Securing your secrets with Azure Key Vault part 9: Umbraco site

Securing your secrets with Azure Key Vault part 6: Azure Functions

Storm-2949 is stealing sensitive data from Microsoft 365 and Azure production environments by abusing legitimate administration features and social engineering privileged users. Microsoft says the group used compromised Entra ID accounts, Azure RBAC permissions, and cloud management tools to extract secrets, files, and credentials from victim organizations. #Storm-2949 #Microsoft365 #Azure #MicrosoftEntraID #MicrosoftGraphAPI #AzureKeyVault #MicrosoftDefender #ScreenConnect

A set of tools for governing and managing github repositories within an organization. - excellalabs/konmaripo

Not a Meetup member yet? Log in and find groups that host online or in person events and meet people in your local community who share your interests.

A secure, CI/CD-ready approach using Variable Library and Service Principals and UDFs

Architecture Overview The deployment includes: Managed HSM instance Key creation inside HSM User-assigned managed identity / service principal Role...

Shared Passwords Are a Ticking Time Bomb Let’s be blunt: if your Power Platform automation runs on a shared service account password that three people know,...

⚠️ NOTE Microsoft guidance is clear that Azure RBAC should be used for data plane authorization moving forward, instead of legacy access policies Azure …

Diffusion workloads are simple at prototype scale and unforgiving in production. A single demo can run on one GPU-backed VM, but a real platform has to...

As AI agents evolve from simple chatbots into workflow engines, decision-makers, and copilots, one challenge has remained stubbornly unsolved: How do we...

This post walks through a production‑proven pattern for running stateful services across Azure regions using Terraform. We’ll cover a primary–replica...

If you’ve ever been called into a Severity-1 issue because a certificate expired at midnight, you already understand why credential rotation matters. Keys,...

Introduction When your Logic App Standard is integrated with a Virtual Network (VNET), you can use these APIs to troubleshoot connectivity issues to...

A real design review: management groups, policies, break-glass accounts, and the five things I'd tweak before going to production. Here's what I see at most...

In Azure SQL Managed Instance, copy-only backups cannot be created for databases encrypted with service-managed Transparent Data Encryption (The default for...

Introduction When your Logic App Standard is integrated with a Virtual Network (VNET), you can use these APIs to troubleshoot connectivity issues to...

What is changing? In early 2024, Azure Key Vault introduced a modernized hardware security module (HSM) platform based on FIPS 140-2 Level 3 certified HSMs....