# Cloud — Daily DevOps & .NET > Explore cloud computing, architectures, Azure, AWS, hybrid strategies, and best practices for building scalable and cost-effective cloud solutions. Source: https://daily-devops.net/tags/cloud/ Generated: 2026-06-04 ## About this topic - [Topic landing page](https://daily-devops.net/tags/cloud/): Explore cloud computing, architectures, Azure, AWS, hybrid strategies, and best practices for building scalable and cost-effective cloud solutions. - [Back to all topics](https://daily-devops.net/tags/) - [Site index](https://daily-devops.net/llms.txt) ## Articles tagged "Cloud" (19) - [AKS at Scale: Hard-Won Lessons from 1000+ Node Clusters](https://daily-devops.net/posts/aks-at-scale-mega-cluster-lessons/): Real-world lessons from operating 1000+ node AKS clusters: etcd limits, network saturation, observability overhead, and cost spirals you need to know. - [Why Your Azure Portal Clicks Will Fail the Next Audit](https://daily-devops.net/posts/infrastructure-as-code-compliance-bicep/): Azure Portal clicks fail ISO 27017 Control CLD 6.3.1. Move to Bicep so Git history becomes the audit trail and pull requests the change control. - [Hybrid AKS: Bridging Cloud and On-Prem with Azure Arc](https://daily-devops.net/posts/hybrid-aks-on-prem-azure-arc/): Practical patterns for connecting AKS to on-prem: ExpressRoute, VPN connectivity, Azure Arc management, DNS resolution, and identity federation. - [Your Azure SQL Backups Won't Save You (Here's Why)](https://daily-devops.net/posts/backup-recovery-azure-sql-database/): Azure SQL's seven-day default retention is a compliance time bomb. Configure long-term backup, geo-replication, and tested restores in Bicep. - [AKS Disaster Recovery: Why Your Untested Backup Will Fail](https://daily-devops.net/posts/disaster-recovery-business-continuity-aks/): AKS outages happen. Build a tested DR plan with Velero, realistic RTO/RPO targets, and multi-region failover steps your team can run under pressure. - [Container Registry & Image Security in AKS Deployments](https://daily-devops.net/posts/container-registry-image-security-aks/): ACR security is foundational. Learn practical hardening: image scanning, signing, RBAC, private endpoints, and policy enforcement for AKS clusters. - [Your TLS Config is Probably Wrong: Five Audit Failures I Keep Finding](https://daily-devops.net/posts/encryption-transit-azure-frontdoor/): That TLS 1.0 you kept for backward compatibility? Auditors flag it every time. Here is how Azure Front Door enforces encryption that actually passes. - [Multi-AKS Cluster Networking & Hub-Spoke Topology](https://daily-devops.net/posts/multi-aks-cluster-networking-hub-spoke/): Practical multi-cluster AKS networking with VNet peering, hub-spoke routing, DNS, shared ingress, and clear criteria to keep mesh complexity in check. - [Observability in AKS CNI Overlay: When Pod IPs Hide Behind Nodes](https://daily-devops.net/posts/observability-logging-aks-cni-overlay/): CNI Overlay hides pod IPs behind nodes, breaking observability. Practical patterns for log aggregation, network flows, and debugging at scale. - [Your Azure SQL Is Public Right Now. ISO 27017 Demands You Fix It](https://daily-devops.net/posts/network-isolation-azure-vnet/): Azure defaults expose your database to the internet. ISO 27017 CLD 13.1.4 calls that a compliance failure. VNets and Private Endpoints fix it. - [AKS Cost Optimization: Resource Governance That Actually Works](https://daily-devops.net/posts/cost-optimization-resource-governance-aks/): How to control AKS costs with pod density, node-pool design, spot VMs, and FinOps tagging—without sacrificing reliability or operational control. - [Storage Architecture & Stateful Workloads in AKS](https://daily-devops.net/posts/storage-architecture-stateful-workloads-aks/): PVC/PV patterns, Azure Disk vs Files trade-offs, Velero backup strategies, and cross-cluster replication for production stateful workloads in AKS. - [Your appsettings.json Is a Compliance Violation](https://daily-devops.net/posts/secrets-management-azure-keyvault/): That connection string in your config file violates ISO 27017. Azure Key Vault is not optional—it is the compliance minimum you have been ignoring. - [AKS Cluster Upgrades: Zero-Downtime Operations That Actually Work](https://daily-devops.net/posts/cluster-upgrades-zero-downtime-aks/): Master AKS upgrades with cordon/drain mechanics, Pod Disruption Budgets, multi-node-pool rollouts, and automation for zero-downtime operations. - [Why ISO Standards Actually Matter for .NET Developers](https://daily-devops.net/posts/iso-standards-intro-dotnet-developers/): ISO/IEC 27001, 27017, and 27701 aren't compliance theater anymore—they're engineering requirements in cloud-native .NET that affect every code decision. - [Pod Identity & Access Control in AKS: What Actually Breaks](https://daily-devops.net/posts/pod-identity-access-control-aks/): Workload Identity Federation changed how AKS handles authentication. Credential leaks, RBAC failures, identity drift: what breaks and how to fix it. - [AKS Architecture & Operations — The Complete Series](https://daily-devops.net/posts/aks-architecture-operations/): Nine articles on production AKS—identity, storage, multi-cluster networking, cost governance, DR, and running 1000-node clusters in practice. - [AKS Network Policies: The Security Layer Your Cluster Is Missing](https://daily-devops.net/posts/aks-network-policies-zero-trust/): Learn why AKS Network Policies are essential for Zero Trust, pod isolation, and Kubernetes security—plus how to implement them the right way. - [AKS Networking Clash: kubenet vs. CNI vs. CNI Overlay](https://daily-devops.net/posts/aks-networking-clash/): Azure CNI Overlay beats kubenet's 400-node ceiling and classic CNI's IP exhaustion. Compare all three AKS network models before the cluster locks in. ## Optional - [Full site index for LLMs](https://daily-devops.net/llms.txt) - [Full content of all articles](https://daily-devops.net/llms-full.txt) - [RSS for this tag](https://daily-devops.net/tags/cloud/feed.rss) - [Atom for this tag](https://daily-devops.net/tags/cloud/feed.atom) - [JSON Feed for this tag](https://daily-devops.net/tags/cloud/feed.json)