Architecture Repository
Write-ups, projects, and the notes I take chasing certifications.
A working archive of how things are designed and why. Posts are one-off write-ups. Series dig into a larger topic across multiple posts.
26 posts
-
Choosing Between Azure Policy and RBAC for Governance
Azure Policy and Azure RBAC solve different governance problems — resource state versus user permissions — and understanding which one actually applies to a given requirement, including how to design custom RBAC roles, is what keeps a governance design coherent.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Designing Azure Governance at Scale: Management Groups, Subscriptions, and Landing Zones
Design principles for structuring management groups and subscriptions as an organisation grows, what a landing zone is for, and how Azure Blueprints' upcoming retirement changes the recommended tooling for deploying governance consistently.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Creating and Assigning Custom Azure Policies
A hands-on walkthrough of writing a custom Azure Policy definition in JSON, assigning it through the portal, and doing the same through PowerShell and Cloud Shell.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Policy Fundamentals: Governance Disciplines, Definitions, and Compliance
How Azure Policy actually works — the governance disciplines it supports, the definition/assignment/effect model, initiatives, exemptions, remediation, and how and when compliance gets evaluated.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Organising and Protecting Azure Resources: Resource Groups, Tags, and Locks
How to structure resource groups, apply tags consistently, and use resource locks to protect Azure resources from accidental changes or deletion — the everyday organisational layer underneath policy and RBAC.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Cost Management: Advisor, Quotas, Budgets, and Alerts
How to track and control Azure spend day to day — Cost Analysis breakdowns, budgets and their alerts, anomaly detection, regional quotas, and where Azure Advisor's cost recommendations come from.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Moving Azure Resources Across Resource Groups, Subscriptions, Regions, and Tenants
How resource moves work in Azure depending on what's changing — resource group, subscription, region, or tenant — including which resource types are supported for each and what Azure Resource Mover actually covers.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Accounts, Tenants, and Subscriptions: The Building Blocks of Governance
What an Azure account, tenant, and subscription each represent, how they relate to one another, and how management groups extend governance above the subscription level.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Application Gateway: Layer 7 Load Balancing, TLS Termination, and WAF
Azure Application Gateway is a Layer 7 (application-layer) load balancer for web traffic. It's also a regional resource: a gateway is deployed into a dedicated…
-
Azure Traffic Manager: How DNS-Based Global Traffic Routing Works
Azure Traffic Manager is a DNS-based traffic load balancer that distributes traffic to service endpoints across different Azure regions and data centres worldw…