u/brianveldman

Azure Virtual Desktop Session Host Configuration introduces a modern way to deploy and manage session hosts by defining their configuration directly within the Host Pool. Instead of manually provisioning virtual machines and configuring them individually, Session Host Configuration enables a standardized and automated deployment experience. This helps ensure that every session host is deployed with the same settings, image, networking, identity, and security configuration, making Azure Virtual Desktop environments easier to manage at scale. In this blog, we will explore how to automate the deployment of Azure Virtual Desktop by using the new Session Host Configuration feature together with Azure Bicep.

With Microsoft Entra Workload Identity Federation, Azure now supports a fully secretless authentication flow between managed identities and multitenant applications. This enables Azure Container Apps, Functions, Automation Accounts, and other workloads to securely access resources in another tenant without storing credentials at all. In this blog, we will build a native cross tenant authentication setup.

With Microsoft Entra Workload Identity Federation, Azure now supports a fully secretless authentication flow between managed identities and multitenant applications. This enables Azure Container Apps, Functions, Automation Accounts, and other workloads to securely access resources in another tenant without storing credentials at all. In this blog, we will build a native cross tenant authentication setup.

With the release of Azure Bicep v0.44.1, extendable parameter files have reached General Availability (GA). This feature introduces the extends keyword for .bicepparam files, making it easier to reuse parameter configurations across environments while reducing duplication and improving maintainability. In this blog, I will explain how extendable parameter files work and showcase a practical scenario where they can simplify your Bicep deployments. 💪🏻

Microsoft Microsoft Entra Private Access removes the need for traditional VPN clients and enhances security by using Microsoft Entra ID features such as Conditional Access to provide secure access to resources in private networks. Recently, I implemented Microsoft Entra Private Access for a customer who wanted to provide external users, such as contractors, with secure access to private resources by using the Global Secure Access platform. That experience inspired me to write this blog. 💪

🔥 It’s here! Microsoft Defender for Cloud now provides discovery and posture coverage for supported serverless container workloads in public preview. The new capabilities include inventory visibility, vulnerability assessment findings, security recommendations, and attack path analysis for Azure Container Apps and Azure Container Instances. In this blog, we'll take a closer look at these new capabilities and explore how Defender for Cloud helps secure Azure Container Apps!

With the release of Azure Bicep v0.43.1, two new functions have been introduced: like() and distinct(). In this blog I will explain how these new functions work and showcase several useful real world scenarios where you can use them in your Bicep deployments. 💪🏻

Hi folks! Thanks last week for the positive feedback on my blog over the Azure Resource Manager MCP. I decided to create a video for the people who would like that. Let me know what your experiences are on the new MCP. 💪🏻

Hi Folks, I was playing around with the new Azure Resource Manager MCP. The new Azure Resource Manager MCP enables AI agents to interact directly with Azure infrastructure through Azure Resource Manager. The server provides built-in capabilities for working with Azure Resource Graph queries, including generating, validating, and executing queries across Azure environments. In this blog, I will show you how to work with the Azure Resource Manager MCP, including creating Azure cost reports, building DrawIO diagrams from existing Azure resources, and deploying Bicep files. Link to blog

Maester is a PowerShell based Microsoft Security test automation framework designed to help you maintain control over your Microsoft tenant’s security configuration. In this blog, I will demonstrate the new Maester feature called multi-tenant reporting. This allows you to run your security tests across multiple tenants and view the results in a single report. This setup enables monthly security checks across your Microsoft tenants. 🔥URL to blog

Maester is a PowerShell based Microsoft Security test automation framework designed to help you maintain control over your Microsoft tenant’s security configuration. In this blog, I will demonstrate the new Maester feature called multi-tenant reporting. This allows you to run your security tests across multiple tenants and view the results in a single report. This setup enables monthly security checks across your Microsoft tenants. 🔥URL to blog