Azure Infrastructure Blog

Using Azure as a cloud, not as a region As Mark Russinovich stated in his blog post we want to empower customers and partners to build and run applications and data…

Architecture at a glance Diagram: “AGC with AKS Networking Models (Overlay & Flat)” – attached below. Left: internet ↦ AGC Frontend (Public/Private) Middle: AGC (Gateway) ↦ AGC Subnet (/24) ↦ AKS…

Multi‑agent systems turn complex, cross‑department processes into reliable, scalable AI workflows. Here’s a practical guide to designing, wiring, and shipping them with Azure AI Foundry—plus three real‑world scenarios you can…

🔄 Pipeline Overview       The Pipeline consists of the following key stages:                                 Install…

In our journey building and operating Azure PaaS solutions under real-world pressure, we’ve encountered concurrency bugs, messaging quirks, and performance bottlenecks that only show up at scale. When cloud applications…

This guide provides instructions for creating a sample Standard logic app workflow locally using Visual Studio Code and the Azure Logic Apps (Standard) extension, intended for use with single-tenant Azure…

  Azure Firewall Premium has included protections against Lumma Stealer since 2022, with over 2,700 intrusion detection and prevention (IDPS) signatures specifically designed to identify and block Lumma-related activity. Backed…

Azure Boost: leading cloud performance innovation Azure’s proprietary system Azure Boost announced has driven new industry records in storage performance in 2025.  This system enables effective and efficient offloading of…

Azure Migrate now supports the migration of both Generation 1 and Generation 2 virtual machines (VMs) from on-premises or other cloud platforms to Azure Confidential Virtual machine (CVM) in Private…

🚀 Why Autoscaling Matters Autoscaling ensures that your application can handle varying levels of traffic without manual intervention. It helps with: Cost Optimization: Scale down during periods of low demand…

Overview: This blog demonstrates how to: Deploy an Azure Storage Account and Blob containers using Bicep Create a folder-like structure inside those containers using PowerShell This approach is ideal for…

In this blog, I’ll walk ythrough how to design a reusable Bicep module for deploying Azure Databricks, a popular analytics and machine learning platform. We'll focus on creating a parameterized…

🔐Azure API Management (APIM): The Gateway to Modern APIs Azure API Management provides a robust platform to expose, manage, and secure APIs. It acts as a facade between your backend…

GitHub Actions is a widely used platform that helps developers automate software workflows, including CI/CD pipelines and testing processes. However, testing and refining these workflows directly on GitHub can be…

Azure NetApp Files, a fully managed file storage service built for high-throughput and low-latency applications, integrates seamlessly with Azure Kubernetes Service (AKS) using Astra Trident—an open-source dynamic storage orchestrator. This…

Understanding Azure Private Link: Secure Connectivity for Your Azure Resources Azure Private Link is a powerful service that enables secure and private connectivity between Azure resources and services, eliminating exposure…

As cyber threats become increasingly sophisticated, security teams must adopt scalable and repeatable practices to maintain a robust defense posture. Azure Sentinel, Microsoft’s cloud-native Security Information and Event Management (SIEM)…

Overview The codebase is organized to support the following processes: Databricks Infrastructure Provisioning Instance pools Shared clusters Secret scopes (integrated with Azure Key Vault) Unity Catalog Data Assets Deployment Catalogs,…

In this guide, we’ll walk through deploying a GitHub Actions self-hosted runner on an Azure VM, step by step. Pre-requisites Before you begin, ensure you have: A GitHub repository or…

This guide walks you through the entire process — from VM setup to running your first successful job. Step 1: Create an Azure VM Log in to the Azure Portal. Create a new…

When the Gaps Start Showing A few months ago, we walked into a high-priority Azure environment review for a customer dealing with inconsistent deployments and rising costs. After a few…

How Microsoft Entra ID works in Azure Database for PostgreSQL flexible server The following high-level diagram summarizes how authentication works when you use Microsoft Entra authentication with Azure Database for…

In the context of Azure Kubernetes Service (AKS), high availability (HA) is critical to ensure your application remains resilient and operational during infrastructure failures. A key strategy for achieving HA…

Azure AI Foundry offers a unified platform that streamlines enterprise AI operations, model development, and application deployment. It brings together robust infrastructure and intuitive tools, empowering organizations to confidently build…

What is a FinOps-Ready Landing Zone? A FinOps-ready Azure Landing Zone is a structured environment that: Implements cost visibility and tracking. Establishes budgets and alerts for proactive control. Enforces resource…

Introduction Kubernetes has become the cornerstone of cloud-native infrastructure. While its orchestration capabilities are widely recognized, Kubernetes networking remains one of its most complex yet crucial pillars — especially in…

🎯Conceptual Overview: DNS Resolution via Private DNS Zones Azure Private DNS Zones provide a reliable and secure DNS service to manage and resolve domain names within your virtual network without…

Azure NetApp Files (ANF) is a powerful, fully managed file storage solution that offers high performance and scalability. It delivers enterprise-grade performance and reliability, but like any powerful tool, it’s…

In the era of big data, managing storage efficiently is vital for maintaining the performance, security, and cost-effectiveness of cloud resources. Azure Storage Insights offers a robust solution for monitoring…

🧩 What Is an Application Landing Zone? An Application Landing Zone is a pre-configured Azure environment designed to host applications in a secure, scalable, and governed manner. It is a…

Azure Monitor's managed service for Prometheus and Container Insights provide comprehensive monitoring for your Kubernetes environment. This blog explains about container insights features in detail.  When managing modern containerized workloads…

Harnessing the power of Azure’s cutting-edge AI and cloud services has revolutionized the way businesses approach customer support. In this blog, we explore how you can implement a scalable and…

In the face of AI-driven digital growth and a threat landscape that never sleeps, Azure continues to raise the bar on Zero Trust-ready, “secure-by-default” networking. Today we’re excited to announce…

Microsoft Fabric is rapidly evolving as the unified data platform of choice for analytics, engineering, and reporting. But provisioning Fabric infrastructure—workspaces, capacities, lakehouses, and access controls—can become complex and error-prone…

Problem Statement Think of a scenario where you have one AKS cluster which is going to host ArgoCD itself and few other private AKS clusters where you are going to…

Microsoft Fabric is rapidly becoming the go-to platform for enterprise-grade analytics and reporting. However, deploying artifacts like dataflows, datasets, and reports across environments (Dev → Test → Prod) can be…

🧭 Introduction In Kubernetes environments, it’s standard practice for CI/CD pipelines to build and deploy container images. However, what’s often overlooked is the cleanup of these images once they’re no…

What is Azure AI Foundry? Azure AI Studio is now renamed to Azure AI Foundry. Azure AI Foundry is a unified AI development platform where teams can efficiently manage AI…

Azure Synapse Analytics is designed for modern data analytics — and when it comes to secure networking, Managed Private Endpoints (MPEs) are key. They ensure your Synapse workspace communicates with…

Azure Dev Box is a managed service from Microsoft Azure that provides cloud-hosted, developer-ready workstations (virtual machines) designed specifically for software development. It allows developers to quickly spin up secure,…

In the face of AI-driven digital growth and a threat landscape that never sleeps, Azure continues to raise the bar on Zero Trust-ready, “secure-by-default” networking. Today we’re excited to announce…

By using Logic Apps in Azure, we can automate and orchestrate workflows and integrations with many systems using low-code/no-code. These can be deployed in consumption (server-less) or standard mode. The standard…

Introduction While Microsoft's documentation provides information on the OpenAI models available in Azure, it can be challenging to determine which features are included in which model versions and in which…

In today's cloud-native world, managing secrets securely across different platforms is crucial. HashiCorp Vault and Azure Key Vault are two popular tools for secret management. In this blog post, we'll…

Deploying multiple Azure resources manually can be a time-consuming and error-prone process. As organizations scale their cloud infrastructure, the need for efficient and automated deployment methods becomes crucial. Traditional ARM…

In this blog post, I will share how customers can monitor their Azure Kubernetes Service (AKS) clusters for time drifts using a custom container image, Azure managed Prometheus and Grafana.…

The X-Forwarded-For (XFF) HTTP header provides crucial insight into the origin of web requests. The header works as a mechanism for conveying the original source IP addresses of clients, and not…

Configuring Git Before using Git, you need to configure your user information, such as your name and email address. This information will be associated with your commits. git config --global…

On April 22nd join Azure security and AI experts at the “Azure security and AI Adoption” Tech Accelerator event hosted on Tech Community. 7 total sessions will be hosted, including…

Today, we are excited to announce General Availability (GA) of Copilot in Azure. We are also thrilled to share that the current capabilities of Copilot in Azure at GA will…