Skip to content
  • Home
  • About Me
deniscooper.co.uk

deniscooper@me.com

Platform Operating Model: Defining Who Owns What in Azure

July 28, 2026 by deniscooper@me.com
Azure Platform Operating Model

Ownership and access aren’t the same thing. Part 2 of the Azure Platform Operations series: a practical model for who owns what, and why it breaks.

Categories AZURE, ENTRA, GOVERNANCE, GUIDE, Landing Zone, RBAC, SECURITY Tags AZURE, GOVERNANCE, SECURITY Leave a comment

Azure Platform Operations: Why Platforms Drifts After Go-Live

July 21, 2026 by deniscooper@me.com
azure platform operations

anding zones fail quietly after go-live when nobody owns day 1. Part 1 of the Azure Platform Operations series: service tiers that stop the drift.

Categories AZURE, CAF, Landing Zone, Operations, WAF Tags AZURE, CAF, Landing Zone, Operations, WAF Leave a comment

Tenant-Wide Consent: What You’re Really Approving

July 14, 2026 by deniscooper@me.com
The risks of Tenant Wide Consent

Approving an AI connector for Microsoft 365 doesn’t scope tenant-wide consent to your enterprise plan. Here’s the OAuth gap that lets personal accounts through.

Categories ENTRA, AI, APP Registration, M365 Tags AI, App Registration, Consent, Enta, M365 Leave a comment

Shadow AI: How to Spot AI Code in Your Estate

July 7, 2026 by deniscooper@me.com
How to detect Shadow AI

Shadow AI means Claude Code, Lovable and unsanctioned tools entering your estate unseen. Here’s what platform teams can actually detect.

Categories AZURE DEVOPS, AI, GitHub, GUIDE Tags AI, AZURE DEVOPS, GitHub, GitHub Workflows, GOVERNANCE Leave a comment

Platform Design for AI Generated Code: A Governance Guide

June 30, 2026 by deniscooper@me.com
Platform Design for AI Generated Code: A Governance Guide

Scanning catches what’s broken. Platform design decides what’s possible. A practical guide to guardrails, golden paths, and AI tooling.

Categories AZURE, AI, AI AGENTS, Development, pipelines Tags AI, AZURE, GOVERNANCE, platform design, platform engineering, SECURITY Leave a comment

What Your Pipeline Can Actually Catch: Building the AI Code Scanning Layer

June 23, 2026 by deniscooper@me.com
AI generated code pipeline scanning

AI tools generate code fast. Your pipeline needs to catch what they get wrong. Here’s how to build a scanning layer across IaC, containers, and application code.

Categories TERRAFORM, AZURE DEVOPS, GitHub, IaC, pipelines, SECURITY Tags aure devops, GitHub, IaC, PIPELINES, SECURITY, TERRAFORM Leave a comment

AI Built It. Nobody Reviewed It. Here’s What We Found.

June 16, 2026 by deniscooper@me.com
AI Generated Code Security: A Platform Team's Wake-Up Call

AI tools let anyone build production apps. Here’s what the platform team found when nobody reviewed the code — and what you need to do about it

Categories SECURITY, AI, Development Tags AI, DevOps, SECURITY Leave a comment

Azure DevOps vs GitHub Actions: A Practitioner’s Guide

June 10, 2026 by deniscooper@me.com

Azure DevOps vs GitHub Actions: a practitioner comparison covering pipelines, templates, federated identity, GitHub Copilot, and when a hybrid approach makes sense

Categories AZURE, AZURE DEVOPS, GitHub Tags AZURE, AZURE DEVOPS vs GitHub, DevOps, GitHub Leave a comment

GitHub Actions and Terraform on Azure: A Production Pipeline

June 3, 2026 by deniscooper@me.com
GitHub Actions terraform

Learn how to build a production-grade Terraform pipeline on GitHub Actions with OIDC authentication, self-hosted runners, composite actions, gated approvals, and drift detection on Azure.

Categories AZURE, AZURE DEVOPS, GitHub, TERRAFORM Tags GitHub, GitHub Actions For Platform Engineers, GitHub Workflows, PIPELINES Leave a comment

Custom GitHub Actions for Platform Engineers

May 27, 2026 by deniscooper@me.com
custom GitHub Actions

Learn how to build composite GitHub Actions that standardise deployments across teams. A practical guide for platform engineers, with a real Azure OIDC login action walkthrough.

Categories AZURE, GitHub, IaC, TERRAFORM Tags AZURE, GitHub, IaC, TERRAFORM Leave a comment
Older posts
Newer posts
← Previous Page1 Page2 Page3 … Page6 Next →

Recent Posts

  • Terraform Module Lifecycle: From First Variable to a Release Teams Can Trust
  • Terraform Module Testing as Governance: The Part That Actually Enforces the Rules
  • Terraform Calling Conventions: How Your Modules Should Actually Talk to Each Other
  • Terraform Module Boundaries: What Actually Belongs in a Module
  • Terraform Repo Structure: Module Repos & Golden Paths Explained

Recent Comments

  1. Kevin on GitHub Actions OIDC Authentication to Azure
  2. Kevin on Token Theft in M365: Why MFA Fails and How to Fix It
  3. Andrea R. on Entra vs Azure RBAC: Why Global Admin Doesn’t Mean What You Think
  4. David Gómez on Entra Workload Identities Explained: Service Principals vs Managed vs Federated
  5. Andrea R. on Shift Cost Left: Adding Infracost to Your IaC Pipelines
© 2026 deniscooper.co.uk • Built with GeneratePress