As part of a recent project I have been writing a Terraform module to bring all of our tenant IAM settings into state. This includes amongst many other things Azure management groups. However, avoiding copying a separate resource block for each management group and instead using a for_each loop led me to an interesting dilemma, … Read more
As part of a recent project to upgrade some legacy infrastructure and split services across both Azure and AWS I found myself needing to migrate a UniFi instance. Previously hosted on a Windows 2019 Azure VM I was hoping to achieve a few things – I wont go into too much detail about the first … Read more
Following on from my last post discussing micro segmentation within an Azure secured hub, I will now cover deploying internet facing resources, including app gateways, into the same secured VWAN hub architecture. When deploying an application gateway into a secured hub connected spoke vnet, we are faced with a dilemma – the app gateway must … Read more
A very common Azure network topology found in larger enterprise environments is that of a hub and spoke using Azure virtual WAN and secure hubs along with an NVA or Azure firewall. Having recently deployed this exact hub and spoke scenario into two twinned regions with an Azure firewall in each a question arose around … Read more
Having recently been migrating a number of web apps from a legacy IaaS Windows server VM setup over to Azure App Services a question arose around high availability / resiliency and specifically in the case of Azure – region resiliency. Sometimes having a complete HA / DR into a secondary region can be too costly, … Read more