Microsoft Azure TIFU by Forgetting to Turn Off Microsoft Defender for Storage During a Massive Data Migration Not long ago, I experienced a classic "Today I Fucked Up" moment while working on a data migration at work. We needed to sync data between Azure storage
Storage How to delete an Azure storage account with an unlocked Immutability policy Recently, I encountered a situation with Azure Storage. We were playing with immutability policy in a storage account in a test environment. We've set a policy for tests,
KQL Looking for activities triggered only by humans in Azure Activities in Kusto or Log Analytics We wanted to know which actions where done by a human and not a service principal when looking at Azure Activities in Log Analytics queries. We thought of a nice
Microsoft Azure List all subscriptions under a management group with Azure Resource Graph It is not a secret anymore that I really like Azure Resource Graph. Today I wanted to list all the subscriptions under a management group and had to adjust because
Microsoft Azure Workaround for error 'utf-8' codec can't decode byte 0x82 using Azure CLI deployment and Bicep We migrated most of our automation from ARM Templates to Bicep in the recent months and things have been good so far. We ran into an issue deploying a bicep
Microsoft Azure Effective ways to delete resources in a resource group on Azure in 2021 In Azure, resource groups are very helpful to logically hold together a set of resources. For many reasons, at some point, you'll want to get rid of these
Cost Management Stop wasting money in Azure - ShareGate webinar One of the main issues facing IT management in 2020 is uncontrolled cloud spending. Learn how to gain the visibility and insights you need to take control of your cloud environment, and implement a team-wide Azure cost management strategy.
PowerShell My ScriptCenter's Azure scripts has moved to Github Over the years I posted a few scripts that have been useful for me in Azure on ScriptCenter. Time has come to move them on a newer platform since ScriptCenter
Microsoft Azure How-to use customer-managed keys with Azure Key Vault and Azure Storage encryption using ARM Template I got a question from a reader asking how to use the Managed Identity of a storage account against Azure Key Vault to enable storage encryption using customer-managed keys. The
Microsoft Azure How to incrementally update KeyVault access policies with ARM templates I was recently asked how to give access to an existing KeyVault to a managed identity that already have access policies configured. It's not a secret but not
Community 2020-05-07: ShareGate Deploy Azure online event Before COVID-19 started to force a global shutdown everywhere, we were already thinking about this event. The long term goal? Help cloud engineers being more successful with Microsoft Azure. ShareGate
Microsoft Azure Azure Policy essentials webinar resources I had the pleasure to co-host a webinar with Jussi Roine around Azure Policy and governance in Azure at the end of March 2020 for ShareGate. It was a good
Microsoft Azure There is a new way to reference managed identity in ARM template I have been using managed identity (aka Managed Service Identity - MSI) in Azure for several years now. It's a best practice and a very convenient way to
Microsoft Azure Speaking at Microsoft Ignite about our journey to the cloud Staying on top of your consumption brings great benefits as it is an important aspect of a healthy governance plan. Learn how to determine if you misuse your resources and how cost monitoring helps detect bugs and defects early, preventing cost bleeding.
Microsoft Azure How to detect expiring certificates in Azure Application Gateway We've been on a mission lately at work to find expiring credentials and certificates in our Azure environments. One of the resources we had on our radar is
Microsoft Azure Tenant and Subscription display names now available in Azure Resource Graph command lines I love Azure Resource Graph but one of the things I deeply wanted since its launch is a native way to get the subscription or tenant names, not just the
Microsoft Azure How to use Office 365 Exchange PowerShell module in Azure Automation We had to do automation around Office 365 mailboxes a couple of days ago and struggled to do it. We looked around and found the solution in a sea of
Microsoft Azure Native Azure REST API calls now available in Azure CLI 2.0.67+ I wrote a few PowerShell functions a couple of years ago to build a bearer token out of an active session. I needed to make calls in scripts here and
Microsoft Azure How to audit Key Vault Access Policy using Azure Resource Graph If you didn't know it yet, I am a big fan of Azure Resource Graph. It gives me the ability to quickly answer business inquiries / people showing at
Azure Resource Graph Azure Resource Change History is here I wrote not long ago about Azure Resource Graph and how it would change the way you script. It now enables us to track changes over time. Ever wanted to
Microsoft Azure How Azure Resource Graph is gonna change the way you search and script Azure Resource Graph has been announced a while ago (Ignite 2018) and I immediately understood this would be a game changer in terms of querying and data digging for the
Microsoft Azure How to audit expiring soon Azure AD application credentials (keys/passwords/certificates) How bad the feeling is when someone comes rush onto your desk because something in production stopped working overnight. This can happen if you don't take seriously the
Community Get Hygge with it – Your 5 Step Guide to ESPC18 1. PLAN YOUR SESSIONS Explore the ESPC18 SCHEDULE to identify what sessions you’d like to attend. Create your own schedule suited to you. If you are travelling with colleagues,
Microsoft Azure How to audit an Azure subscription Role Based Access Control (RBAC) assignments In the last year it occurred several times that I needed to audit and validate Role Based Access Control (RBAC) assignments for an Azure subscription. Using what is available in
Microsoft Azure How to safely replace Find-AzureRmResource -ResourceType calls in Azure PowerShell 6.x+ UPDATE: 2018-06-28 - Added resourcegroup ODataFilter example. Starting with version 6.0 of Azure PowerShell, Find-AzureRmResource have been removed and Get-AzureRmResource is supposed to be the workaround. My first reflex
