36 lines
1.2 KiB
Markdown
36 lines
1.2 KiB
Markdown
---
|
||
title: Subscription
|
||
type: concept
|
||
tags: [Azure, Isolation, Resource]
|
||
date: 2026-04-14
|
||
---
|
||
|
||
## Definition
|
||
Azure Subscription(订阅)是 Azure 资源隔离的基本容器,每个订阅有独立的资源配额、计费账单和访问控制策略。在 Landing Zone 架构中,不同用途的工作负载使用独立的订阅实现隔离和管控。
|
||
|
||
## Key Characteristics
|
||
- 独立的资源配额(vCPU、存储等)
|
||
- 独立的计费账单
|
||
- 独立的资源访问控制
|
||
- 可绑定到不同的 Azure Active Directory 租户
|
||
|
||
## Common Subscription Types in Landing Zone
|
||
- **Platform Subscription**:平台服务(身份管理、连接)
|
||
- **Landing Zone Subscription**:工作负载部署
|
||
- **Decommission Subscription**:退役资源存放
|
||
- **Sandbox Subscription**:实验和测试环境
|
||
|
||
## Design Principles
|
||
- 每个订阅专注于特定用途
|
||
- 实现故障隔离和资源管控
|
||
- 最小化跨订阅依赖
|
||
- 通过标签实现成本分摊
|
||
|
||
## Related Concepts
|
||
- [[Management Groups]]:组织多个订阅
|
||
- [[Azure Landing Zone]]:多订阅架构
|
||
- [[Terraform Cloud]]:跨订阅自动化管理
|
||
|
||
## Connections
|
||
- [[Subscription]] ← organized_by ← [[Management Groups]]
|
||
- [[Azure Landing Zone]] ← contains ← [[Subscription]] |