Ctrl+Alt+Azure

(00:00) - Intro and catching up. (05:56) - Show content starts.Show links- The PowerShell script to fix permissions (Microsoft Docs)- Jussi's primer on Azure Database for PostgreSQL (Jussi)- Backing up PostgreSQL in Azure (preview) (Microsoft Docs)SPONSORThis episode is sponsored by ScriptRunner.ScriptRunner is a great solution to centrally manage PowerShell Scripts and standardize and automate IT tasks via a Graphical User Interface for helpdesk or end-users. Check it out on scriptrunner.com

(00:00) Intro to the show, and catching up. (04:54) Episode content starts.Show links- Manage emergency access accounts in Azure AD (Microsoft Docs)- Jussi's blog on break-glass admin accounts (Jussi)SPONSORThis episode is sponsored by ScriptRunner.If you already use or want to use PowerShell to manage your Microsoft Teams, check out their free Microsoft Teams PowerShell guide. It contains 8 pages full of ready-to-use PowerShell snippets and real-life examples. Download the Teams Cheat Sheet!

(00:00) Intro to the show, and catching up.(08:53) Episode content starts.Show links- Automated key rotation in Azure Key Vault is now in public preview (Microsoft Docs)- Get notified of changes in Azure Key Vault by using Event Grid (Zimmergren)- GitOps in Azure (Microsoft Docs)- Microsoft Defender for Containers (Azure Updates)- Enabling access to virtual networks in other regions (Microsoft Docs)- Azure Machine Learning update: Terraform configuration templates (Microsoft Docs)- AutoML lab (Microsoft Learn)- Immutable storage with versioning for Blob Storage is generally available (Microsoft Docs)- PowerShell script to upgrade Load Balancer Basic SKU to Standard SKU (Microsoft Docs)- Create VM restore points - public preview (Microsoft Docs)- Tobi's book recommendation: Extreme Ownership (Amazon)- Jussi's book recommendation: How to avoid a climate disaster (Amazon)SPONSORThis episode is sponsored by ScriptRunner.ScriptRunner is a great solution to centrally manage PowerShell Scripts and standardize and automate IT tasks via a Graphical User Interface for helpdesk or end-users. Check it out on scriptrunner.com

Show links- Overview of Azure Load Testing (Microsoft Docs)- Apache JMeter downloads (Apache)- Using the Azure Load Testing service (Tobias Zimmergren)SPONSORThis episode is sponsored by ScriptRunner. If you use PowerShell in your Organization you should check out their free PowerShell Security Ebook. It contains everything you need to know about PowerShell Security! Download their Security e-book here!

Show links- Container services (Microsoft Docs)- Containers on Windows: Lift and shift to containers (Microsoft Docs)- The decision tree flowchart (Microsoft Docs)- Running a single Docker Container in Azure cost-effectively (Jussi)SPONSORThis episode is sponsored by ScriptRunner.ScriptRunner is a great solution to centrally manage PowerShell Scripts and standardize and automate IT tasks via a Graphical User Interface for helpdesk or end-users. Check it out on scriptrunner.com

Show links- The official whitepaper (Microsoft) - Zero Trust adoption report (Microsoft) - Zero Trust e-book (Microsoft) - Zero Trust assessment (Microsoft) - Jussi's monitor light - the BenQ ScreenBar Plus (benq.com)SPONSORThis episode is sponsored by ScriptRunner.ScriptRunner is a great solution to centrally manage PowerShell Scripts and standardize and automate IT tasks via a Graphical User Interface for helpdesk or end-users. Get the Exchange Cheat Sheet.

Show links- Felt (mug) coasters we use (Minimaldesktop) - GA: Audit Logs for Azure Monitor Log Queries- GA: Availability of custom OpenID providers in App Service and Azure Functions- GA: Disable local admin accounts for new AKS clusters when using AAD- Preview: Azure AD and Kerberos (Microsoft Docs)- FSLogix overview (Microsoft Docs)- Preview: Azure Load Testing (Microsoft Docs)- GA: VPN Gateway NAT (Microsoft Docs)- GA: Virtual Machine Selector (Microsoft)- Preview + opt-in: SFTP support for Azure Blob Storage (Microsoft Docs)SPONSORThis episode is sponsored by ScriptRunner.ScriptRunner is a great solution to centrally manage PowerShell Scripts and standardize and automate IT tasks via a Graphical User Interface for helpdesk or end-users. Check it out on scriptrunner.com

Show links- Cloud Adoption Framework – Compute Options (Microsoft Docs)- Choose an Azure compute service (Microsoft Docs)SPONSORThis episode is sponsored by ScriptRunner.Check out their PowerShell Poster that covers the PowerShell Basics and the most important commandlets. Whether you are already using PowerShell or need to ramp up, this is a great resource. Check it out: PowerShell Poster.

Show links- Azure in Sweden (Microsoft)- Azure Sweden details (Microsoft)- Azure Prices endpoint (Microsoft Docs)- PsPing (Microsoft Docs)- Comparing Azure Sweden services (Microsoft)- Azure Resource Mover (Microsoft Docs)- Product availability in Power Platform (Microsoft)SPONSORThis episode is sponsored by ScriptRunner.ScriptRunner is a great solution to centrally manage PowerShell Scripts and standardize and automate IT tasks via a Graphical User Interface for helpdesk or end-users. Check it out on scriptrunner.com

Guest: Jesse LoudonJesse Loudon (@coder_au) is a Microsoft Azure MVP and Principal Consultant at LAB3 in Sydney, Australia. Jesse's mission statement is to democratize Azure Policy as Code. Over the past year Jesse has been actively advocating in the community across blogs posts, open-source GitHub repositories, and YouTube for greater Policy as Code adoption which drives repeatable, auditable, and scalable deployments for enterprises.- What is Azure Policy? (Microsoft Docs)- Azure Policy Extension for Visual Studio Code (Microsoft Docs)- AzAdvertizer (AzAdvertizer.net)- AzGovViz - Azure Governance Visualizer (GitHub)- Understanding Azure Policies with Visual Studio Code (Tobias Zimmergren)- Favorite Visual Studio Code extensions for Azure (Tobias Zimmergren)- Create a custom Azure Security Center recommendation with Azure Policy (Zimmergren)

- What is Azure Chaos Studio? (Microsoft Docs)- Built-in faults (Microsoft Docs)- Supported resources (Microsoft Docs)

Breaking changes in Functions Runtime v4 (Microsoft Docs)GA: Azure Monitor container insights for Azure Arc enabled Kubernetes. (Microsoft Docs)Preview: Visual Studio Code for the Web (Microsoft Blog)Provisioned throughput spending limit for Azure Cosmos DB in general availability (Microsoft Docs)General availability: Centralized management of keys for encrypting Azure disks (Microsoft Docs)Preview: New Azure Arc capabilities in November 2021 (Microsoft Updates)

Microsoft Ignite site (Microsoft)Defender for Cloud Apps trial sign-upApp Governance trial sign-upAzure Container Apps (Microsoft)Microsoft Defender for Cloud Apps (Microsoft)Jussi's recap of the keynotes (Rencore)Pay as you go model for Power Apps (Microsoft)Logic Apps updates (Microsoft)

Microsoft Ignite Fall 2021 (Microsoft)Session catalog for Ignite (Microsoft)Cloud Skills Challenge (Microsoft)

AZ-305 registration (Microsoft)AZ-305 skills measured (Microsoft)Training Certification Poster (Microsoft)Interesting courses on Entrepreneurship & Innovation (Harvard Business School)Interesting courses about Business from Harvard Online (Harvard.edu)

Security Center Updates (Microsoft Docs)Dynamic Concurrency in Azure Functions (Microsoft Docs)Azure Functions runtime 4.0 preview (Microsoft Tech Community)Cost reservations for Management Groups (Microsoft Docs)Windows 11 generally available on Azure Virtual Desktop (Microsoft Tech Community)Updates to Azure Form Recognizer (Microsoft Docs)Deploy Azure AD-joined VMs in Azure Virtual Desktop (Microsoft Docs)

Introduction to Azure App Configuration for Developers with C# .NET Core (Zimmergren)Azure App Configuration (Microsoft Docs)

Creating a User VPN tunnel in Azure (Microsoft Docs)Azure AD authentication with P2S (Microsoft Docs)AlwaysOn VPN tunnels (Microsoft Docs)Tailscale (tailscale.com)Building a Site-to-Site VPN from home to Azure (Jussi)

No show notes this time!

Azure AD Graph is retiring June 30, 2022 (Azure Updates)Discover Azure AD Graph Apps (GitHub)Azure Functions: Configuring the Node version (Microsoft Docs)Azure Functions: Configuring the Python version (Microsoft Docs)Azure Functions: Configuring the PowerShell version (Microsoft Docs)Cross-resource query Azure Data Explorer by using Azure Monitor (Microsoft Docs)Azure Disk Storage: Automatic key rotation of customer-managed keys (Microsoft Docs)Screen capture protection for Azure Virtual Desktop (Microsoft Docs)Upgrade Azure AD connect (Microsoft Docs)Multi-step web tests will be retired - see TrackAvailability() (Microsoft Docs)VM's retiring (here, here, and here)Cloud Services (classic) deployment model replacement (Microsoft Docs)

The SC-200 exam (Microsoft Docs)The SC-200 course (Microsoft Docs)All Microsoft courses (Microsoft)Get certified on Azure Security with AZ-500 (Ctrl+Alt+Azure)Talking about Azure Sentinel with Maarten Goet (Ctrl+Alt+Azure)Understanding and getting started with Azure Sentinel (Jussi)All posts on Azure Sentinel (Tobias Zimmergren)Visualize Log Analytics data ingestion using Azure Sentinel (Tobias Zimmergren)Discover sensitive Key Vault operations with Azure Sentinel (Tobias Zimmergren

About Marc:Marc is a lead consultant at Xpirit with a strong focus on event-driven architectures. He has extensive knowledge of the serverless offerings in the Azure platform and he enjoys helping organizations making effective use of cloud-based technology. You might have seen Marc at a developer meetup or conference since he's a regular speaker in the area of Azure cloud & serverless technologies. He started Azure Functions University, a free and open source learning curriculum on GitHub, where everyone can learn about Azure Functions at their own pace. In his spare time, Marc likes to give attention to the creative part of his brain. He likes to create pixel art, code visuals & music, and occasionally create retro games.

Join us in this episode, where we discuss the numerous aspects of moving towards a cloud-only architecture. Having a more lightweight approach to on-premises is often something that companies are focusing on, so we take a look at the relevant aspects such as file shares, legacy apps, Active Directory, and security. Also, Tobi asks Jussi an unexpected question!

GitHub Codespaces (GitHub)Azure VPN Client for macOS (Azure Updates)Azure Automation: Az module support (Azure Updates)PowerShell 7 support in Azure Automation (Azure Updates)Azure AD support for Azure Automation (Azure Updates)Discovery and assessment for ASP.NET web apps with Azure Migrate (Azure Updates)Azure to Azure Disaster Recovery (Microsoft Docs)Support matrix for Azure to Azure DR (Microsoft Docs)Azure Defender for SQL details (TechCommunity)Start VM on connect capability in Azure Virtual Desktop (Microsoft Docs)Azure Cost Management and Billing updates (Azure Blog)Azure Migrate blog post (Jussi)

Windows 365 overview (Microsoft Docs)Pricing for Windows 365 (Microsoft)A look at Windows 365 (Jussi)

Twitter's strong authentication stats (BleepingComputer.com)Mark's tweet about passwordless (Twitter.com)Windows Hello for Business planning guide (Microsoft Docs)Enable passwordless with Microsoft Authenticator app (Microsoft Docs)Enable passwordless using a security key (Microsoft Docs)Nudge users to set up Microsoft Authenticator (Microsoft Docs)Temporary Access Pass (Microsoft Docs)Becoming passwordless in Microsoft 365 using Surface Go and a FIDO2 key (Jussi)

Azure AD authentication for App Insights (Microsoft Docs)Work item integration (Microsoft Docs)Availability tests overview (Microsoft Docs)Using Azure Application Insights to monitor for expiring SSL certificates (Jussi)Downtime, SLA and outages workbook (Microsoft Docs)Alert based smart detection for App Insights (Microsoft Docs)Easily create tickets from Azure Monitor to Azure DevOps or GitHub (Tobias)

Azure Image Builder services overview (Microsoft Docs)NAT on Azure VPN Gateway (Microsoft Docs)IoT Plug and Play Mobile App (Microsoft Docs)Azure Bastion Standard SKU (Microsoft Docs)Windows 365 (Techcommunity)Session and Cache provider using Azure Cosmos DB (Microsoft Docs)Azure Service Bus support for large messages (Microsoft Docs)Azure AD Authentication for Application Insights (Microsoft Docs)API Management and Event Grid (Microsoft Docs)

Cloud Adoption Framework (Microsoft Docs)Ctrl+Alt+Azure Episode #026 - Succeeding with Cloud Adoption Framework (CAF)Azure Automanage overview (Microsoft Docs)

Jussi's ground floor chartAzure Data Encryption at rest (Microsoft Docs)dm-crypt (Wikipedia)Get-AzVMDiskEncryptionStatus (Microsoft Docs)Securing your Linux VMs in Azure with Azure Disk Encryption (Jussi)

Log Analytics Open in Excel (Azure Updates)Azure Key Vault Managed HSM (Microsoft Docs)Migrate Azure Monitor Application Insights smart detection to alerts (Microsoft Docs)Public preview: Default Rule Set 2.0 for Azure Web Application Firewall (Azure Updates)Microsoft Azure available from new cloud regions in Arizona (Azure Updates) - see also hereGA: Azure Defender for Azure Database for MySQL – Single Server (Azure Updates)Now Available: Pricing changes to Azure Sentinel and Azure Monitor to help you reduce costs (Azure Updates)

AZ-500 (Microsoft Docs)Free learning resources for AZ-500 (MS Learn)AZ-500 labs (GitHub)Passing AZ-500: Microsoft Certified Azure Security Engineer Associate (Zimmergren)

Vesa Tikkanen on TwitterVesa Tikkanen on LinkedInAzure Synapse Analytics (Microsoft Docs)Azure Databricks (Microsoft Docs)Getting started with Snowflake on Azure (Snowflake.com)

Azure Arc with App Service, Functions, and Logic Apps (preview)Custom locations (Microsoft Docs)Deploy and manage Azure Arc enabled Kubernetes cluster extensions (Microsoft Docs)

In this episode, we focus on creating Azure-hosted custom connectors, that Power Platform can use. We briefly take a look at what Power Platform is, and then move on to how to host your custom connectors and what Azure services to utilize. Lots of talk about APIs, Swagger, and serverless! Jussi also asks Tobi an unexpected question.

Build 2021 Book of NewsThe main blog post on Build from MicrosoftJussi's recap of the Build announcements and keynoteAzure Security Center and container scan results (Microsoft Tech Community)Azure Bicep (GitHub)GPT-3 integrates with Power Apps (Microsoft Power Apps blog)Logic Apps gets new hosting optionsUpdates to Azure Communication ServicesAzure AI updates (Microsoft Docs)Continuous Access Evaluation (CAE) (Microsoft Docs)Power Platform updates (Microsoft Power Platform blog)Azure Confidential Ledger (Microsoft Azure)

Data residency (Microsoft)Further documentation (Microsoft Docs)Power BI Report (Microsoft)Jussi's blog on Azure data residency

Microsoft Azure Web PubSub service in public preview (Microsoft Azure)Application Insights work item integration in Azure Monitor (Microsoft Docs) Stateful and 1-minute frequency log alerts in Azure Monitor (Azure Updates)Azure Cache for Redis Event Grid overview (Microsoft Docs)New Azure Policy built-in definitions for data encryption in Azure Monitor (Azure Updates)Using Policy with Azure Site Recovery (Microsoft Docs)Upgrade your infrastructure with the latest Dv5/Ev5 Azure VMs in preview (Microsoft Blog)Enhancements to encryption using customer managed keys for Azure Backup (Microsoft Blog)URL Rewrite for Azure Application Gateway (Microsoft Docs)Open Source API Portal (GitHub repo)

Thomas Maurer's blogThomas Maurer on TwitterManage hybrid infrastructure with Azure Arc (MS Learn)Azure Arc jump startAzure Arc on Microsoft Tech CommunityJussi's blog on Azure Arc

Azure Bicep on GitHubPSArmThread on Twitter about Azure Bicep likes and dislikes (thanks @ryanyates1990 & @CloudCristoph!)Getting started with Azure Bicep (Tobi)

Public preview: Announcing platform support migration of Azure Cloud Services (classic) to Azure Resource ManagerGA: Log Analytics Windows Agent for Winter 2021 now generally availableGA: Updated App Service Authentication portal experience is now generally availableGA: Changes coming to Azure Pipelines free grantsGA: Azure Communication ServicesGA: Azure Blob Storage supports objects up to 200 TB in sizePreview: Azure STIG Solution templates to accelerate compliance for DoDAzure Security Center updatesPreview: Event Grid provides support for delivery headersJussi's felt mousepad! (Grovemade)

Azure AD App Proxy licensing (Microsoft Docs)Building secure access to Teslamate using Azure (Jussi)Publishing Qlik via Azure AD App Proxy (Microsoft Docs)

Certification poster (Microsoft)The AZ-204 certification (Microsoft Docs)How I prepare and (often) succeed with technical Microsoft certification exams (Jussi)AZ-204 labs (GitHub)

REST API for querying SAS tokens in a Storage Account (Microsoft Docs)Azure Clean!

Running Azure Functions on .NET 5 (Microsoft Docs)Differences with .NET class library functions (In-process vs out-of-process) (Microsoft Docs)Network routing preferences for Azure Storage (Microsoft Docs)Azure API Management for Visual Studio Code (Visual Studio Code Marketplace)Introducing Microsoft Power Fx (Microsoft Power Apps)RBAC with Cosmos DB (Microsoft Docs)Security Center Updates, February 2021 (Microsoft Docs)Routing preference (Microsoft Docs)Trusted launch for VMs (Microsoft Docs)Automatic VM guest patching (Microsoft Docs)Request access to on-demand capacity reservationsAzure Purview (Microsoft Docs)Azure VPN Gateway updates (Microsoft Blog)Azure Media Services HEVC encoding support (Microsoft Docs)

Securing Microsoft Teams (Tobias Zimmergren)

Martijn Brant on TwitterMartijn Brant on LinkedInScheveningenCatch up on IgniteIgnite: Book of NewsCertificate renewalMicrosoft MeshAzure Bicep v0.3Windows Server 2022Windows Admin Center with Azure PortalDevice Update for Azure IoT HubAzure PerceptAzure Route ServerAzure Resource MoverAzure Backup Center

041 - Optimize your workloads with the Azure Well-Architected Framework021 - Talking about Azure Sentinel with Maarten Goet

Register for Microsoft Ignite

Building a print-anywhere setup using Universal Printing and an old HP LaserJet (Jussi)Removing a print connector (Microsoft Docs)