Azure Bicep is the new domain-specific language to deploy your resources in Azure using a declarative syntax. The main difference with ARM templates, Bicep uses a more concise syntax and helps you to scale your deployment without having to pull out your hairs.Since version 0.3, in March 2021, Bicep is supported Microsoft Azure support plans.… READ MORE
In my article A Practical Approach to Temporal Architecture, I outlined the various Temporal components and how they interact. Today’s blog builds on this knowledge and demonstrates an example of deploying Temporal to Kubernetes and, more specifically, to Azure Kubernetes Service (AKS). My example is self-contained: it provisions a full environment with all the required Azure resources, Temporal… READ MORE
Hi! In this article, I will show you how a malicious actor can leverage the Azure Managed Disk Import / Export feature to exfiltrate data outside of your organization. By default, in Azure all the Azure Disks are configured with a public endpoint enabled. You can generate a time bound Shared Access Signature (SAS) URI… READ MORE
In recent years, I have written +20 Cloud App Security (MCAS) related blog posts but never touched deeply on Access Policies. Blocking access to the cloud environment can be efficiently done with other methods, such as Conditional Access policies, and use cases for using MCAS Access Policies are rare, but there are a few interesting… READ MORE
Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Like any other cloud services, you can automate most of the Azure… READ MORE
In my previous article, I outlined the various components of Temporal and how they interact. Today’s blog builds on this knowledge and demonstrates an example Temporal deployment. It’s a minimalistic deployment on Azure which combines a managed MySQL database with Azure Container Instances, suitable for simple experimentation and development. Here is a diagram of the cloud infrastructure: This… READ MORE
After working with Microsoft Azure for over 10 years now, think this must be the one question that I’ve received the most “why is my VM running so slow in Azure?”. Companies that have been using Azure as a pure IaaS based platform and moved or built new virtual machines on the cloud platform would certainly… READ MORE
A customer had asked me the last few days to help him optimize a SQL server on an Azure VM. The customer always had slight performance problems with this SQL server, so he first asked the application manufacturer or supervisor, but they didn’t want to or could help. The only answer they received was that… READ MORE
UPPDATE to the service! Since this post was published some preview features making it easier to manage has been released. Alerts based smart detection for application insights. And see also the detailed Migrate Azure Monitor Application Insights smart detection to alerts Monitoring Monitoring is essential for operations, it is not a minor thing to get in place nor… READ MORE
In this post, I wanted to highlight the key benefits of using Generation 2 virtual machines in Azure. These have been in general availability for a while now but from my own experience I don’t see too many Gen2 virtual machine deployments in the wild yet. If you have a Hyper-V background like myself, then… READ MORE
