azure
CanadaPubSecALZ
Our great sponsors
| azure | CanadaPubSecALZ | |
|---|---|---|
| 14 | 1 | |
| 124 | 116 | |
| - | 2.6% | |
| 6.9 | 4.3 | |
| about 1 month ago | 10 days ago | |
| Shell | Bicep | |
| GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
azure
-
How to enable access to storage account?
Wrote a document which explains how limit access to PaaS - https://github.com/groovy-sky/azure/tree/master/paas-vnet-04 . IP is not working in some cases.
-
storage account (blob) behing app gateway ?
There is a problem if vendor is trying to access your storage from the Azure resource, located in the same region as the storage account (more detailed explanation here). Except that everything else seems reasonable.
-
[article] One more time about PaaS networking
Yep. Have skipped that part for a better visibility. Have wrote separate article about that - https://github.com/groovy-sky/azure/blob/master/paas-vnet-02/README.md
-
The main disadvantage of Private DNS Resolver
So was trying to make production-ready setup using Azure Private DNS resolver for accessing Private Endpoints from on-premises. Currently, self-hosted solution is used for that(wrote article about it).
-
Azure storage for on-prem application
We are using Private Endpoints and conditional forwarder to share access to on-prem. An example of such configuration you can read here - https://github.com/groovy-sky/azure/tree/master/paas-vnet-02 . Recently Microsoft announced which could be used for exactly same reason - https://docs.microsoft.com/en-us/azure/dns/dns-private-resolver-overview
-
Azure PaaS networking cheat sheet
Not for now. I already have wrote in a plain English few articles about this topic (1,2,3) with a more detailed explanation and practical examples (which you run). At least for now, there is nothing left, what I could share in that area. Probably, in the future I will try to find and tell something new about this topic :)
-
Can someone please explain how I can have full internal DNS resolution in a hybrid environment?
I have a draft of an article about this scenario - https://github.com/groovy-sky/azure/tree/master/paas-vnet-02
-
Securing resources access
A time ago started to learn about resource's protection(even wrote an article about private endpoints). Now want to summarize main technologies/options in one picture. Result you can see below. What do you think? Did I miss something? I know that not every resource/SKU have possibility to use service/private endpoints, which is why used "Try" word.
- Running 'whatismyip' service using Azure Functions
-
Azure FW and private link DNS
Special for such use-case wrote instruction how-to use CoreDNS, which is running as container instance, to expand Azure DNS to on-prem - https://github.com/groovy-sky/azure/tree/master/docker-coredns-00
CanadaPubSecALZ
What are some alternatives?
Azure PowerShell - Microsoft Azure PowerShell
caf-terraform-landingzones - Azure Terraform SRE framework
pg_auto_failover_ansible - Ansible Playbook(s) to create/manage a cluster of PostgreSQL nodes running in a cluster with pg_auto_failover
AzureDeploymentFramework - ARM Bicep & DSC Project for Azure Infrastructure and App Environment Deployments.
infrastructure-developer-tools - Infrastructure developer tools includes set of plugins and services that make it easier than ever to build, test and deploy infrastructure.
PSRule.Rules.Azure - Rules to validate Azure resources and infrastructure as code (IaC) using PSRule.
Runbook.md - Write Bash executable runbooks in Markdown.
TVData - Brutto-Netto-Gehaltsrechner: Open-Source-Repository zur Schätzung des Nettogehalts deutscher Angestellter des öffentlichen Dienstes. Enthält Source Code, Entgelttabellen, Stufenlaufzeittabellen, Zulagenoptionen, Daten zur privaten Rentenversicherung, usw. Beiträge sind willkommen!
hands-on-DevOps - A hands-on DevOps course covering the culture, methods and repeated practices of modern software development involving Packer, Vagrant, VirtualBox, Ansible, Kubernetes, K3s, MetalLB, Traefik, Docker-Compose, Docker, Taiga, GitLab, Drone CI, SonarQube, Selenium, InSpec, Alpine 3.10, Ubuntu-bionic, CentOS 7...
bicep - Bicep is a declarative language for describing and deploying Azure resources
AzOps - AzOps is a PowerShell module which deploys (Push) ARM Resource Templates & Bicep files at all Azure scope levels and exports (Pull) ARM resource hierarchy.
avdaccelerator - AVD Accelerator deployment automation to simplify the setup of AVD (Azure Virtual Desktop) based on best practices