Every tenant I look at has the same problem. An app registration has a client secret. Someone created it two years ago. Nobody remembers where the value is stored. Then it expires on a Friday eveni...

Series table of contents: Part 1: Setup Once, Use Anywhere In this part I build my own image for DevOps work: PowerShell, Terraform, TFLint, Ansible, Azure CLI, kubectl, Helm and the GitHub C...

“It works on my machine.” Every team has heard that sentence. One colleague has Pester 4, the other has Pester 5. One formats with OTBS, the other with Allman. One has the Az module from last year....

Azure Update Manager is great in the portal. But I don’t want to click through the portal every time a group of servers needs patching. I want one HTTP call: “check updates for all servers with tag...

I wanted to try that approach of creating a file in a storage account and having it automatically processed into a database without any manual intervention for a long time. Now I came up with a fic...

Scenario I had the need to upload some service reports from a virtual machine (VM) to SharePoint. I wanted to do this securely, without embedding credentials in my code. Storing a client secret or ...

Multitenant SaaS and managed-service scenarios frequently need to read data from a customer’s Microsoft Entra ID tenant, without ever storing a client secret or certificate for that customer. This ...

Azure SQL Elastic Jobs let you run a T-SQL script across many Azure SQL databases on a schedule or on demand - think nightly maintenance, cross-database reporting, or rolling out a schema change to...

If you use GitHub Copilot Chat in VS Code and also the GitHub Copilot CLI, you’ve probably hit this problem: custom agents, instructions, and skills all live under %USERPROFILE%.copilot\, and they ...

Series Table of contents: Part 1: Infrastructure planning Part 2: Prepare GitHub Part 3: GitHub Workflows Part 4: Terraform Deployment Part 5: Nested Virtualization This is the sixth ...