Posts
Continuous Compliance: Using AI to Generate and Audit Azure Policy
You need to write a custom Azure Policy that denies any Azure OpenAI resource without a private endpoint. Simple enough requirement. An hour later, you’re still hunting for the right resource provider alias, your JSON nesting is wrong, and the policy ARM rejects on every test run. Azure Policy …
Cost Governance in the Landing Zone: Tagging Enforcement, Budgets, and FinOps Automation
The Azure invoice arrives on a Friday. $12,000 over budget. You spend the weekend clicking through the Cost Management portal, filter by resource group, filter by service, filter by tag — except half the resources have no tags at all. By Monday you have a spreadsheet, a list of suspects, and a …
Day-2 Operations: Maintaining and Evolving Your Azure Landing Zone
Deploying your landing zone was the easy part. Now you have to live with it.
The most common failure mode in platform engineering is not a bad initial deployment — it is treating the landing zone as a finished project rather than an ongoing product. Azure releases new services and deprecates old …