlobName = "reports/2025-q4.pdf",
 7    Resource = "b",
 8    ExpiresOn = DateTimeOffset.UtcNow.AddMinutes(15)
 9};
10builder.SetPermissions(BlobSasPermissions.Read);
11
12var sasUri = blob.GenerateSasUri(builder);
13Console.WriteLine(sasUri);

 1using Microsoft.Identity.Client;
 2
 3var app = ConfidentialClientApplicationBuilder
 4  .Create(clientId)
 5  .WithClientSecret(clientSecret)
 6  .WithAuthority($"https://login.microsoftonline.com/{tenantId}")
 7  .Build();
 8
 9var result = await app.AcquireTokenForClient(new[] { "https://graph.microsoft.com/.default" })
10  .ExecuteAsync();
11
12Console.WriteLine(result.AccessToken);

1using System.Net.Http.Headers;
2
3using var http = new HttpClient();
4http.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", accessToken);
5
6var json = await http.GetStringAsync("https://graph.microsoft.com/v1.0/me");
7Console.WriteLine(json);

1using Azure.Identity;
2using Azure.Security.KeyVault.Secrets;
3
4var vaultUri = new Uri("https://myvault.vault.azure.net/");
5var client = new SecretClient(vaultUri, new DefaultAzureCredential());
6KeyVaultSecret secret = await client.GetSecretAsync("DbPassword");

1<rate-limit-by-key calls="10" renewal-period="60" counter-key="@(context.Subscription.Key)" />

1<validate-jwt header-name="Authorization" failed-validation-httpcode="401">
2  <openid-config url="https://login.microsoftonline.com/{tenantId}/v2.0/.well-known/openid-configuration" />
3  <required-claims>
4    <claim name="aud">
5      <value>{api-app-id-uri}</value>
6    </claim>
7  </required-claims>
8</validate-jwt>

1<cors allow-credentials="false">
2  <allowed-origins>
3    <origin>https://example.com</origin>
4  </allowed-origins>
5  <allowed-methods>
6    <method>GET</method>
7    <method>POST</method>
8  </allowed-methods>
9</cors>

1<rewrite-uri template="/v2/{uri}" />

1<set-backend-service base-url="https://mybackend.azurewebsites.net" />

1<cache-lookup vary-by-developer="false" vary-by-developer-groups="false" />
2<cache-store duration="60" />

1using Azure.Messaging.EventHubs;
2using Azure.Messaging.EventHubs.Producer;
3
4await using var producer = new EventHubProducerClient(connectionString, "telemetry");
5using EventDataBatch batch = await producer.CreateBatchAsync();
6batch.TryAdd(new EventData(System.Text.Encoding.UTF8.GetBytes("{\"ok\":true}")));
7await producer.SendAsync(batch);

1using Azure.Messaging.ServiceBus;
2
3await using var client = new ServiceBusClient(connectionString);
4ServiceBusSender sender = client.CreateSender("orders");
5await sender.SendMessageAsync(new ServiceBusMessage("hello") { CorrelationId = "c-123" });

 1using Azure.Storage.Queues;
 2
 3var queue = new QueueClient(connectionString, "jobs");
 4await queue.CreateIfNotExistsAsync();
 5
 6await queue.SendMessageAsync("do-work");
 7var msg = await queue.ReceiveMessageAsync(visibilityTimeout: TimeSpan.FromMinutes(2));
 8
 9// Do work...
10await queue.DeleteMessageAsync(msg.Value.MessageId, msg.Value.PopReceipt);