Terraform Azure Verified Modules: What, Why and How to Use Them

If you’ve spent any time building things on Azure with Terraform, you’ll know the pain of hunting down decent modules. Some are solid, some are a bit sketchy, and some… well, let’s just say I wouldn’t trust them with a dev environment, never mind production. Microsoft’s Azure Verified Modules (AVM) are here to bring a bit of order to the chaos. So, what’s the deal? Here’s what you actually need to know. Continue reading

New Rules for Azure DevOps Access: How to Set Up Conditional Access Properly

If you manage Azure DevOps in your organisation, there’s an important change coming. From 28 July 2025, Azure DevOps will stop relying on Azure Resource Manager (ARM) for sign-ins and token refresh. Any Conditional Access policies targeting ARM will no longer protect Azure DevOps. To maintain security, you must create new Conditional Access policies that specifically target Azure DevOps. Why Does This Matter? Conditional Access enforces multi-factor authentication, location restrictions, and device compliance for cloud services. Continue reading

Why Aren't You Tagging Azure Resources?

🏷️ The Case for Tagging How often has your organisation struggled to articulate cost, manage governance, or group resources in Azure? For some organisations, tagging is the norm, with every resource tagged to provide additional information about what the resource is, who it’s for, and why it’s needed. For others, they’ve not even started, relying on documentation and in-team knowledge to identify services and manually group things like costs together. Continue reading

The Issue with Azure Bastion in Virtual WAN

Intro Most people have used Azure Bastion before. The uptake of the ease-of-use product has been great, and for years it’s been simple and effective. However, as more and more people move to Virtual WAN (vWAN), the experience hasn’t been so great. For those that haven’t used it before, Azure Bastion is a resource that allows users to initiate an RDP-like connection over HTTPS to servers within Azure without the need to open ports, add public IP addresses, or compromise security. Continue reading

The Importance of Using Web Application Firewalls in Azure

As businesses continue to shift their operations to the cloud, it’s important to ensure that their applications and data are protected from threats such as cyber attacks and data breaches. One way to do this is by implementing a web application firewall (WAF) on an application gateway in Azure. A WAF is a security solution that sits between a website or web application and the internet, and is designed to protect against common web-based attacks such as SQL injection, cross-site scripting (XSS), and parameter tampering. Continue reading