Microsoft Azure guides from the perspective of someone who has deployed it in anger across public sector, consultancy, and MSP environments. Covers the infrastructure certification path (AZ-104, AZ-305), Entra ID and Conditional Access, networking with VNets and NSGs, Bicep and Terraform for IaC, cost management, and the security baselines that keep auditors happy. No vendor marketing, no course slides reheated. These are notes from real deployments, common failure modes, and the gaps the official documentation skips over. If you are taking certifications or running production Azure workloads, the guidance here is built to survive the Monday morning support call.
Everybody in IT can define least privilege. Give every identity the minimum access needed to do its job, and no more. It appears in every security policy, every framework, and every interview answer. Almost nobody implements it properly. That is not because the principle is hard to understand. It is because the principle is free […]
Least Privilege in Practice: Standing Access, Scope and Just-in-Time Read More »
This is the practical page. If you want the argument about why this work is never finished, that is a separate piece. This one is just the list, ordered by risk rather than by product area, so you can work through it. It is deliberately short. There are longer guides than this and most of
The Permissions Work to Do Before You Deploy Microsoft 365 Copilot Read More »
Azure dropped an email in my inbox this morning. It waves a comfortable 2028 retirement date at you, so most people will archive it and move on. The part that could actually bite lands next week. From 31 July 2026, a large chunk of the estate people are quietly running can no longer scale or
When should you create a new Azure subscription versus a new resource group – and why “more subscriptions” stopped being a bad idea. A cloud architect’s decision guide, with the history of what changed.
Azure Subscription vs Resource Group: A Decision Guide (2026) Read More »
“Landing zone” means four different things in Azure – from a single subscription to a full enterprise platform. A cloud architect explains the spectrum and how to scope the one you actually need.
Which Azure Landing Zone Do You Need? A Scoping Guide (2026) Read More »
The network perimeter dissolved and identity replaced it. Why machine identity now outnumbers humans, what the Cloud Adoption Framework says about who governs it, and how to learn every principle in a homelab for free.
Master Azure Storage – storage accounts, blob tiers, Azure Files, SAS tokens, and security. Complete AZ-104 storage guide with practical examples.
Azure Storage: Blob, Files & Security Configuration (AZ-104) Read More »
Master Azure networking – virtual networks, subnets, NSGs, peering, and hybrid connectivity. Complete guide for AZ-104 certification.
Azure Virtual Networks: VNets, NSGs, and Peering (AZ-104) Read More »
Master Azure identity and governance – Entra ID users and groups, RBAC roles, management groups, and Azure Policy. Essential AZ-104 knowledge.
Azure Identity & Governance: Entra ID, RBAC, and Policy (AZ-104) Read More »
Complete AZ-104 Azure Administrator study guide – exam objectives, study strategy, timeline, and practical tips. Your path to Azure certification.
AZ-104 Study Guide: Azure Administrator Certification Path Read More »
