Tag: Security
-
Deployment stacks give you Complete mode without the blast radius, and deny settings are the reason to adopt them. Then I moved a protected resource to another resource group and watched the protection stay behind.
-
Microsoft Fabric workspaces don’t exist in ARM. Bicep’s new Local Extension SDK means that’s no longer a wall, just a gap I could build my way across. Fabric keeps coming up on the data platform side of my day job, and every time it does I hit the same seam: half of it is a…
-
Azure Firewall rules as code, shifted left: catch CIDR typos and policy errors in the CI pipeline before they ever reach production.
-
Part two of Azure Firewall rules as code: plugging modular rule definitions into Azure DevOps pipelines so changes are rehearsed, automated and safe.
-
Azure Firewall rules as code, part one: build a modular, reusable lab deployment that brings consistency and automation to firewall rule management.