Home Blog About
Field notes from production Azure

Azure, the way it actually behaves in production.

Practitioner-level guides on identity, RBAC, and governance — written by an engineering leader running real workloads, not paraphrasing docs. Mapped to AZ-104 as I study toward it myself.

§ 01 — Focus Areas
Identity

Microsoft Entra ID

Conditional access, hybrid identity, and the failure modes that don't show up until you're at scale.

Governance

RBAC & Policy

Least-privilege role design, custom role definitions, and policy-as-code patterns that survive an audit.

Architecture

Cloud Design

Landing zones, network topology, and the tradeoffs behind reference architectures — with the "why," not just the "how."

§ 02 — Latest from the blog
Microsoft Entra ID: A Practitioner's Guide to Conditional Access Identity Azure RBAC: Designing Least-Privilege Role Assignments Governance AZ-104 Study Notes: Managing Azure Identities at Scale AZ-104 ADCS Misconfigurations: What a Clean Certipy Scan Actually Tells You Security

Studying for AZ-104?

Get the 14-week study calendar I'm using myself — mapped week-by-week to exam objectives, with a linked article for each milestone.