Ramblings
Azure landing zones, leadership notes, and life adapting to change — including working in tech with MS. Practical rabbit holes from the queue to the cloud.
Browse articles
Jump to a topic without scrolling the full feed. Newest posts are still listed below.
Azure landing zone
- Deployment Model: Who Is Allowed to Click
- Cost: Who Pays When Nobody Owns the Bill
- Kusto: The Queries That End the Argument
- Logging: You Can’t Defend What You Can’t See
- Networking: Where Architecture Becomes Reality
- Private Endpoints: Architecture and Trade-Offs
- Identity & Access: The Undersized Control Plane
- Subscription Design
- Azure Policy in Landing Zones
- Management Groups
- Building a Landing Zone That Scales
- Private Endpoints: How They Work
Leadership
Latest posts
-
The Spoke Contract: What Platform Guarantees and What Workloads Own
The subscription arrived from the vending pipeline. Right management group. Peering up. DNS linked. Budget attached. The app team opened a ticket anyway: “need the platform team to…
-
Deployment Model in an Azure Landing Zone: Who Is Allowed to Click
The spoke existed by lunch on Friday. The landing zone on the diagram was fine. The one that shipped was whatever a human could click before standup.
-
Cost in an Azure Landing Zone: Who Pays When Nobody Owns the Bill
Finance sent a spreadsheet. Azure was up 38 percent month over month. The landing zone looked finished. Nobody could say which team caused the jump.
-
Kusto in an Azure Landing Zone: The Queries That End the Argument
Logs are landing. You already proved that. The outage is still open and someone just asked you to check Kusto like that’s a place, not a language.
-
Logging in an Azure Landing Zone: You Can’t Defend What You Can’t See
The firewall logs were empty. Three teams arguing about a 504, and the one thing that would have ended the argument wasn’t there.
-
Networking in an Azure Landing Zone: Where Architecture Becomes Reality
There’s a moment in almost every landing zone build where someone says, “Networking is done.” The VNets exist. Peering works. Traffic flows. Demos succeed. Then a second team…
-
Azure Private Endpoints: The Architecture, Trade-Offs, and Real Lessons From Production
When the Portal Says Healthy but the App Says No The private endpoint showed healthy in the portal. Green status. Approved connection. Correct subnet. The pipeline had passed,…
-
Most people want to learn more.
Leaders ACT: Apply — take action before you’re readyChange — adjust fast when it’s not workingTeach — pass on what actually works Here’s the gap: People try to…
-
Intentional Living: Small Choices, Lasting Impact
Most people want to live with purpose. They want their life to matter. The question is—how does that actually happen? In Intentional Living, the answer is simple: A…
-
Identity & Access in an Azure Landing Zone: The Control Plane You’re Probably Undersizing
There’s a point in most environments where things stop feeling simple, but nothing is obviously broken. Deployments are still working. Pipelines are still running. Nobody is blocked. From…