Azure AD Privileged Identity Management allows organizations to manage, monitor, audit access to sensitive Azure resources. One of the main features of PIM is the ability to provide just-in-time (JIT) access to Azure AD and Azure resources. As an example, a user can request to be a Global Administrator for 1 hour. Once a user requests it… READ MORE
The adoption of Azure AppService continues to grow, and I fully support this. However, one of the most common requests that I get when transitioning people surround backups and true redundancy and integrity strategies. Out of the box, Azure provides two backup options, which are important to understand. In addition to this, there are easy… READ MORE
This blog post will show you how you can change the name of an Azure Subscription with the use of Azure CLI and Azure PowerShell. When a proper Azure governance model is followed, you can ensure that your teams are operating in a secure and compliant Azure environment during design, development and operations. In this way you can not only minimize operational and reputational risks, but it will also help you… READ MORE
Yesterday, a couple of code snippets I contributed to Bicep 💪, were merged in the latest Bicep CLI version 0.3.310! Super cool to see this in action myself for the first time. What does it allow you to do? Bicep is the DSL which allows you to create Azure Resources in a declarative way. The… READ MORE
Currently, you can’t create a brand new Watchlist using either of these, you can only update existing Watchlists. The reason is that both of these Logic App Connectors rely on JSON and Watchlists only currently support creation using .csv files. So, for now, both of these currently work in the same fashion and provide the… READ MORE
The Backup feature in Azure App Service allows us to easily create app backups manually or on a schedule. Refer this blog to know more about how to configure backup in Azure Web App: https://www.iamashishsharma.com/2021/01/configure-backup-for-your-azure-app.html In this article, we will discuss how to create an alert which will get triggered whenever backup of web app… READ MORE
Azure Bicep is the new domain-specific language to deploy your resources in Azure using a declarative syntax. The main difference with ARM templates, Bicep uses a more concise syntax and helps you to scale your deployment without having to pull out your hairs.Since version 0.3, in March 2021, Bicep is supported Microsoft Azure support plans.… READ MORE
In my article A Practical Approach to Temporal Architecture, I outlined the various Temporal components and how they interact. Today’s blog builds on this knowledge and demonstrates an example of deploying Temporal to Kubernetes and, more specifically, to Azure Kubernetes Service (AKS). My example is self-contained: it provisions a full environment with all the required Azure resources, Temporal… READ MORE
In recent years, I have written +20 Cloud App Security (MCAS) related blog posts but never touched deeply on Access Policies. Blocking access to the cloud environment can be efficiently done with other methods, such as Conditional Access policies, and use cases for using MCAS Access Policies are rare, but there are a few interesting… READ MORE
Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Like any other cloud services, you can automate most of the Azure… READ MORE
