Notes on cloud engineering & DevOps
How Azure Firewall Policy's parent/child inheritance lets an MSP keep a non-negotiable security baseline in code while a customer safely self-serves their own rules, built from scratch as a Terraform POC, and mapped out for migrating an existing customer firewall into the model.
Azure Policy has no built-in deduplication. Assign five compliance frameworks and you get five times the noise. Initiative Merger fixes that by merging multiple initiatives into one deduplicated, deployable initiative.
A clear breakdown of the three pillars of Microsoft Defender for Cloud: Defender Plans, MCSB, and Compliance Initiatives, and how they relate to Secure Score and the Regulatory Compliance blade.
A critical look at Azure compliance frameworks, exploring why green scores don't always mean secure environments and how to build meaningful security posture beyond dashboard metrics.
Learn how to migrate from the community ingress-nginx controller to Microsoft's AKS App Routing add-on with minimal downtime using a phased approach that runs both controllers side by side.
Learn how to create, manage, and deploy Azure Policy exemptions using EPAC for compliant exceptions to your governance policies.