Flexing your Security Governance with Azure Policy as Code
I recently had the pleasure of presenting a livestream session via Microsoft Reactor Sydney on a subject close to my heart.
Posts by Tag
- azure policy 9
- policy as code 8
- terraform 7
- azure 5
- azure governance 5
- powershell 4
- json 3
- ansible 3
- molecule azure driver 3
- ansible on azure 3
- bicep 3
- az400 2
- 2020 2
- github pages 2
- jekyll 2
- open source blogging 2
- oss blogging 2
- vscode 2
- markdown 2
- iac 2
- terraform azurerm policy 2
- molecule 2
- deployifnotexists 2
- adfs 1
- saml 1
- claims 1
- bitlocker 1
- automation 1
- windows security 1
- ppg 1
- proximity placement group 1
- accelerated networking 1
- azcli 1
- backup explorer 1
- backup governance 1
- openhack 1
- team challenge 1
- k8s 1
- aks 1
- containers 1
- infrastructure as code 1
- azure building blocks 1
- azbb 1
- arm templates 1
- policy audit vs deny effects 1
- custom policies 1
- policy extension vscode 1
- policy alias 1
- azure rbac 1
- rbac unknown identities 1
- azure tags 1
- migrating tags 1
- key value pairs 1
- update aztag 1
- terraform cloud 1
- github actions 1
- iac workflow 1
- yaml 1
- microsoft teams automation 1
- teams client desktop settings 1
- working from home 1
- retrospective 1
- covid19 1
- azure text analytics 1
- just enough study 1
- keyword hunting 1
- exam tips and tricks 1
- azure spring clean 1
- monitoring governance 1
- dine 1
- global azure 1
- hashitalks 1
- iac pattern 1
- csvs foreach 1
- troubleshooting 1
- non-compliance 1
- existenceCondition 1
- aks diagnostic settings 1
- devops 1
- ctrlaltazure podcast 1
- security governance 1
- microsoft reactor sydney 1
azure policy
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
How to Win vs Azure Policy Non-Compliance
Fixing a design flaw with the existenceCondition for builtin policies
Global Azure: Policy as Code with Bicep for Enterprise Scale
Recently I’ve been diving into Microsoft’s new DSL Bicep and as I’m passionate about Azure Policy I thought why not combine both aspects into a session?
Azure Spring Clean: DINE to Automate your Monitoring Governance with Azure Monitor Metric Alerts
Discover patterns for leveraging DeployIfNotExists (DINE) policies to automate your Azure Monitoring Governance with Azure Monitor Metric Alerts
Azure Policy as Code with Terraform Part 2
Look under the hood of an example repository I created to deploy a set of custom Azure policies, initiatives, and assignments
Azure Policy as Code with Terraform Part 1
Discover patterns for usage of Azure Policy as Code with Terraform and examine deployment methodologies, module structures, Azure policy best-practices, and ...
Cloud Governance with Azure Policy Part 2
Intro to the Azure Policy extension for VSCode and authoring custom policy definitions by finding property aliases
Cloud Governance with Azure Policy Part 1
Introduction to the audit vs deny debate, native tooling, and governance at scale
policy as code
Flexing your Security Governance with Azure Policy as Code
I recently had the pleasure of presenting a livestream session via Microsoft Reactor Sydney on a subject close to my heart.
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
Global Azure: Policy as Code with Bicep for Enterprise Scale
Recently I’ve been diving into Microsoft’s new DSL Bicep and as I’m passionate about Azure Policy I thought why not combine both aspects into a session?
Azure Spring Clean: DINE to Automate your Monitoring Governance with Azure Monitor Metric Alerts
Discover patterns for leveraging DeployIfNotExists (DINE) policies to automate your Azure Monitoring Governance with Azure Monitor Metric Alerts
Azure Policy as Code with Terraform Part 2
Look under the hood of an example repository I created to deploy a set of custom Azure policies, initiatives, and assignments
Azure Policy as Code with Terraform Part 1
Discover patterns for usage of Azure Policy as Code with Terraform and examine deployment methodologies, module structures, Azure policy best-practices, and ...
Cloud Governance with Azure Policy Part 2
Intro to the Azure Policy extension for VSCode and authoring custom policy definitions by finding property aliases
Cloud Governance with Azure Policy Part 1
Introduction to the audit vs deny debate, native tooling, and governance at scale
terraform
HashiTalks ANZ: DRY Coding with Terraform, CSVs, ForEach
How combining Terraform with CSVs and ForEach we can deploy at scale from large datasets
Ansible on Azure Part 3
Discover Ansible role development patterns on Azure using the Molecule-Azure driver
Ansible on Azure Part 2
Discover how Terraform IaC can automate your Ansible control host deployment into Azure
Ansible on Azure Part 1
Discover the Ansible on Azure development ecosystem, key advantages/disadvantages, and how to get started
Using GitHub Actions and Terraform for IaC Automation
Combine GitHub Actions and Terraform to achieve an automated Infrastructure as Code workflow
Azure Policy as Code with Terraform Part 2
Look under the hood of an example repository I created to deploy a set of custom Azure policies, initiatives, and assignments
Azure Policy as Code with Terraform Part 1
Discover patterns for usage of Azure Policy as Code with Terraform and examine deployment methodologies, module structures, Azure policy best-practices, and ...
azure
Ansible on Azure Part 3
Discover Ansible role development patterns on Azure using the Molecule-Azure driver
Ansible on Azure Part 2
Discover how Terraform IaC can automate your Ansible control host deployment into Azure
Ansible on Azure Part 1
Discover the Ansible on Azure development ecosystem, key advantages/disadvantages, and how to get started
Quick Intro to Azure Backup Explorer
All you need to know about Azure Backup Explorer released in preview Feb 2020
0.09ms using Azure Proximity Placement Groups
Intro to Proximity Placement Groups demonstrating how to deploy a test environment
azure governance
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
Azure Policy as Code with Terraform Part 2
Look under the hood of an example repository I created to deploy a set of custom Azure policies, initiatives, and assignments
Azure Policy as Code with Terraform Part 1
Discover patterns for usage of Azure Policy as Code with Terraform and examine deployment methodologies, module structures, Azure policy best-practices, and ...
Cloud Governance with Azure Policy Part 2
Intro to the Azure Policy extension for VSCode and authoring custom policy definitions by finding property aliases
Cloud Governance with Azure Policy Part 1
Introduction to the audit vs deny debate, native tooling, and governance at scale
powershell
Automate Microsoft Teams desktop settings with PowerShell
How to manage Teams desktop client settings automatically with PowerShell
Migrating your Azure Tags with PowerShell
How to migrate existing Azure tag values to new tag key/value pairs programmatically using PowerShell
Removing Unknown Azure RBAC Role Assignments with PowerShell
How to programmatically find and remove ‘Unknown’ type Azure RBAC role assignments with PowerShell
Zero-Touch BitLocker with PowerShell
The heart and soul of all this is a single PowerShell script
json
Automate Microsoft Teams desktop settings with PowerShell
How to manage Teams desktop client settings automatically with PowerShell
Azure Policy as Code with Terraform Part 2
Look under the hood of an example repository I created to deploy a set of custom Azure policies, initiatives, and assignments
Azure Policy as Code with Terraform Part 1
Discover patterns for usage of Azure Policy as Code with Terraform and examine deployment methodologies, module structures, Azure policy best-practices, and ...
ansible
Ansible on Azure Part 3
Discover Ansible role development patterns on Azure using the Molecule-Azure driver
Ansible on Azure Part 2
Discover how Terraform IaC can automate your Ansible control host deployment into Azure
Ansible on Azure Part 1
Discover the Ansible on Azure development ecosystem, key advantages/disadvantages, and how to get started
molecule azure driver
Ansible on Azure Part 3
Discover Ansible role development patterns on Azure using the Molecule-Azure driver
Ansible on Azure Part 2
Discover how Terraform IaC can automate your Ansible control host deployment into Azure
Ansible on Azure Part 1
Discover the Ansible on Azure development ecosystem, key advantages/disadvantages, and how to get started
ansible on azure
Ansible on Azure Part 3
Discover Ansible role development patterns on Azure using the Molecule-Azure driver
Ansible on Azure Part 2
Discover how Terraform IaC can automate your Ansible control host deployment into Azure
Ansible on Azure Part 1
Discover the Ansible on Azure development ecosystem, key advantages/disadvantages, and how to get started
bicep
Flexing your Security Governance with Azure Policy as Code
I recently had the pleasure of presenting a livestream session via Microsoft Reactor Sydney on a subject close to my heart.
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
Global Azure: Policy as Code with Bicep for Enterprise Scale
Recently I’ve been diving into Microsoft’s new DSL Bicep and as I’m passionate about Azure Policy I thought why not combine both aspects into a session?
az400
Passed AZ-400 Designing and Implementing Microsoft DevOps Solutions
Discover the ‘Just Enough Study’ concept and learn how to hunt key phrases using Azure Text Analytics
Your 2020 Study Guide to Azure DevOps Solutions (AZ-400)
With Microsoft announcing sweeping changes to a few Azure exams later in March 2020 the time is ripe to blog about an exam I’ve had my eye on for a while: Az...
2020
What The Heck Happened In 2020
After such a 2020 memorable year (for both good & bad reasons) I’ve been itching to publish my retrospective
Your 2020 Study Guide to Azure DevOps Solutions (AZ-400)
With Microsoft announcing sweeping changes to a few Azure exams later in March 2020 the time is ripe to blog about an exam I’ve had my eye on for a while: Az...
github pages
OpenSource Blogging with Jekyll GitHub VSCode Part2
Detailed walkthrough of everything you need to get started with your own blog site using Jekyll GitHub VSCode
OpenSource Blogging with Jekyll GitHub VSCode Part1
Introduction to getting setup with your own blog site using Jekyll GitHub VSCode
jekyll
OpenSource Blogging with Jekyll GitHub VSCode Part2
Detailed walkthrough of everything you need to get started with your own blog site using Jekyll GitHub VSCode
OpenSource Blogging with Jekyll GitHub VSCode Part1
Introduction to getting setup with your own blog site using Jekyll GitHub VSCode
open source blogging
OpenSource Blogging with Jekyll GitHub VSCode Part2
Detailed walkthrough of everything you need to get started with your own blog site using Jekyll GitHub VSCode
OpenSource Blogging with Jekyll GitHub VSCode Part1
Introduction to getting setup with your own blog site using Jekyll GitHub VSCode
oss blogging
OpenSource Blogging with Jekyll GitHub VSCode Part2
Detailed walkthrough of everything you need to get started with your own blog site using Jekyll GitHub VSCode
OpenSource Blogging with Jekyll GitHub VSCode Part1
Introduction to getting setup with your own blog site using Jekyll GitHub VSCode
vscode
OpenSource Blogging with Jekyll GitHub VSCode Part2
Detailed walkthrough of everything you need to get started with your own blog site using Jekyll GitHub VSCode
OpenSource Blogging with Jekyll GitHub VSCode Part1
Introduction to getting setup with your own blog site using Jekyll GitHub VSCode
markdown
OpenSource Blogging with Jekyll GitHub VSCode Part2
Detailed walkthrough of everything you need to get started with your own blog site using Jekyll GitHub VSCode
OpenSource Blogging with Jekyll GitHub VSCode Part1
Introduction to getting setup with your own blog site using Jekyll GitHub VSCode
iac
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
Azure Building Blocks - The Forgotten IaC Tool
Putting Azure Building Blocks to the test with a simple Hub & Spoke VNET deployment
terraform azurerm policy
Azure Policy as Code with Terraform Part 2
Look under the hood of an example repository I created to deploy a set of custom Azure policies, initiatives, and assignments
Azure Policy as Code with Terraform Part 1
Discover patterns for usage of Azure Policy as Code with Terraform and examine deployment methodologies, module structures, Azure policy best-practices, and ...
molecule
Ansible on Azure Part 3
Discover Ansible role development patterns on Azure using the Molecule-Azure driver
Ansible on Azure Part 2
Discover how Terraform IaC can automate your Ansible control host deployment into Azure
deployifnotexists
How to Win vs Azure Policy Non-Compliance
Fixing a design flaw with the existenceCondition for builtin policies
Azure Spring Clean: DINE to Automate your Monitoring Governance with Azure Monitor Metric Alerts
Discover patterns for leveraging DeployIfNotExists (DINE) policies to automate your Azure Monitoring Governance with Azure Monitor Metric Alerts
adfs
AD FS 2016 and InvalidNameIDPolicy using SAML Authentication to SailPoint IdentityNow
The resolution to this problem for me was to ensure that an SPNameQualifier value was sent as a claim property from AD FS to IdentityNow
saml
AD FS 2016 and InvalidNameIDPolicy using SAML Authentication to SailPoint IdentityNow
The resolution to this problem for me was to ensure that an SPNameQualifier value was sent as a claim property from AD FS to IdentityNow
claims
AD FS 2016 and InvalidNameIDPolicy using SAML Authentication to SailPoint IdentityNow
The resolution to this problem for me was to ensure that an SPNameQualifier value was sent as a claim property from AD FS to IdentityNow
bitlocker
Zero-Touch BitLocker with PowerShell
The heart and soul of all this is a single PowerShell script
automation
Zero-Touch BitLocker with PowerShell
The heart and soul of all this is a single PowerShell script
windows security
Zero-Touch BitLocker with PowerShell
The heart and soul of all this is a single PowerShell script
ppg
0.09ms using Azure Proximity Placement Groups
Intro to Proximity Placement Groups demonstrating how to deploy a test environment
proximity placement group
0.09ms using Azure Proximity Placement Groups
Intro to Proximity Placement Groups demonstrating how to deploy a test environment
accelerated networking
0.09ms using Azure Proximity Placement Groups
Intro to Proximity Placement Groups demonstrating how to deploy a test environment
azcli
0.09ms using Azure Proximity Placement Groups
Intro to Proximity Placement Groups demonstrating how to deploy a test environment
backup explorer
Quick Intro to Azure Backup Explorer
All you need to know about Azure Backup Explorer released in preview Feb 2020
backup governance
Quick Intro to Azure Backup Explorer
All you need to know about Azure Backup Explorer released in preview Feb 2020
openhack
My experience at Microsoft Containers OpenHack featuring Kubernetes challenges
The underlying theme of OpenHack is that there’s no clear path forward through the challenges and the ‘unknown’ factor is ever present
team challenge
My experience at Microsoft Containers OpenHack featuring Kubernetes challenges
The underlying theme of OpenHack is that there’s no clear path forward through the challenges and the ‘unknown’ factor is ever present
k8s
My experience at Microsoft Containers OpenHack featuring Kubernetes challenges
The underlying theme of OpenHack is that there’s no clear path forward through the challenges and the ‘unknown’ factor is ever present
aks
My experience at Microsoft Containers OpenHack featuring Kubernetes challenges
The underlying theme of OpenHack is that there’s no clear path forward through the challenges and the ‘unknown’ factor is ever present
containers
My experience at Microsoft Containers OpenHack featuring Kubernetes challenges
The underlying theme of OpenHack is that there’s no clear path forward through the challenges and the ‘unknown’ factor is ever present
infrastructure as code
Azure Building Blocks - The Forgotten IaC Tool
Putting Azure Building Blocks to the test with a simple Hub & Spoke VNET deployment
azure building blocks
Azure Building Blocks - The Forgotten IaC Tool
Putting Azure Building Blocks to the test with a simple Hub & Spoke VNET deployment
azbb
Azure Building Blocks - The Forgotten IaC Tool
Putting Azure Building Blocks to the test with a simple Hub & Spoke VNET deployment
arm templates
Azure Building Blocks - The Forgotten IaC Tool
Putting Azure Building Blocks to the test with a simple Hub & Spoke VNET deployment
policy audit vs deny effects
Cloud Governance with Azure Policy Part 1
Introduction to the audit vs deny debate, native tooling, and governance at scale
custom policies
Cloud Governance with Azure Policy Part 2
Intro to the Azure Policy extension for VSCode and authoring custom policy definitions by finding property aliases
policy extension vscode
Cloud Governance with Azure Policy Part 2
Intro to the Azure Policy extension for VSCode and authoring custom policy definitions by finding property aliases
policy alias
Cloud Governance with Azure Policy Part 2
Intro to the Azure Policy extension for VSCode and authoring custom policy definitions by finding property aliases
azure rbac
Removing Unknown Azure RBAC Role Assignments with PowerShell
How to programmatically find and remove ‘Unknown’ type Azure RBAC role assignments with PowerShell
rbac unknown identities
Removing Unknown Azure RBAC Role Assignments with PowerShell
How to programmatically find and remove ‘Unknown’ type Azure RBAC role assignments with PowerShell
key value pairs
Migrating your Azure Tags with PowerShell
How to migrate existing Azure tag values to new tag key/value pairs programmatically using PowerShell
update aztag
Migrating your Azure Tags with PowerShell
How to migrate existing Azure tag values to new tag key/value pairs programmatically using PowerShell
terraform cloud
Using GitHub Actions and Terraform for IaC Automation
Combine GitHub Actions and Terraform to achieve an automated Infrastructure as Code workflow
github actions
Using GitHub Actions and Terraform for IaC Automation
Combine GitHub Actions and Terraform to achieve an automated Infrastructure as Code workflow
iac workflow
Using GitHub Actions and Terraform for IaC Automation
Combine GitHub Actions and Terraform to achieve an automated Infrastructure as Code workflow
yaml
Using GitHub Actions and Terraform for IaC Automation
Combine GitHub Actions and Terraform to achieve an automated Infrastructure as Code workflow
microsoft teams automation
Automate Microsoft Teams desktop settings with PowerShell
How to manage Teams desktop client settings automatically with PowerShell
teams client desktop settings
Automate Microsoft Teams desktop settings with PowerShell
How to manage Teams desktop client settings automatically with PowerShell
working from home
What The Heck Happened In 2020
After such a 2020 memorable year (for both good & bad reasons) I’ve been itching to publish my retrospective
retrospective
What The Heck Happened In 2020
After such a 2020 memorable year (for both good & bad reasons) I’ve been itching to publish my retrospective
covid19
What The Heck Happened In 2020
After such a 2020 memorable year (for both good & bad reasons) I’ve been itching to publish my retrospective
azure text analytics
Passed AZ-400 Designing and Implementing Microsoft DevOps Solutions
Discover the ‘Just Enough Study’ concept and learn how to hunt key phrases using Azure Text Analytics
just enough study
Passed AZ-400 Designing and Implementing Microsoft DevOps Solutions
Discover the ‘Just Enough Study’ concept and learn how to hunt key phrases using Azure Text Analytics
keyword hunting
Passed AZ-400 Designing and Implementing Microsoft DevOps Solutions
Discover the ‘Just Enough Study’ concept and learn how to hunt key phrases using Azure Text Analytics
exam tips and tricks
Passed AZ-400 Designing and Implementing Microsoft DevOps Solutions
Discover the ‘Just Enough Study’ concept and learn how to hunt key phrases using Azure Text Analytics
azure spring clean
Azure Spring Clean: DINE to Automate your Monitoring Governance with Azure Monitor Metric Alerts
Discover patterns for leveraging DeployIfNotExists (DINE) policies to automate your Azure Monitoring Governance with Azure Monitor Metric Alerts
monitoring governance
Azure Spring Clean: DINE to Automate your Monitoring Governance with Azure Monitor Metric Alerts
Discover patterns for leveraging DeployIfNotExists (DINE) policies to automate your Azure Monitoring Governance with Azure Monitor Metric Alerts
dine
Azure Spring Clean: DINE to Automate your Monitoring Governance with Azure Monitor Metric Alerts
Discover patterns for leveraging DeployIfNotExists (DINE) policies to automate your Azure Monitoring Governance with Azure Monitor Metric Alerts
global azure
Global Azure: Policy as Code with Bicep for Enterprise Scale
Recently I’ve been diving into Microsoft’s new DSL Bicep and as I’m passionate about Azure Policy I thought why not combine both aspects into a session?
hashitalks
HashiTalks ANZ: DRY Coding with Terraform, CSVs, ForEach
How combining Terraform with CSVs and ForEach we can deploy at scale from large datasets
iac pattern
HashiTalks ANZ: DRY Coding with Terraform, CSVs, ForEach
How combining Terraform with CSVs and ForEach we can deploy at scale from large datasets
csvs foreach
HashiTalks ANZ: DRY Coding with Terraform, CSVs, ForEach
How combining Terraform with CSVs and ForEach we can deploy at scale from large datasets
troubleshooting
How to Win vs Azure Policy Non-Compliance
Fixing a design flaw with the existenceCondition for builtin policies
non-compliance
How to Win vs Azure Policy Non-Compliance
Fixing a design flaw with the existenceCondition for builtin policies
existenceCondition
How to Win vs Azure Policy Non-Compliance
Fixing a design flaw with the existenceCondition for builtin policies
aks diagnostic settings
How to Win vs Azure Policy Non-Compliance
Fixing a design flaw with the existenceCondition for builtin policies
devops
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
ctrlaltazure podcast
Talking Azure Policy as Code on CtrlAltAzure podcast
Appearing as a guest on the Ctrl+Alt+Azure podcast to talk Azure Policy as Code with hosts Tobias Zimmergren and Jussi Roine
security governance
Flexing your Security Governance with Azure Policy as Code
I recently had the pleasure of presenting a livestream session via Microsoft Reactor Sydney on a subject close to my heart.
microsoft reactor sydney
Flexing your Security Governance with Azure Policy as Code
I recently had the pleasure of presenting a livestream session via Microsoft Reactor Sydney on a subject close to my heart.