Cloud Lab Specifications
Cloud labs provide a preconfigured browser-based environment that will provision a real, temporary cloud platform user account, lasting 60 minutes.
They are intended to be used for educational purposes only. We monitor for suspicious or abusive behavior, including any misuse of the lab beyond its stated educational purpose or activities.
Azure Cloud Labs & Sandbox
Resource Providers
Below are the resource providers currently allowed. We are actively expanding our capabilities and will add additional support in 2023.
Supported
If the resource provider is not explicitly stated in this list, it is not currently supported. See Azure’s documentation matching resource providers to services.
- Microsoft.Authorization/policyDefinitions/read
- Microsoft.Authorization/policyDefinitions/write
- Microsoft.Cdn
- Microsoft.CognitiveServices
- Microsoft.Compute
- Microsoft.ContainerInstance
- Microsoft.ContainerRegistry
- Microsoft.ContainerService
- Microsoft.Databricks
- Microsoft.DevTestLab
- Microsoft.DocumentDB
- Microsoft.EventHub
- Microsoft.HDInsight
- Microsoft.KeyVault
- Microsoft.ManagedIdentity
- Microsoft.Network
- Microsoft.OperationalInsights
- Microsoft.OperationsManagement
- Microsoft.PolicyInsights
- Microsoft.ServiceBus
- Microsoft.Sql
- Microsoft.Storage
- Microsoft.Synapse
- Microsoft.Web
Locations
- Allowed locations: westus and eastus
App Service Plan
- Allowed: Free and Shared, Basic, and Standard service plans (Docs)
- SKU names F1, D1, B1, B2, B3, S1, S2, S3
Virtual Machines
- Allowed: General purpose VMs with vCpu <= 8 and memoryGB <=32 (Docs)
- Sizes: B, Dsv3, Dv3, Dasv4, Dav4, DSv2, Dv2, Av2, DC, DCv2, Dv4, Dsv4, Ddv4, Ddsv4, Dv5, Dsv5, Ddv5, Ddsv5, Dasv5, Dadsv5
Cognitive Services
- Allowed SKUs: F0, S0, S1, S2
Databricks
- Allowed: Standard workspaces
Elasticpools
- Allowed: Basic and Standard tiers
Microsoft.SQL
- Allowed SKUs (requestedServiceObjectiveName): Free, Basic, S0, S1, S2, S3, S4, S6, S7, S9, S12, DW100c, DW200c
Synapse Big Data Pools
- Allowed nodesizes: Small and medium
Virtual Machine Scale Sets
- Allowed: General purpose VMs with vCpu <= 8 and memoryGB <=32 (Docs)
- Sizes: B, Dsv3, Dv3, Dasv4, Dav4, DSv2, Dv2, Av2, DC, DCv2, Dv4, Dsv4, Ddv4, Ddsv4, Dv5, Dsv5, Ddv5, Ddsv5, Dasv5, Dadsv5
AWS Cloud Labs & Sandbox
Services
Below are the services currently allowed. We are actively expanding our capabilities and will add additional support in 2023.
Supported
If a service or action is not explicitly stated in this list, it is not currently supported.
- EC2
- Limited EBS and VPC functionality
- EFS
- S3
- IAM
Regions
- Allowed regions: us-east-1, us-west-2
EC2
- Allowed instance types: t2.nano, t2.micro, t2.small, t3.nano, t3.micro, t3.small, t4g.nano, t4g.micro, t4g.small
IAM
- IAM user provisioned in the lab can’t be edited / removed
- IAM default inline policy with timestamp can’t be edited/deleted (SCP DenyInlinePolicyEdits)
Unavailable
- Root user access
- Organizations
- Billing and Account Settings
- Support