u/Xaneth_

▲ 0 r/AZURE

How feasible is this idea for an entry level project in Azure/Terraform for my portfolio?

I'm trying to transition into Cloud Operations from IT Support, and I've been learning Azure and Terraform for a few months now. I keep hearing how it's best to include your own projects in your CV to increase your chances of finding a job, but tbh I've never been good at coming up on my own with feasible ideas for these things that wouldn't amount to be simply rehashing some guided projects/labs you can find online on Udemy and similar sites.

I've tried extending some concepts I've learned about in my Azure training, and so this is what I've come up with:

  • Deploy a storage account with a blob container, and then show 2 ways you can restrict access to it.
  • The first way is to disable public network access, and create a private endpoint connecting the storage account to a virtual network. I would then deploy a virtual machine on that network (with a key vault to store the login password to the VM in), remote to it through Bastion, and access the blob container from there.
  • The second way is to use RBAC. I would disable key access and default to Entra ID authentication, then create a group with a "Storage Account Contributor" role assigned to it in that storage account's scope, and assign users to that group.
  • Finally, I would convert this into IaC in Terraform to automate deployment, with an added option of using another storage account for storing remote state files through Azure backend. The Terraform code would be stored on GitHub.

I've already written and tested most of the code, but I can't shake the feeling that this whole idea is somewhat... crude. Would it really make sense to put something like this in my portfolio?

reddit.com
u/Xaneth_ — 14 hours ago

Turning a Python script into a web application that can be deployed in Azure - how complicated is it?

I've been learning Python for a few days, so I'm pretty much a newbie, but I've learned enough that recently I've managed to write a simple program that plays a tic-tac-toe game. It runs entirely in CLI. I figured I might try to deploy this app in Azure using Azure App Services as part of a larger project.

Admittedly though, I've fooled myself into thinking it will be simpler than it really is, because I've seen an example where deploying a simple PHP "Hello World" page was a matter of just pointing the App Services to an external GitHub repository, and I figured that since my program is just a single script, it should be no different.

Needless to say I've found out the hard way it's not that simple with Python, and that the process also requires using a web framework like Flask. But after looking at various templates/tutorials/quickstarts/courses on how to work with Flask, it looks like a whole new separate thing and I can't figure out a simple way how to apply this to my script, or how to refactor my entire code to turn it into a web app.

Is it really that difficult? I'm not trying to learn about stuff like html/css/bootstrap as I don't think these should be necessary for a simple program that displays everything in CLI. But if I do need several days to get to grips with it, then maybe I should reconsider my scope.

reddit.com
u/Xaneth_ — 7 days ago
▲ 2 r/AZURE

I've restricted access to a storage account to a specific virtual network. Can I regain access to it through a VPN gateway?

I'm trying to learn Azure as a new career path. I've been doing some MS Learning labs, and in this one, you're supposed to restrict access to a storage account to a specific virtual network. Which I've done, and it worked as expected - I'm getting the exact error as specified in the lab. But the action itself felt somewhat arbitrary and didn't really teach me much about why you would do that. So then I wondered, how do I actually access the storage account afterwards?

I asked AI, and it suggested 2 ways:

  1. host a VM inside the virtual network, remote into it, log into Azure there and access the storage account.
  2. Create a VPN gateway, configure P2S on it, connect my own computer to it through Azure VPN and access the storage account through it.

The first method worked without issues, even though it seemed somewhat crude to do. But I'm having trouble getting the second one to work. Here's what I did:

  • created a Virtual network gateway (SKU - VpnGw1AZ, type - VPN, virtual network - same as the one in the storage account settings)
  • configured P2S settings (tunnel type - OpenVPN (SSL), authentication type - Microsoft Entra ID (with authentication settings as described in this article)
  • added the virtual network's GatewaySubnet under "Public network access" in the storage account's networking settings (and configured Service endpoint)
  • downloaded the VPN client settings and imported them in the Azure VPN Client
  • connected to the VPN through the client

But even then, after trying to open the blob container in the the storage browser, I'm still getting the same "This request is not authorized to perform this operation." error as in the lab.

What did I do wrong? Is it even doable at all, or was it just an AI hallucination?

u/Xaneth_ — 10 days ago
▲ 1 r/audio

I'm trying to have a setup where I have one Chrome window that plays background stuff (Twitch, YouTube, other "2nd monitor" things) and outputs audio through speakers, while everything else (games, other apps, all other Chrome windows) goes through my earphones. Is it possible to do? I've heard VoiceMeeter could help here but I'm having a difficult time getting to grips with it; also, I noticed it adds around 100-150 ms of latency to the sound when I'm using it, which I'm not sure I'm a fan of.

As a side note, I'd rather not use another browser to that end, as I want to keep my browsing data consistent.

reddit.com
u/Xaneth_ — 20 days ago