Welcome
I built this site because the same questions kept coming up in my work, and I got tired of reconstructing answers from memory.
My work spans enterprise Azure deployments, platform engineering, migrations, security operations, and automation. That produces a lot of hard-won knowledge, and it lives in Slack threads, Teams messages, and notebooks until it gets lost. This is my fix for that.
What you'll find here
This is not a beginner's guide to Azure. Microsoft's own docs cover that ground well. What I am capturing is the layer above: what works in enterprise environments, where the edge cases are, and why I make certain decisions the way I do.
The content leans toward:
- Architecture decisions I have had to justify and defend, not just implement
- KQL queries and scripts I wrote to solve real operational problems
- Terraform and IaC patterns I have tested across multi-team, multi-subscription environments
- Policy definitions written to close a specific gap, with the reasoning behind them
How to navigate
The site is organised by domain, and the sidebar is the fastest way to find something specific. If you are getting oriented, here is where I would point you.
| Section | Go here for |
|---|---|
| Azure | Governance, identity, networking, and operations |
| Platform engineering | Terraform, CI/CD, and the operating model |
| Security and governance | Policy design and custom policy definitions |
| AI | Agent patterns and Copilot customization |
| Tools and development | PowerShell and Python automation |
| Field notes | Opinionated lessons from real engagements |
A note on how I write these
I don't try to be exhaustive. Each page focuses on one problem and the approach I used to solve it. Given a choice between covering everything shallowly and covering one thing well, I pick the latter.
The code is from real implementations. The patterns are things I have run. The caveats are things I have personally hit.