# Azure — Daily DevOps & .NET > All Azure posts: Microsoft cloud services, deployment strategies, Azure DevOps, infrastructure as code, monitoring, security, and best practices. Source: https://daily-devops.net/tags/azure/ Generated: 2026-05-28 ## About this topic - [Topic landing page](https://daily-devops.net/tags/azure/): All Azure posts: Microsoft cloud services, deployment strategies, Azure DevOps, infrastructure as code, monitoring, security, and best practices. - [Back to all topics](https://daily-devops.net/tags/) - [Site index](https://daily-devops.net/llms.txt) ## Articles tagged "Azure" (31) - [Platform Engineering Without Backstage: Pragmatic IDPs on Azure](https://daily-devops.net/posts/platform-engineering-without-backstage/): Backstage is not the only path to an Internal Developer Platform. Pragmatic IDP patterns on Azure that ship value before the YAML eats your team. - [Security Cosplay: Your Password-Only Admin Panel Isn't Fooling Anyone](https://daily-devops.net/posts/multi-factor-authentication-azure-ad-b2c/): Password-only admin authentication is security cosplay. How Azure AD B2C conditional MFA creates actual protection for privileged operations. - [Certified, Filed, Forgotten: The Compliance Trainwreck](https://daily-devops.net/posts/compliance-verification-dotnet-cli/): Consultants paid. Docs filed. Then compliance becomes a Word doc ritual until an audit exposes the drift. CLI tools fix what checklists never could. - ["We Store Secrets in appsettings.json": A Horror Story in Five Acts](https://daily-devops.net/posts/managed-identity-rbac-azure-resources/): That ClientSecret has been in your Git history since 2019. Here's how Azure Managed Identity eliminates credentials from your .NET apps entirely. - ["Just Delete the User": Famous Last Words Before the GDPR Audit](https://daily-devops.net/posts/right-to-erasure-implementation-patterns/): That delete request touches 17 systems you'd forgotten existed. Here's how to erase data across distributed systems without nuking your database. - [AKS at Scale: Hard-Won Lessons from 1000+ Node Clusters](https://daily-devops.net/posts/aks-at-scale-mega-cluster-lessons/): Real-world lessons from operating 1000+ node AKS clusters: etcd limits, network saturation, observability overhead, and cost spirals you need to know. - [Why Your Azure Portal Clicks Will Fail the Next Audit](https://daily-devops.net/posts/infrastructure-as-code-compliance-bicep/): Azure Portal clicks fail ISO 27017 Control CLD 6.3.1. Move to Bicep so Git history becomes the audit trail and pull requests the change control. - [Hybrid AKS: Bridging Cloud and On-Prem with Azure Arc](https://daily-devops.net/posts/hybrid-aks-on-prem-azure-arc/): Practical patterns for connecting AKS to on-prem: ExpressRoute, VPN connectivity, Azure Arc management, DNS resolution, and identity federation. - [Green Dashboard, Dead Application](https://daily-devops.net/posts/health-checks-operational-monitoring/): HTTP 200 from /health while users see timeouts. The process runs, but the database pool is exhausted. Check what matters, not if it breathes. - [Your Azure SQL Backups Won't Save You (Here's Why)](https://daily-devops.net/posts/backup-recovery-azure-sql-database/): Azure SQL's seven-day default retention is a compliance time bomb. Configure long-term backup, geo-replication, and tested restores in Bicep. - [AKS Disaster Recovery: Why Your Untested Backup Will Fail](https://daily-devops.net/posts/disaster-recovery-business-continuity-aks/): AKS outages happen. Build a tested DR plan with Velero, realistic RTO/RPO targets, and multi-region failover steps your team can run under pressure. - [Nobody Runs Your Cleanup Script (And Regulators Know It)](https://daily-devops.net/posts/data-retention-azure-storage-lifecycle/): Your retention policy wiki page won't survive a GDPR audit. Azure lifecycle policies delete data automatically — no forgotten scripts required. - [Container Registry & Image Security in AKS Deployments](https://daily-devops.net/posts/container-registry-image-security-aks/): ACR security is foundational. Learn practical hardening: image scanning, signing, RBAC, private endpoints, and policy enforcement for AKS clusters. - [Your TLS Config is Probably Wrong: Five Audit Failures I Keep Finding](https://daily-devops.net/posts/encryption-transit-azure-frontdoor/): That TLS 1.0 you kept for backward compatibility? Auditors flag it every time. Here is how Azure Front Door enforces encryption that actually passes. - [Multi-AKS Cluster Networking & Hub-Spoke Topology](https://daily-devops.net/posts/multi-aks-cluster-networking-hub-spoke/): Practical multi-cluster AKS networking with VNet peering, hub-spoke routing, DNS, shared ingress, and clear criteria to keep mesh complexity in check. - [Observability in AKS CNI Overlay: When Pod IPs Hide Behind Nodes](https://daily-devops.net/posts/observability-logging-aks-cni-overlay/): CNI Overlay hides pod IPs behind nodes, breaking observability. Practical patterns for log aggregation, network flows, and debugging at scale. - [Your Azure SQL Is Public Right Now. ISO 27017 Demands You Fix It](https://daily-devops.net/posts/network-isolation-azure-vnet/): Azure defaults expose your database to the internet. ISO 27017 CLD 13.1.4 calls that a compliance failure. VNets and Private Endpoints fix it. - [AKS Cost Optimization: Resource Governance That Actually Works](https://daily-devops.net/posts/cost-optimization-resource-governance-aks/): How to control AKS costs with pod density, node-pool design, spot VMs, and FinOps tagging—without sacrificing reliability or operational control. - [Storage Architecture & Stateful Workloads in AKS](https://daily-devops.net/posts/storage-architecture-stateful-workloads-aks/): PVC/PV patterns, Azure Disk vs Files trade-offs, Velero backup strategies, and cross-cluster replication for production stateful workloads in AKS. - [Your appsettings.json Is a Compliance Violation](https://daily-devops.net/posts/secrets-management-azure-keyvault/): That connection string in your config file violates ISO 27017. Azure Key Vault is not optional—it is the compliance minimum you have been ignoring. - [Audit Logging That Survives Your Next Security Incident](https://daily-devops.net/posts/audit-logging-azure-app-insights/): Most audit logs fail when incidents happen. Structured logging with Application Insights creates trails auditors accept and engineers actually use. - [AKS Cluster Upgrades: Zero-Downtime Operations That Actually Work](https://daily-devops.net/posts/cluster-upgrades-zero-downtime-aks/): Master AKS upgrades with cordon/drain mechanics, Pod Disruption Budgets, multi-node-pool rollouts, and automation for zero-downtime operations. - [Why ISO Standards Actually Matter for .NET Developers](https://daily-devops.net/posts/iso-standards-intro-dotnet-developers/): ISO/IEC 27001, 27017, and 27701 aren't compliance theater anymore—they're engineering requirements in cloud-native .NET that affect every code decision. - [ISO/IEC 27001, 27017 & 27701 for .NET Developers — The Complete Series](https://daily-devops.net/posts/iso-standards/): Nearly 30 articles map ISO/IEC 27001, 27017, and 27701 to concrete .NET and Azure: secrets, access control, GDPR erasure, and supply chain security. - [Pod Identity & Access Control in AKS: What Actually Breaks](https://daily-devops.net/posts/pod-identity-access-control-aks/): Workload Identity Federation changed how AKS handles authentication. Credential leaks, RBAC failures, identity drift: what breaks and how to fix it. - [AKS Architecture & Operations — The Complete Series](https://daily-devops.net/posts/aks-architecture-operations/): Nine articles on production AKS—identity, storage, multi-cluster networking, cost governance, DR, and running 1000-node clusters in practice. - [AKS Network Policies: The Security Layer Your Cluster Is Missing](https://daily-devops.net/posts/aks-network-policies-zero-trust/): Learn why AKS Network Policies are essential for Zero Trust, pod isolation, and Kubernetes security—plus how to implement them the right way. - [AKS Networking Clash: kubenet vs. CNI vs. CNI Overlay](https://daily-devops.net/posts/aks-networking-clash/): Azure CNI Overlay beats kubenet's 400-node ceiling and classic CNI's IP exhaustion. Compare all three AKS network models before the cluster locks in. - [Reimagining the Microsoft Certification Exam UI Experience](https://daily-devops.net/posts/reimagining-the-microsoft-certification-exam-ui/): Experience the revolution in Microsoft Certification Exam UI with streamlined navigation, enhanced accessibility, and interactive design features. - [When Can I Finally Renew My Microsoft Certification](https://daily-devops.net/posts/when-can-i-finally-renew-my-microsoft-certification/): Learn when and how to renew your Microsoft certifications including Azure, Dynamics 365, Microsoft 365, and Power Platform with renewal timelines. - [How to Prepare for Microsoft Certification](https://daily-devops.net/posts/how-to-prepare-for-microsoft-certification/): Comprehensive guide to preparing for Microsoft certifications including Azure, Microsoft 365, Power Platform, and Dynamics 365 exams with study strategies. ## Optional - [Full site index for LLMs](https://daily-devops.net/llms.txt) - [Full content of all articles](https://daily-devops.net/llms-full.txt) - [RSS for this tag](https://daily-devops.net/tags/azure/feed.rss) - [Atom for this tag](https://daily-devops.net/tags/azure/feed.atom) - [JSON Feed for this tag](https://daily-devops.net/tags/azure/feed.json)