Architecture Repository
Write-ups, projects, and the notes I take chasing certifications.
A working archive of how things are designed and why. Posts are one-off write-ups. Series dig into a larger topic across multiple posts.
40 posts
-
Azure Messaging and Events: Service Bus, Event Hubs, Event Grid
How to choose between Azure's messaging and event services: Queue Storage and Service Bus for messages, Event Hubs and Event Grid for events. Covers message size and ordering limits, delivery guarantees, push versus pull delivery, and Event Hubs Capture.
-
Azure Container Instances and Container Groups
What Azure Container Instances is genuinely good at and where its limits bite, how container groups colocate containers around the sidecar pattern, and how Container Apps fills the gap between a bare container and a Kubernetes cluster.
☰ Part of Application Hosting on Azure: App Service, Containers and AKS -
Azure App Service Plans: Pricing Tiers Compared
How App Service plans allocate compute across the shared, dedicated, and isolated tiers. The feature cliffs between Basic, Standard, and Premium, what zone redundancy requires, and which limits are worth designing around before you pick a tier.
☰ Part of Application Hosting on Azure: App Service, Containers and AKS -
Azure Hosting: App Service vs Container Apps vs AKS
How to choose between App Service, Container Instances, Container Apps, and AKS: the control-versus-abstraction trade-off, scale-to-zero and cost shape, portability, and why the networking model is the part of the decision you can't cheaply reverse.
☰ Part of Application Hosting on Azure: App Service, Containers and AKS -
Choosing Between Azure Policy and RBAC for Governance
Azure Policy and Azure RBAC solve different governance problems — resource state versus user permissions — and understanding which one actually applies to a given requirement, including how to design custom RBAC roles, is what keeps a governance design coherent.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Designing Azure Governance at Scale: Management Groups, Subscriptions, and Landing Zones
Design principles for structuring management groups and subscriptions as an organisation grows, what a landing zone is for, and how Azure Blueprints' upcoming retirement changes the recommended tooling for deploying governance consistently.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Creating and Assigning Custom Azure Policies
A hands-on walkthrough of writing a custom Azure Policy definition in JSON, assigning it through the portal, and doing the same through PowerShell and Cloud Shell.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Policy Fundamentals: Governance Disciplines, Definitions, and Compliance
How Azure Policy actually works — the governance disciplines it supports, the definition/assignment/effect model, initiatives, exemptions, remediation, and how and when compliance gets evaluated.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Organising and Protecting Azure Resources: Resource Groups, Tags, and Locks
How to structure resource groups, apply tags consistently, and use resource locks to protect Azure resources from accidental changes or deletion — the everyday organisational layer underneath policy and RBAC.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Cost Management: Advisor, Quotas, Budgets, and Alerts
How to track and control Azure spend day to day — Cost Analysis breakdowns, budgets and their alerts, anomaly detection, regional quotas, and where Azure Advisor's cost recommendations come from.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control