Workload Identity Lifecycle: The Governance Gap in Azure
Orphaned service principals and stale secrets don’t announce themselves. What operating workload identity lifecycle in Azure actually requires.
SECURITY
Platform Operating Model: Defining Who Owns What in Azure
Ownership and access aren’t the same thing. Part 2 of the Azure Platform Operations series: a practical model for who owns what, and why it breaks.
Platform Design for AI Generated Code: A Governance Guide
Scanning catches what’s broken. Platform design decides what’s possible. A practical guide to guardrails, golden paths, and AI tooling.
What Your Pipeline Can Actually Catch: Building the AI Code Scanning Layer
AI tools generate code fast. Your pipeline needs to catch what they get wrong. Here’s how to build a scanning layer across IaC, containers, and application code.
AI Built It. Nobody Reviewed It. Here’s What We Found.
AI tools let anyone build production apps. Here’s what the platform team found when nobody reviewed the code — and what you need to do about it
Entra vs Azure RBAC: Why Global Admin Doesn’t Mean What You Think
Confused why Global Admin can’t access Azure resources? Learn the difference between Entra roles, Azure RBAC, and Defender permissions
How to Secure Terraform State in Azure (Without Leaking Secrets)
Learn how to secure Terraform state in Azure using Entra ID, RBAC, private storage, and ephemeral resources to prevent secrets leaking.