Architecture Repository
Write-ups, projects, and the notes I take chasing certifications.
A working archive of how things are designed and why. Posts are one-off write-ups. Series dig into a larger topic across multiple posts.
40 posts
-
Moving Azure Resources Across Resource Groups, Subscriptions, Regions, and Tenants
How resource moves work in Azure depending on what's changing — resource group, subscription, region, or tenant — including which resource types are supported for each and what Azure Resource Mover actually covers.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Accounts, Tenants, and Subscriptions: The Building Blocks of Governance
What an Azure account, tenant, and subscription each represent, how they relate to one another, and how management groups extend governance above the subscription level.
☰ Part of Azure Governance: Subscriptions, Cost, Policy, and Access Control -
Azure Application Gateway: Layer 7 Load Balancing, TLS Termination, and WAF
Azure Application Gateway is a Layer 7 (application-layer) load balancer for web traffic. It's also a regional resource: a gateway is deployed into a dedicated…
-
Azure Traffic Manager: How DNS-Based Global Traffic Routing Works
Azure Traffic Manager is a DNS-based traffic load balancer that distributes traffic to service endpoints across different Azure regions and data centres worldw…
-
Hybrid Identity: Authentication and Synchronisation in Microsoft Entra ID
Tenth and last in this series on Microsoft Entra ID, covering the operational mechanics of hybrid identity: which authentication method actually validates a si…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Application and Workload Identities in Microsoft Entra ID
Ninth in this series on Microsoft Entra ID, covering how applications and automated workloads — as opposed to human users — get represented and secured: applic…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Conditional Access and Identity Protection in Microsoft Entra ID
Eighth in this series on Microsoft Entra ID, covering the two risk-based access control layers that sit on top of MFA: Conditional Access and Identity Protecti…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Multi-Factor Authentication in Microsoft Entra ID
Seventh in this series on Microsoft Entra ID, covering multi-factor authentication (MFA): the core mechanics, how to configure it, and a set of corrections to …
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Device Management and Inviting Guest Users in Microsoft Entra ID
Sixth in this series on Microsoft Entra ID, covering how identities get extended to two kinds of "not quite a standard internal user" scenarios: devices, and e…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Self-Service Password Reset in Microsoft Entra ID
Fifth in this series on Microsoft Entra ID, focused specifically on self-service password reset (SSPR): who it can be assigned to, how the admin experience dif…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure