For ARM Template steps are in the following order
-
Create Resource Group
-
If Needed Create Custom Network Security Group NSG if default NSG is not sufficent for your deployment.
-
Create Network and defined the subnets ranges and assign default or custom NSG
- Hight recommended to defined specific subnet where all private links will use
-
Create LogAnalytics
-
Create Application Insights
-
Create Private DNS Zone for all private link to use during the deployment configuration
-
Create Key Vault
-
Enable Key Vault VNET Integration
-
Enable Key Vault Private link
-
Enable Key Vault diagnostic and metric Data to Log Analytics
-
Create Azure SQL Server
-
Create Azure SQL database
-
Enable Azure SQL Server VNET Integration
-
Enable Azure SQL Server Private link
-
Enable Azure SQL Server and Database audit, advance threading ..etc
-
Enable Azure SQL Server and Database diagnostic and metric Data to Log Analytics
-
Store Azure SQL database connection string in KeyVault
-
Upload the SQL Schema file
-
Create SaaS Portal App Service Plan
-
Enable SaaS Portal App Service Plan diagnostic and metric Data to Log Analytics
-
Create SaaS Portal Web App and reference SaaS Portal App ServicePlan
-
Link SaaS Portal Web App Configuration to KeyVault
-
Add VNET Inegration Configuration please refer to docs
-
Enable SaaS Portal Web App VNET Integration
-
Enable SaaS Portal Web App Private link
-
Enable SaaS Portal Web App diagnostic and metric Data to Log Analytics
-
Enable SaaS Portal Web App Application Insights
-
Create SaaS Admin App Service Plan
-
Enable SaaS Admin App Service Plan diagnostic and metric Data to Log Analytics
-
Create SaaS Admin Web App and reference SaaS Admin App ServicePlan
-
Link SaaS Admin Web App Configuration to KeyVault
-
Add VNET Integration Configuration please refer to docs
-
Enable SaaS Admin Web App VNET Integration
-
Enable SaaS Admin Web App Private link
-
Enable SaaS Admin Web App diagnostic and metric Data to Log Analytics
-
Enable SaaS Admin Web App Application Insights
-
Create Application Gateway
-
Configure Front-End IP pool
-
Configure Backend and reference to Web App
-
Configure HTTP Route
-
Configure Listener
-
Enable Application Gateway VNET Integration
-
Enable Application Gateway Private link
-
Enable Application Gateway Application Insight
** These step for multi-region deployment only**.
- Deploy Azure Traffic Manager
- Enable Geo Replication for SQL Server