1 min read
Azure Lighthouse for Multi-Tenant Management
Azure Lighthouse transforms multi tenant management from a fragmented experience to a unified operational model. Whether you're a managed service provider…
Blog
Thoughts on data engineering, cloud architecture, and technology. 2205 articles and counting.
Showing 24 of 2205 posts — page 79 of 92
1 min read
Azure Management Groups for Enterprise Hierarchy
Azure Management Groups are the first thing I help clients set up when their Azure estate starts involving more than two or three subscriptions. Without…
1 min read
Azure Resource Graph for Cross-Subscription Queries
Azure Resource Graph is the query service that answers "what do we actually have in Azure?" at enterprise scale in milliseconds. The ARM APIs query each…
1 min read
ARM Template Specs for Enterprise Template Management
ARM Template Specs provide a governed, versioned approach to managing infrastructure templates. With native RBAC integration and first class Azure resource…
1 min read
Bicep Modules for Modular Azure Infrastructure
Bicep modules enable clean, maintainable Azure infrastructure code. By separating concerns into modules, you create reusable components that can be shared…
1 min read
Pulumi for Azure Infrastructure as Code
Pulumi is the infrastructure-as-code choice for teams where "I don't want to learn another DSL" is a genuine constraint. You write infrastructure in C#…
1 min read
Terraform Azure Provider Fundamentals
Terraform with the AzureRM provider is the infrastructure-as-code choice I recommend to teams that need multi-cloud portability or already have Terraform…
1 min read
GitHub Actions Workflows for Azure Deployments
GitHub Actions workflows for Azure deployment have become my default for any project that lives on GitHub and targets Azure. The Azure/login action with…
1 min read
Azure Pipelines Templates for Reusable CI/CD
Azure Pipelines supports four template types: 1. Stage templates Reusable stages 2. Job templates Reusable jobs 3. Step templates Reusable steps 4. Variable…
1 min read
Mastering Azure DevOps YAML Pipelines
Configure in Azure DevOps UI or via YAML: Azure DevOps YAML pipelines provide powerful, version controlled CI/CD capabilities. By leveraging templates,…
2 min read
C# 10 Preview Features for Modern Development
C# 10 is the language release I've been most anticipating in a long time. Record structs, global usings, file-scoped namespaces, extended property…
2 min read
Exploring .NET 6 Preview Features for Azure Development
.NET 6 Preview 4 in June 2021 was the point where I started genuinely excited about the November GA. Minimal APIs, Blazor improvements, native AOT…
1 min read
ASP.NET Core Best Practices on Azure App Service
ASP.NET Core on Azure App Service is the combination I've deployed more than any other in the past three years, and the relationship between the .NET…
1 min read
Deploying Blazor WebAssembly Applications on Azure
Let's start with a new Blazor WebAssembly project: A typical Blazor WASM project includes: The most straightforward option for client side Blazor apps:…
2 min read
Azure Static Web Apps Custom Domains Configuration
Subdomains are the simplest to configure. You'll create a CNAME record pointing to your Static Web App's default hostname.
1 min read
Azure Application Gateway v2: Regional Load Balancing Deep Dive
Application Gateway v2 is where the regional Layer 7 load balancer story became production-serious for enterprise workloads. Autoscaling means you don't…
1 min read
Azure Front Door Standard/Premium: Global Application Delivery
Azure Front Door Standard/Premium is the convergence I've been waiting for since the days when you had to choose between classic Front Door (global routing…
1 min read
Azure Web Application Firewall: Custom Rules and Policies
Platform Use Case Global/Regional Application Gateway Regional apps, traditional Regional Front Door Global apps, edge protection Global CDN Static content…
1 min read
Azure DDoS Protection: Defending Against Volumetric Attacks
Basic (Free) Always on traffic monitoring Automatic mitigation Protection for Azure infrastructure No SLA or customization Standard (Paid) All Basic…
3 min read
Microsoft Build 2021: GPT-3 in Power Apps and Azure AI Updates
The headline announcement for me was the integration of GPT-3 into Power Apps. You can now describe what you want in plain English, and GPT-3 generates the…
1 min read
Azure Managed HSM: FIPS 140-2 Level 3 Key Management
Feature Key Vault Premium Managed HSM HSM Type Multi tenant Single tenant FIPS Level 140 2 Level 2 140 2 Level 3 Admin Control Azure managed Customer…
1 min read
Azure Key Vault Certificates: Complete Lifecycle Management
Key Vault stores certificates as: Certificate : The X.509 certificate (public) Key : The private key (protected) Secret : The combined certificate + private…
1 min read
OAuth 2.0 Flows with Azure AD: Choosing the Right Flow
Flow Use Case User Interaction Authorization Code Web apps, mobile Yes Authorization Code + PKCE SPAs, mobile, desktop Yes Client Credentials Daemon/service…
1 min read
MSAL Libraries Deep Dive: Cross-Platform Authentication
MSAL handles: OAuth 2.0 protocol flows Token caching Token refresh Multi account support Conditional Access handling For APIs calling downstream APIs: MSAL…