Microsoft Entra Tenant Security Hardening: The 2026 Checklist
Baseline scopes enforcement, auto-enabled passkey profiles, and the 1 September passkey default — a verified Entra ID hardening checklist for 2026.
Read article →
Topic
13 articles
Azure
Architecture, governance, networking, identity and cost control on Azure. Posts range from foundations such as Terraform on Azure, Azure Landing Zones and RBAC best practices, to design choices like Front Door versus Application Gateway versus Traffic Manager, and Bicep versus Terraform. You will also find hands-on guides for Key Vault, private endpoints, Azure Monitor alerts, and cost anomaly detection, along with a comparison of Reserved Instances, Savings Plans and Spot VMs. The focus is on decisions you can defend in a design review and settings you can verify in the portal or CLI. Start with Azure Front Door vs Application Gateway vs Traffic Manager, Reserved Instances vs Savings Plans vs Spot VMs, and Windows Server 2016 End of Support.
Azure Monitor Alerts: Set Up Proactive Infrastructure Monitoring
---
Read article →
Azure RBAC Best Practices: Lock Down Your Cloud Permissions in 2026
- Implement least privilege by default with custom roles scoped to specific resource groups, not subscriptions
Read article →