How is Azure organized: subscription, resource group and resource?
Options
- A subscription is for billing; a resource group holds resources (Correct option)
- A resource group contains subscriptions, and subscriptions hold resources
- Resources contain resource groups, and groups contain subscriptions
- They are all the same thing, named at different levels
Answer
A subscription is a billing and access boundary; a resource group is a logical container for related resources that share a lifecycle; a resource is a single service instance (VM, storage account)
Why
Hierarchy: Management group, Subscription, Resource group, Resource.
- Subscription: billing and quota boundary.
- Resource group: a folder for resources that are deployed, managed and deleted together (an app and its database).
- Resource: a concrete thing: VM, VNet, storage account, AKS cluster.
Permissions (Azure RBAC) and policies can be applied at any level and are inherited downward. Deleting a resource group deletes everything in it.
Remember
Subscription (billing) > resource group (lifecycle folder) > resources.