Recent content on Jorge Bernhardt
Hello everyone! I want to share how I replaced expiring service connection secrets with a better solution: Workload Identity Federation (WIF). Instead of manually renewing secrets, I built an automated approach using Terraform to manage service connections in a more secure and scalable way.
Overview Azure Storage automatically encrypts all data at rest using Storage Service Encryption (SSE). When you specify a customer-managed key (CMK), that key is not used to encrypt the data, it is used to protect and control access to the key that encrypts the data.
Hi everyone! Today, in this blog post, we’ll explore how to deploy Azure Chaos Studio using Terraform. As you may know, Azure Chaos Studio is a powerful service that lets us safely test our infrastructure by simulating real-world failures.
Happy New Year, everyone! To start the year, I’ll show you how I use Bicep to deploy and configure Azure Data Factory, walking you through the essential settings to ensure a secure and efficient setup.
In my previous article, we explored how to set up server-level Transparent Data Encryption (TDE) in Azure SQL. This method uses a single encryption key to secure multiple databases on a server or managed instance, providing consistent protection across all databases.
In Azure SQL, server-level Transparent Data Encryption (TDE) provides centralized encryption across multiple databases within a server or managed instance. By default, Azure SQL uses a Service Managed Key (SMK) for TDE, but we can also choose to deploy a Customer Managed Key (CMK) for better control.
Hi everyone! Today, in this blog post, we will explore how to deploy Azure Container Instances (ACI) using Terraform. As we have discussed several times on this blog, ACI is a vital Azure service for running Docker containers without the need to manage underlying virtual machines.
Hi everyone! Today, in this blog post, we will explore how to deploy and manage Azure Shared Image Galleries using Terraform. As you know, Shared Image Galleries in Azure provide a centralized way to store and manage custom images for your virtual machines, enabling consistent and efficient deployments across multiple regions.
Hi everyone! This week we’re talking again about “Policy as Code,” an approach that brings consistency and efficiency to policy management, similar to how “Infrastructure as Code” transformed infrastructure deployment.
Hi folks! Today, in this blog post, we’re going to explore how to implement Azure Container Registry (ACR) using Terraform. As we’ve discussed on several occasions in this blog, ACR is an essential Azure service for storing and managing Docker container images.
Keeping our cloud applications healthy and reliable requires constant monitoring. Azure Application Insights allows us to track performance, identify errors, and gain valuable insights into the behavior of our applications.
Azure provides us with a flexible and powerful platform to implement API Management resources, allowing us to take advantage of the capabilities of the cloud to improve the lifecycle of our APIs.
In our previous post, we looked at how to use Terraform to set up namespaces in Azure Service Bus. Now, we’re moving on to the next step: creating topics in Azure Service Bus.
Hey there! In another post, we discussed how you can use Terraform to deploy Azure Firewall and how it can make your cloud deployments more efficient and secure. Today, let’s explore how you can achieve similar results using Bicep, Azure’s language for resource declaration.
In the previous post, we started a series on using Terraform to deploy Azure Service Bus resources. We covered how to deploy namespaces in Azure Service Bus. Now, in this second post, we will look at Azure Service Bus queues, a fundamental component for efficient message handling.
Happy New Year, everyone! Kicking off our first article of the year, we’ll explore deploying Azure Elastic SAN using Bicep. Currently, there is no official Bicep module specifically for Elastic SAN implementation.
Azure Service Bus is a messaging service on the cloud that enables communication between applications and services. It’s a key component in many cloud architectures, especially when dealing with large-scale applications or services that require reliable, secure message passing and processing.
Hey there, folks! In today’s blog post, we’ll discuss the Azure Virtual Machine Scale Sets, also known as VMSS. If you have experience with Azure, you might already know that VMSS are crucial for managing cloud services that can be scaled up and down based on demand.
Static websites are gaining popularity due to their simplicity, security, and fast loading times. They are particularly useful for applications where the content is not updated frequently. Azure Storage provides a convenient and cost-effective way to host such static websites, serving content directly from storage containers without the need for a web server.
Hello! This week, I wanted to share a new post about biceps - As you know, Infrastructure as Code (IaC) has become a critical aspect of any successful and scalable deployment.
Hello everyone! The importance of securely managing our secrets, keys, and certificates has grown exponentially in our cloud environments. Azure Key Vault allows us to handle this sensitive data securely.
Hello everyone! Today, I want to talk about custom roles in Azure. Azure gives us many roles to use, but sometimes, they don’t do exactly what we want. So, we need to make our own roles that do the exact job.
Hi folks, I hope everyone is doing well. We all use Azure Storage Accounts to keep our data, like files and blobs. And it’s super important to keep that data safe.
In the previous article, we explored deploying Azure resources using Bicep with Azure DevOps. This week, we’re switching gears to GitHub Actions, showcasing a simple workflow to automate Azure deployments.
Nowadays, automating the deployment of cloud resources has become the norm. Azure DevOps is a go-to tool known for its solidness and adaptability. In this article, we’ll dive into how to create a simple pipeline to set up Azure resources using Microsoft’s infrastructure as code language, Bicep.
Hi folks, I sincerely hope you are all doing great. You are probably aware of the importance of Azure Key Vault in securely and centrally managing secrets, encryption keys, and certificates.
Monitoring and analyzing performance in modern cloud-based environments is crucial to ensure reliability. Azure Application Insights is a powerful tool for monitoring your applications, helping you detect and diagnose errors. Building on our previous discussion on Azure Log Analytics workspaces, This blog post will guide you through implementing Azure Application Insights with a Terraform module.
Hi! As cloud architectures become more complex, Infrastructure as Code (IaC) has become increasingly important. By using tools like Terraform, IaC allows you to manage intricate infrastructures in a text-based, repeatable, and automated manner.
Hi! This week, we’re talking about security, specifically how to use automatic key rotation in Azure Key Vault. In case you didn’t know, Azure Key Vault’s automated key rotation improves security by creating new key versions at set intervals and sending expiration alerts via Event Grid.
Microsoft’s Defender for Storage has recently unveiled a significant security update, with two standout features being near-real-time malware scanning and sensitive data discovery. In this article, I will guide you on how to enable these features across all your Azure storage accounts using Bicep.
Hello everyone! Azure offers a variety of security solutions, and Azure Firewall is a particularly effective tool. It is a fully managed cloud-native network firewall that provides top-notch protection for our virtual network resources.
Hi there! As you know, Microsoft Sentinel is an advanced SIEM tool that provides a comprehensive view of your organization’s security landscape. One of its superpowers comes from its integration with Azure AD connector.
Hi! Did you know that Azure Resource Locks can provide an extra layer of protection for your resources in case of accidental changes or deletions? And best of all, we can deploy them using Terraform.
Bicep is a language specifically designed for deploying Azure resources and offers a more user-friendly syntax than JSON. One of the cool features of Bicep is its built-in functions that allow performing a variety of operations and manipulations on data while creating Azure Resource Manager (ARM) templates.
Hi there! In a previous article, we discussed the deployment of an Azure Bastion host in an existing Virtual Network (VNet) using Azure CLI and PowerShell. While those methods are effective, there’s an opportunity to simplify the entire process.
Bicep promises more efficient resource management, but there are notable challenges when working with Azure B2C. From customizing certain tenant properties to retrieving detailed information, we must face limitations. This post will show you how to create an Azure B2C resource with Bicep, identify current limitations, and find potential solutions.
Hi! Today, I’d like to share a helpful tip on how you can efficiently manage your Azure resources and services while keeping your cloud spending in check. With Azure Budgets, you can easily set budget thresholds and receive alerts to monitor your costs proactively.
The use of Infrastructure as Code (IaC) has become vital in achieving successful and scalable implementations. Azure Bicep allows us to provision and manage resources in Azure with reliability and conciseness.
Hey, did you know that Azure Monitor has these cool things called action groups? They help you manage alerts by connecting them to different actions. You can receive notifications by email or text message, run Azure Functions, or even start a webhook with an HTTP call.
Hi all! Today I want to talk to you about “Policy as Code” Just as “Infrastructure as Code” changed how we handle infrastructure deployment, “Policy as Code” gives us consistency, traceability, and rapid implementation in policy management.
Hi everyone! Today I want to share how I use Terraform to implement your private DNS zones in Azure. Also, I’ll show you how to create ‘A’ records in these zones.
Managing your resources and services costs is crucial to your Azure subscriptions’ governance. That’s where Azure Budgets comes in. Azure Budgets helps us manage our cloud costs by setting spending limits.
In this blog post, I want to show you how to implement a hub-spoke network architecture on Azure using Terraform, one of my favorite infrastructure as code (IaC) tools. The hub-spoke model is a widely adopted networking strategy that allows you to simplify management, increase scalability, and improve the security of your Azure resources.
Azure Storage is a core foundational PaaS (Platform as a Service) offering within Microsoft Azure, providing a versatile and scalable solution for storing files, blobs (binary large objects), and other data types.
When you start using Terraform to manage your cloud infrastructure, a key consideration is where to store the state file that Terraform generates to track changes to your infrastructure. While storing this file locally on your machine is possible, a more scalable and secure approach is to store it in a centralized location that your entire team can access.
As administrators of an Azure subscription, we are always interested in monitoring what is happening in our environment. To do this, Azure gives us a way to do this through activity logs, which record the actions that are performed on our subscription.
We continue with the series of articles on private endpoints. Today I want to show you how to create a private endpoint to privately and securely connect to an Azure file share using Azure PowerShell.
I recently migrated an Azure subscription to a new tenant, and in the key vault resources, I had to perform a few additional steps that I want to show you. So In this week’s article, we’ll look at updating the tenant ID and removing previous access policies and role assignments to the key vault resource once it’s moved to the new subscription.
If you need to perform a quick ad-hoc backup of your virtual machine before maintenance that allows you to take consistent snapshots of all managed disks attached to your virtual machine, you should try Azure restore points.
Hi everyone, and happy new year. In the first post of the year, I want to continue talking about Private Endpoints. In this post, I want to show you how to create a private endpoint to connect securely to an Azure Key Vault, and I’ll also show you how to use two features that Microsoft recently enabled support for Private Endpoint Static IP Configurations and support for customizing the name of…