Skip to content

Commit 7cccee6

Browse files
committed
Fix merge conflicts
2 parents 4974943 + c8a1600 commit 7cccee6

File tree

544 files changed

+8424
-6059
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

544 files changed

+8424
-6059
lines changed

.openpublishing.redirection.json

Lines changed: 378 additions & 0 deletions
Large diffs are not rendered by default.

learn-pr/achievements.yml

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5335,3 +5335,53 @@ achievements:
53355335
title: Deploy model to NVIDIA Triton Inference Server
53365336
summary: NVIDIA Triton Inference Server is a multi-framework, open-source software that is optimized for inference. It supports popular machine learning frameworks like TensorFlow, Open Neural Network Exchange (ONNX) Runtime, PyTorch, NVIDIA TensorRT, and more. It can be used for your CPU or GPU workloads. In this module, you deploy your production model to NVIDIA Triton server to perform inference on a cloud-hosted virtual machine.
53375337
iconUrl: /training/achievements/introduction-nvidia-deepstream-graph-composer-azure.svg
5338+
- uid: learn.nvidia.develop-custom-object-detection-models-with-nvidia-and-azure-machine-learning.trophy
5339+
type: trophy
5340+
title: Develop Custom Object Detection Models with NVIDIA and Azure Machine Learning
5341+
summary: Azure Machine Learning studio is a GUI-based integrated development environment for constructing and operationalizing Machine Learning workflow on Azure. Learn how to develop custom object detection models using this service with NVIDIA GPU accelerated virtual machines.
5342+
iconUrl: /training/achievements/nvidia-deepstream-development-with-microsoft-azure-social.png
5343+
- uid: learn.nvidia.create-workspace-resources-getting-started-azure-machine-learning.badge
5344+
type: badge
5345+
title: Create workspace resources for getting started with Azure Machine Learning
5346+
summary: In this module, you learn how to create resources for getting started with Azure Machine Learning.
5347+
iconUrl: /training/achievements/setup-configure-nvidia-deepstream-development.svg
5348+
- uid: learn.nvidia.create-labeled-dataset-using-azure-machine-learning-data-labeling-tools.badge
5349+
type: badge
5350+
title: Create a labeled dataset using Azure Machine Learning data labeling tools
5351+
summary: Learn how to use Azure Machine Learning data labeling to create, manage, and monitor data labeling projects.
5352+
iconUrl: /training/achievements/setup-configure-nvidia-deepstream-development.svg
5353+
- uid: learn.azure.communication-service-send-sms-console-app.badge
5354+
type: badge
5355+
title: Send an SMS message from a C# console application with Azure Communication Services
5356+
summary: In this module, you'll create a C# console application that sends SMS messages using a phone number provisioned via Azure Communication Services.
5357+
iconUrl: /training/achievements/communication-service-send-sms-console-app.svg
5358+
- uid: learn.student-evangelism.build-ml-model-with-azure-stream-analytics.badge
5359+
type: badge
5360+
title: Track wild polar bears with AI
5361+
summary: Detect and track polar bears through photos using AI, and then use Power BI to show where cameras spot polar bears.
5362+
iconUrl: /training/achievements/student-evangelism/build-ml-model-with-azure-stream-analytics-badge.svg
5363+
- uid: learn.reactors.blockchain-tokens.badge
5364+
type: badge
5365+
title: Create tokens using OpenZeppelin
5366+
summary: Learn about the significance of tokens and how they are used in blockchain.
5367+
iconUrl: /training/achievements/reactors/blockchain-tokens.svg
5368+
- uid: learn.reactors.blockchain-solidity-ethereum-smart-contracts.badge
5369+
type: badge
5370+
title: Write Ethereum smart contracts by using Solidity
5371+
summary: Learn how to install and use tools that you can use to develop smart contracts.
5372+
iconUrl: /training/achievements/reactors/blockchain-solidity-ethereum-smart-contracts.svg
5373+
- uid: learn.reactors.blockchain-learning-solidity.badge
5374+
type: badge
5375+
title: Learn how to use Solidity
5376+
summary: Discover how Solidity can make it easy to program smart contracts for the Ethereum blockchain platform.
5377+
iconUrl: /training/achievements/reactors/blockchain-learning-solidity.svg
5378+
- uid: learn.reactors.blockchain-ethereum-networks.badge
5379+
type: badge
5380+
title: Connect and deploy to Ethereum networks
5381+
summary: Learn about and use Ethereum networks for development, testing, and production.
5382+
iconUrl: /training/achievements/reactors/blockchain-ethereum-networks.svg
5383+
- uid: learn.ethereum-blockchain-development.trophy
5384+
type: trophy
5385+
title: Get started with blockchain development
5386+
summary: This learning path introduces you to blockchain and development on the Ethereum platform. Discover what skills are necessary to learn to begin building your own blockchain networks at scale.
5387+
iconUrl: /training/achievements/ethereum-blockchain-development.svg
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.introduction-azure-machine-learning-auth.introduction
3+
title: Introduction
4+
metadata:
5+
title: Introduction
6+
description: Introduction to Azure Machine Learning authentication and authorization.
7+
ms.date: 03/06/2025
8+
author: Orin-Thomas
9+
ms.author: viniap
10+
ms.topic: unit
11+
durationInMinutes: 2
12+
content: |
13+
[!include[](includes/1-introduction.md)]
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.introduction-azure-machine-learning-auth.authentication-azure-machine-learning-workspaces
3+
title: Authentication for Azure Machine Learning workspaces
4+
metadata:
5+
title: Authentication for Azure Machine Learning workspaces
6+
description: Understand authentication for Azure Machine Learning workspaces.
7+
ms.date: 03/06/2025
8+
author: Orin-Thomas
9+
ms.author: viniap
10+
ms.topic: unit
11+
durationInMinutes: 6
12+
content: |
13+
[!include[](includes/2-authentication-azure-machine-learning-workspaces.md)]
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.introduction-azure-machine-learning-auth.manage-access-azure-machine-learning
3+
title: Manage access to Azure Machine Learning
4+
metadata:
5+
title: Manage access to Azure Machine Learning
6+
description: Control access to Azure Machine Learning resources.
7+
ms.date: 03/06/2025
8+
author: Orin-Thomas
9+
ms.author: viniap
10+
ms.topic: unit
11+
durationInMinutes: 7
12+
content: |
13+
[!include[](includes/3-manage-access-azure-machine-learning.md)]
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.introduction-azure-machine-learning-auth.authentication-between-azure-machine-learning-other-azure-services
3+
title: Authentication between Azure Machine Learning and other Azure services
4+
metadata:
5+
title: Authentication between Azure Machine Learning and other Azure services
6+
description: Configure access for workspaces to other Azure services.
7+
ms.date: 03/06/2025
8+
author: Orin-Thomas
9+
ms.author: viniap
10+
ms.topic: unit
11+
durationInMinutes: 10
12+
content: |
13+
[!include[](includes/4-authentication-between-azure-machine-learning-other-azure-services.md)]
Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.introduction-azure-machine-learning-auth.knowledge-check
3+
title: Knowledge check
4+
metadata:
5+
title: Knowledge Check
6+
description: Knowledge Check
7+
ms.date: 03/06/2025
8+
author: Orin-Thomas
9+
ms.author: viniap
10+
ms.topic: unit
11+
durationInMinutes: 3
12+
content: Choose the best response for each question.
13+
quiz:
14+
questions:
15+
- content: "When are account keys used for authentication purposes rather than Microsoft Entra ID?"
16+
choices:
17+
- content: "When accessing other Azure resources."
18+
isCorrect: false
19+
explanation: "Access between Azure resources (including Azure Machine Learning) use managed-identities which is a feature of Microsoft Entra ID"
20+
- content: "When Azure Machine Learning compute clusters or Kubernetes clusters access other Azure services."
21+
isCorrect: false
22+
explanation: "Azure Machine Learning compute clusters or Kubernetes clusters use managed-identities which are a feature of Entra ID"
23+
- content: "When account keys or tokens are used for access to external data sources."
24+
isCorrect: true
25+
explanation: "In cases on which the data source only accepts credential-based authentication, Azure Machine Learning can use Azure Key Vault to store these secrets"
26+
- content: "Which Azure Machine Learning default role should you assign to someone who is responsible for the compute resources in a workspace?"
27+
choices:
28+
- content: "Contributor."
29+
isCorrect: false
30+
explanation: "Contributors can create and delete compute resources in a workspace and also have additional permissions. Granting Contributor access to someone who is responsible to for the compute resources might pose a security risk"
31+
- content: "AzureML Compute Operator."
32+
isCorrect: true
33+
explanation: "Users assigned the AzureML Compute Operator role can only create, manage, delete, and access compute resources within a workspace"
34+
- content: "AzureML Data Scientist."
35+
isCorrect: false
36+
explanation: "Users assigned the AzureML Data Scientist role can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself."
37+
- content: "Which of the following statements is true regarding system-assigned managed identity for Azure Machine Learning?"
38+
choices:
39+
- content: "When that workspace is deleted, its associated system-assigned identity is also deleted."
40+
isCorrect: true
41+
explanation: "The lifecycle of system-assigned managed identities is tied to their associated resource. When the resource is deleted, the identity is also deleted."
42+
- content: "You must manually enable a system-assigned identity after creating a machine learning workspace."
43+
isCorrect: false
44+
explanation: "By default, Azure Machine Learning has a system-assigned managed identity and that is a supported scenario"
45+
- content: "Azure Machine Learning workspaces are assigned a user-managed identity by default."
46+
isCorrect: false
47+
explanation: "Creating an Azure Machine Learning workspace automatically creates a system-assigned managed identity. User-managed identities must be manually configured."
48+
49+
50+
51+
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.introduction-azure-machine-learning-auth.summary
3+
title: Summary
4+
metadata:
5+
title: Summary
6+
description: Module summary
7+
ms.date: 03/06/2025
8+
author: Orin-Thomas
9+
ms.author: viniap
10+
ms.topic: unit
11+
durationInMinutes: 1
12+
content: |
13+
[!include[](includes/6-summary.md)]
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
Azure Machine Learning (ML) is a cloud service for managing machine learning project lifecycles. ML professionals, data scientists, and engineers can use Azure Machine Learning to train and deploy models and manage machine learning operations (MLOps).
2+
3+
An Azure Machine Learning workspace is a centralized environment for managing machine learning projects, allowing collaboration and organization of experiments, datasets, models, and deployments. The workspace provides tools for creating, training, and deploying models, along with managing compute resources and data assets. As a cloud operations professional, you need to manage Azure Machine Learning workspace authentication and authorization.
4+
5+
## Learning objectives ##
6+
7+
After completing this module, you'll be able to:
8+
9+
- Set up authentication for Azure Machine Learning resources and workflows
10+
- Manage access to Azure Machine Learning workspaces
11+
- Set up authentication between Azure Machine Learning and other services
Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
Azure Machine Learning provides workspaces to create and manage machine learning artifacts. Workspaces serve as containers for access management, cost management, and data isolation. As the administrator of an Azure Machine Learning workspace, you'll manage two aspects of authentication and authorization:
2+
3+
- Manage access to Azure Machine Learning workspaces giving users the ability to create new resources or use existing ones.
4+
- Manage the authentication between Azure Machine Learning and the services it relies on.
5+
6+
Authentication in Azure Machine Learning workspaces can use Microsoft Entra ID or account keys or tokens. Keys and tokens are most only often used for access to external data sources that might not support Entra ID. In those scenarios, you can use Azure Key Vault to securely manage secrets. You should never include account keys or tokens directly in code.
7+
8+
Users authenticate to an Azure Machine Learning workspace using one of the following methods:
9+
10+
- **Interactive**: Users can leverage their Microsoft Entra ID to either directly authenticate, or to get a token that is used for authentication. Interactive authentication is used during experimentation and iterative development. Interactive authentication enables you to control access to resources (such as a web service) on a per-user basis.
11+
12+
- **Service principal**: Service principal accounts in Microsoft Entra ID can be used by services to authenticate or get a token. A service principal is used to authenticate an automated process to the service without requiring user interaction. For example, a continuous integration and deployment script that trains and tests a model every time the training code changes.
13+
14+
- **Azure CLI session**: The Azure CLI extension for Machine Learning (the ml extension or CLI v2) is a command line tool for working with Azure Machine Learning. Users can sign in to Azure via the Azure CLI on their local workstation, without storing credentials in Python code or prompting them to authenticate. Similarly, users can reuse the same scripts as part of continuous integration and deployment pipelines, while authenticating the Azure CLI with a service principal identity.
15+
16+
- **Managed identity**: When using the Azure Machine Learning SDK v2 on a compute instance or on an Azure Virtual Machine, users can use a managed identity for Azure. This workflow allows the VM to connect to the workspace using the managed identity, without storing credentials in Python code or prompting the user to authenticate. Azure Machine Learning compute clusters can also be configured to use a managed identity to access the workspace when training models. Whenever possible, using a managed identity is the preferred method and best practice.
17+
18+
You can use Microsoft Entra Conditional Access to further control or restrict access to the workspace for each authentication workflow. For example, you can configure conditional access so that an administrator is only able to access an Azure Machine Learning workspace from a managed device.
19+
20+
Azure Machine Learning can authenticate with other services using the following methods:
21+
22+
- Data access can happen along multiple paths depending on the data storage service and your configuration. For example, authentication to the datastore can use an account key, token, security principal, managed identity, or user identity.
23+
24+
- Azure Machine Learning workspaces use a managed identity to communicate with other Azure services. By default, this is a system-assigned managed identity, but you can also configure an Azure Machine Learning workspace with a user-assigned managed identity.
25+
26+
- Azure Machine Learning uses Azure Container Registry (ACR) to store container images used to train and deploy models. If you allow Azure Machine Learning to automatically create an ACR registry, it enables the **admin account** for that registry.
27+
28+
- The Azure Machine Learning compute cluster uses a **managed identity** to retrieve connection information for datastores from Azure Key Vault and to pull container images from ACR. You can also configure identity-based access to datastores, which will instead use the managed identity of the compute cluster.
29+
30+
- Managed online endpoints can use a managed identity to access Azure resources when performing inference.

0 commit comments

Comments
 (0)