Azure in Germany was launched in 2016, and if you’ve
heard about that, you may already know, that Azure in Germany
is different from other Azure regions.
Azure in Germany is an isolated instance of Azure. It doesn’t connected to other Azure regions. Azure Portal URL is different – https://portal.microsoftazure.de. I recommend to read this article to understand high-level details why Azure in Germany was built this way.
Unlike Azure in China, which is operated by 21Vianet and doesn’t even have an English version of the website, Azure in Germany is operated by Microsoft, but with local specifics:
- German Azure regions are isolated from other regions (Europe, US, Asia). The network between these datacenters is isolated and dedicated within Germany.
- Support for Azure Germany comes from EU-based support staff. The German data trustee supervises all support that requires platform access.
- Customer data remains in Germany under the control of T-Systems International GmbH, a subsidiary of Deutsche Telekom, acting as the German data trustee. Microsoft does not have access to customer data or the datacenters without approval from and supervision by the German data trustee.
- Originally these regions were available only for the customers with business address in Germany. Recently it was extended to any customers with business address in EU/EFTA.
- Azure Germany is deployed in 2 regions
– Germany Central (Frankfurt) and Germany Northeast (Magdeburg, not far
from Berlin). Germany Central region is bigger and has more Azure
services deployed. Price for Azure services in these two regions is
pretty the same, it is a little bit higher than in Global Azure regions
in Europe (West Europe, North Europe).
- Azure in Germany has its own Azure Portal (https://portal.microsoftazure.de) and its own tenants (*.onmicrosoft.de).
- You need to specify that you want to connect to Azure
Germany in PowerShell or CLI. For example, this is an example
for PowerShell: Login-AzureRmAccount -EnvironmentName AzureGermanCloud
How Azure in Germany is different from CSP perspective:
- To be available to sell German Azure to your
customers in EU/EFTA, you’ll need to get a separate Partner Center
account by completing an additional enrollment. You will use a separate partner tenant to login into Partner Center – partnername.onmicrosoft.de. Once authorizes, you will be able to create customer accounts in any EU/EFTA country.
- Only partners with EU/EFTA business address are allowed to enroll to German Partner Center.
- Partner Center capabilities for German partner accounts are limited. Check here for details.
- All Azure services will be deployed in Germany (the same for
Office 365). You can’t assign your customer a Global Azure subscription
from German Partner Center account.
- German CSP services are billed in 6 local currencies – EUR, GBP, NOK, SEK, DKK, CHF.
- License-based Azure subscriptions (Azure AD, Azure MFA etc.) are not available. Only usage-based Microsoft Azure Germany – CSP.
- Not all Azure CSP services are available in Germany. Check here for details.
- Despite the fact that Azure Machine Learning is available in Azure Germany, it is not currently available in Azure CSP subscriptions.
- KeyVault in Azure Germany is not accessible through Azure Portal, but it is accessible through PowerShell. There isn’t a sovereign Certificate Authority integrated in Azure Germany. You’ll need to create the CSR and then get it signed by CA of choice, and then merge the certificate in KeyVault.
- Not all VM sizes are available. Check here for details.
- Azure ADs in Global Azure and in Azure Germany are fully isolated from each other. If On-Premise AD of a German customer is already integrated with Global Azure AD (using Azure AD Connect or other tools), you won’t be able to integrate it with German Azure AD before dropping the old integration.
No comments:
Post a Comment