Blog
Here are all the recent blog posts I have written. I write about AI, software development and building intelligent systems in the cloud. You can find my older, archived posts here.
Assigning Roles for Azure Enterprise Apps using Bicep
In this post, I walk you through a practical solution for assigning RBAC roles to Azure Enterprise Applications—like Azure Machine Learning—using Bicep and the Microsoft Graph extension. You’ll learn why multi-tenant apps require a different approach, how to use Bicep’s extensibility features to reference service principals, and how to automate role assignments securely and repeatably. If you’re building secure, zero-trust Azure environments or working with multi-tenant SaaS in Entra ID, this guide will help you confidently automate permissions and avoid common pitfalls.
Protect your Environment from Malicious Pipeline Changes in Azure DevOps
Learn how to increase control and governance of Azure DevOps Pipelines using Approvals, Environments, Service Connections and Variable Groups.
AKS Announcements Roll-up from Microsoft Ignite 2020
A roll-up of all the AKS announcements from Microsoft Ignite 2020
12 Things you Should Know when Implementing Azure DevOps in your Organization
Azure DevOps is a fantastic part of any DevOps tool chain. But when you’re first starting out with it in an organization, there are a few things you should know that will make it even better.
Automate on-boarding Azure Log Analytics Container Monitoring of any Linux Docker Host using Azure Arc
A guide to configuring Azure Monitor Container Monitoring on any Linux Docker host using Azure Arc
Enable AKS Azure Active Directory integration with a Managed Identity from an ARM template
How to enable AKS Azure Active Directory integration with a Managed Identity from an ARM template