What if I told you just using multi-factor authentication (MFA) wasn’t enough anymore? The Lapsus$ hacking group, who were at least partially made up of a group of teenagers in the UK, took a very targeted hacking approach. They used password stuffing to try to breach the password credentials of power users within organizations they were targeting.… READ MORE
Azure Functions can be defined as the cloud services that are available on the Azure portal providing updated infrastructure and resources that are needed for running the applications. It is used to build web APIs, respond to database changes, process IoT streams, manage message queues, and more. In this article, we will explore how to… READ MORE
Most typical reason I see that the SCM endpoint is not secured on App Services is that these apps are often updated by MS hosted Azure DevOps agent. Luckily you can increase the security of your app service greatly – If you previously did not have any network restrictions on SCM endpoint, you can now have the… READ MORE
I decided to write an post into creation of Azure AD Workload Identity using the option ’Workloads running in compute platforms outside of Azure’ covered @ MS DOCS. The ultimate simplification of workload federation is using Azure AD Client Credentials flow with client private key signed token, where metadata is provided to Azure AD via Discovery URL,… READ MORE
Hi! In this article, I will show you how you can remove the Defender for Containers profile from an existing AKS Cluster. az login az account set –subscription <subscription-id> az aks update –disable-defender –resource-group <your-resource-group> –name <your-cluster-name> To verify that the profile was successfully removed, run the following command: kubectl get pods -n azuredefender AKS… READ MORE
Azure Monitor, Microsoft’s built-in monitoring service, allows you to monitor and gain more visibility into the state of your resources from a single place. In this way this service can help you to quickly find and fix problems. To notify users that an alert has been triggered, Azure Monitor and also other services like Azure Service Health and Azure Advisor, use action groups. Action… READ MORE
The problem that I faced was that I wanted to pass a JSON to the application deployment task in the deployment task, I used the YAML deployment template. I stored the JSON variables as part of the pipelines folder. Issues faced The relative path to the JSON file does not work to be passed to… READ MORE
The intention of this post is to create Azure Container Apps deployment and to explain how it differentiates to Azure Container Instances for this specific context 1. Introduction In this post, I’d like to show, how to create a deployment of an Azure Container App – using a customized Container Image, which is managed by an Azure Container Registry. To figure… READ MORE
Azure Policy is a way of enforcing standards and guardrails and assessing resource compliance. In Azure, the compliance dashboard offers an aggregated view to validate the state of the platform with additional options to see the resources that are not compliant. Policy An Azure Policy itself evaluates resources within Azure based on the rules you… READ MORE
Intro This blog series will create and maintain Azure resources using GitHub repositories, GitHub Actions, and Terraform. I will use this blog series to build out a new Azure tenant that I have created, and I thought I might share what I was doing along the way. If you have any questions about this blog… READ MORE
