Azure
Introduction In this post we will discuss internet access for Azure virtual machines. The most common method is using the implicit IP on VM, which assigns a dynamic public IP address to the virtual machine without you having to configure anything. However, this can cause issues with IP address changes
Terraform
Overview This post will talk about an overview of two types of Terraform backends: Standard and Enhanced. Standard backends, such as AWS S3 and Azure Storage, store state files but do not execute commands. Enhanced backends, like Terraform Cloud, can store state and perform operations such as terraform plan and
News
In this article I will try to explain the concept of git rebase and its advantages over git merge in maintaining a clean project history when working in source control. I will discuss scenarios where rebasing can be useful, such as when a bug is identified in the main branch
Azure
Microsoft recently announced that Microsoft Entra API-driven provisioning now is in public preview. This is great for several reasons as it lets you be more flexible with the way you manage identities in your organization. If you wish to have a single pane of glass for managing your identities
Azure
Azure Firewall is a firewall service in Azure that can do several things for you. It can inspect traffic flowing in and out of your environment, it can scale automatically depending on the load of traffic you experience and much more. It works with availability zones in your Azure Environment.
Azure
On September 1, 2023 the Malware Scanning add-on for Defender for Storage will be going generally available instead of preview. This is a great add-on which lets you protect your storage accounts and prevent malicious content from being uploaded and stored in your cloud storage. This is an
Azure
The main goal with Azure Chaos Studio is to introduce faults and problems into your environment in order to test your resiliency. In the same way that we configure backups we need to sometimes test restores, to be confident in our setup we need to test our other capabilites in
Azure
Whilst I was working on the Become a Defender for Cloud Ninja modules I found a link that has been very helpful to me in my day to day life working with Defender for Cloud. Future Kortor has written this community blog about the Defender for cost estimation and coverage
Azure
Introduction Soft-delete is a feature where as if you delete a vault or a vault object such as a key, secret or certificate you can restore it. For how long items remain in a soft-deleted stage is a configurable setting which ranges from 7-90 days. In short:
Azure
Introduction Your OS and data disks on your virtual machines are encrypted at rest by default, it is called Server-Side Encryption (SSE) and uses platform managed keys and there is no requirement of you to configure anything. However if you want to have more control over this there is
Azure
Introduction A common misunderstanding is that Microsoft Defender for Cloud (MDC) is expensive. And whilst a lot of the features inside the cloud workload protection platform (CWPF) comes with a price tag MDC also has the cloud security posture management (CSPM) feature which is free. A huge capability in the
Azure
App service cerfificates Managing certificates is a common task for an IT administrator and everyone has most certainly experienced downtime and service issues due to a certificate expiring and there was no system in place to make us aware of this, if you haven't I question if you