Home /Roadmap /Intermediate

⚡Level 02 · Intermediate

Build Production
Grade Patterns

You know the basics. Now learn how real systems are built — with resilience, security, identity, error handling, and production-grade service integrations.

8 Services47 TopicsRequires BeginnerProduction patterns

Access Tiers — Hot, Cool, Cold, Archive

Cost optimization, rehydration from archive

Lifecycle Management Policies

Auto-tier and delete blobs with JSON rules

Blob Versioning & Soft Delete

Protect against accidental deletion

Event Grid + Blob Trigger

Near-real-time blob event processing

RBAC & Managed Identity for Storage

Zero-secret auth with DefaultAzureCredential

Private Endpoints & Firewall Rules

Lock storage to your VNet only

Topics, Subscriptions & Filters

Pub-Sub model, SQL & Correlation filters

Dead-Letter Queue (DLQ)

Handling poison messages, DLQ processor pattern

Sessions & Ordered Processing

FIFO guarantee with SessionId

Scheduled & Deferred Messages

Future delivery, defer for later processing

Managed Identity Authentication

RBAC roles, DefaultAzureCredential

Retry Policies & Delivery Count

MaxDeliveryCount, abandon vs dead-letter

All Trigger Types

Service Bus, Blob, Queue, Event Grid, Event Hubs, Cosmos

Input & Output Bindings

Declarative service connections — no SDK boilerplate

Isolated Worker Model (.NET 8)

DI container, startup, full .NET ecosystem

Error Handling & DLQ Trigger

Retry logic, explicit dead-lettering in code

Managed Identity in Functions

Access Storage, Service Bus, Key Vault without secrets

host.json & Performance Tuning

maxConcurrentCalls, prefetchCount, batchSize

Expressions & Functions Reference

utcNow(), triggerBody(), concat(), coalesce()

Error Handling — Try/Catch with Scope

runAfter, Failed/TimedOut, error logging pattern

Service Bus Integration

Complete, Abandon, Dead-letter from Logic App

Storage & Table Connector

Create blob, insert Table entity, query rows

Calling Azure Functions

Function action type, Managed Identity auth

Parallel For Each & Concurrency

Parallel loops, concurrency limits, throttling

Policy Engine Fundamentals

Inbound, backend, outbound, on-error sections

JWT Validation Policy

validate-jwt with Entra ID OpenID config

Rate Limiting & Quotas

rate-limit, rate-limit-by-key, quota-by-key

Caching Strategies

cache-lookup/store, fragment caching, Redis

Named Values & Key Vault

Global constants, secret references, no hardcoding

Versioning & Revisions

URL-path versions, safe revision testing

Event Grid Concepts

Topics, subscriptions, event schema, push vs poll

Subscribe to Blob Events

BlobCreated/BlobDeleted → Function trigger

Subscribe to Service Bus Events

DLQ threshold alerts via Event Grid

Publish your own domain events to Event Grid

Event Grid in Logic Apps

Webhook trigger vs polling for real-time events

Application Insights Setup

SDK configuration, auto-instrumentation, connection strings

KQL Queries for Troubleshooting

Log Analytics, common query patterns, joins

Custom Metrics & Events

TrackEvent, TrackMetric, custom dimensions

Alert Rules & Action Groups

Metric alerts, log alerts, notification channels

Distributed Tracing

Correlation IDs, dependency tracking, Application Map

Workbooks & Dashboards

Custom visualizations, parameterized reports

Managed Identity Authentication

System vs user-assigned, DefaultAzureCredential

Secret Versioning & Rotation

Version management, rotation strategies, expiry notifications

Certificate Management

Import, create, auto-renew with CA integration

Access Policies vs RBAC

Authorization models, least-privilege, migration

Key Vault References in App Config

App Service, Functions, and config integration

Network Security & Private Endpoints

Firewall rules, VNet integration, trusted services

Feeling confident?

Master these patterns and tackle the Advanced stage — complex orchestration, distributed tracing, and enterprise-grade designs.

Next: Advanced Stage →