Just another techie writing about stuff…
In this design diagram I explain a hybrid DNS architecture on Azure. This diagram covers two scenarios: Scenario 1 with User1 (blue lines): User1’s computer is in Project1 vnet. User1 is trying to reach the file share in a different vnet (possibly in a separate subscription). User1 must rely on the DNS server in his/her…
Users are looking for ways to optimize their compute cost on Azure. When we talk about compute costs, we are mostly referring to virtual machines. Here are 5 questions you should ask yourself before spinning up new virtual machines in your environment and steps to take to help you reduce your VM cost: Q1 –…
Service Principals (SP) on Azure used to be one of the most common ways to authenticate your code/app to Azure. The problem with SPs was that you need to use a client ID and secret to get authenticated. That was problematic because you would potentially expose your credentials in your code which is a security…
Microsoft has very good documentation for ADLS Gen2 access controls here. However there is still sometimes confusion around the different layers of permissions and how they work in combination, and this article is an attempt to simplify that. In general there are three different kinds of permissions for your data inside an ADLS Gen2 Storage…
Microsoft introduced experimental languages on Azure Function App with runtime 1.x and that meant support for Python, TypeScript, PHP, Batch, Bash, and PowerShell. However, support for PHP, Batch, Bash, and Powershell was dropped with the release of runtime version 2.x. Of course this is the status as of today and I cannot guarantee if it…
Here is what I will cover today: Create an Ubuntu Linux VM with managed disk Generalize the VM and make it ready for image capture Capture the VM image Remove the VM Create a Virtual Machine Scale Set (VMSS) with OS managed disk from the captured image Let’s get things started: Create a VM with…
There are many ways to protect your EC2 Instances from being exposed to the Internet. One way is to give them private IP addresses and put them behind a public-facing Elastic Loadbalancer. This way your ELB spreads the incoming traffic across your Instances and your EC2 Instances do not have to directly be connected to…
If you have not yet seen the previous blog posts in this series, please read them here: Essential Guide to AWS Governance – Part 1: Accounts Structure Essential Guide to AWS Governance – Part 2: Enable Single Sign-On for AWS us Essential Guide to AWS Governance – Part 3: Enable CloudTrail on your AWS Accounts…
In the previous blog post I showed you how to enable CloudTrail on Project1 AWS Account (Account ID: 222222222222) and send it to a central S3 Bucket in another AWS Account (Account ID: 111111111111). Like always I definitely recommend you read the previous blog posts in the same series: Essential Guide to AWS Governance –…
This is a part of my AWS Governance series blog posts: Essential Guide to AWS Governance – Part 1: Accounts Structure Essential Guide to AWS Governance – Part 2: Enable Single Sign-On for AWS using ADFS 3.0 and configure Cross Account Access Essential Guide to AWS Governance – Part 4: Send CloudTrail logs from AWS…