Brewed in the Cloud by Chris Hailes

Technolgy best served with a hot coffee or cold beer!

Categories

ACSC Essential 8

Azure Virtual Desktop (AVD)

Microsoft Cloud VDI

Security & Compliance

Windows 365 (W365)

Cloud Security

Conditional Access

Identity & Access Management

Microsoft Defender for Cloud Apps

SaaS Governance

SaaS Security

Application Gateway

Azure Firewall

Azure Monitor

Azure Policy

Cost Optimisation

Hub and Spoke

Microsoft Sentinel

Traffic Analytics

Web Application Firewall (WAF)

Zero Trust

Azure Application Gateway

Azure Reference Architectures

Network Security Groups

User Defined Routes

Virtual WAN

Azure

Networking

PaaS

Security

Identity

Bicep

Enterprise

Infrastructure

Network Governance

Cloud Adoption Framework

Monitoring

WebApp

VM

Dashboards

Connectivity

Migrate

Modernisation

DNS

SQL

Web Apps

Service Level Agreements

Storage

IaaS

AVS

VMWare

VPN

Load Balancer

Third-Party

Firewall

ARC

Blog

Automation

Bastion

M365

Purview

Defender

Logic Apps

Backup

EntraID

VWAN

Network

Policy

P2S

Learning

DevOps

DSC

Private Endpoint

SharePoint

Data Protection

AI

Copilot

Governance

Cost

Management

Database

WebApps

BCP/DR

Logging

Design

VDI

MFA

FinOps

BitLocker

ExpressRoute

Private Link

Microsoft

Virtual Desktop

Intune

GitHub

Web App

Example Category

2025

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Restricting Admin Privileges

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Multi‑Factor Authentication

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Patch OS

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Office Macros

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Application Control

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Application Control

Implementing Essential 8 Maturity Level 2 in Microsoft Cloud VDI (AVD & W365) – Overview

Microsoft Defender for Cloud Apps vs Zscaler, Netskope, and Prisma

Implementing Defender for Cloud Apps

What is a CASB and Why Does it Matter?

Brewing a Secure Hub-and-Spoke in Azure - Operationalising the Secure Hub-and-Spoke

Brewing a Secure Hub-and-Spoke in Azure - Azure Application Gateway

Brewing a Secure Hub-and-Spoke in Azure - Azure Firewall Premium

Brewing a Secure Hub-and-Spoke in Azure - Foundations

Stirring in Services: Zero Trust for PaaS with Private Links

Identity is the New Perimeter: Conditional Access & Network Access

Least Privilege Pour: Using NSGs & AVNM Security Admin Rules

Brewing the Basics: Zero Trust Networking in Azure

NVAs & Dynamic Routing with Azure Route Server

Next Hop, Please - Routing to Network Virtual Appliances (NVAs)

Peering into the Void — Routing with VNet Peering

Azure Route Tables 101 — Controlling Traffic in the Cloud

AVNM + IPAM: Finally, Centralised Address Management without the Spreadsheet

Azure Virtual Network Manager for Disaster Recovery

Azure Virtual Network Manager in Enterprise Landing Zones

AVNM Security Admin Rules in the Real World

Building Blocks of Azure Virtual Network Manager

Why Azure Virtual Network Manager is Your New Best Mate

Azure Observability on Tap - End-to-End Azure Monitoring - Part 5

Azure Observability on Tap - End-to-End Azure Monitoring - Part 4

Azure Observability on Tap - End-to-End Azure Monitoring - Part 3

Azure Observability on Tap - End-to-End Azure Monitoring - Part 2

Azure Observability on Tap - End-to-End Azure Monitoring - Part 1

From Rack to Cloud: Part 5 – Post-Migration Power Up

From Rack to Cloud: Part 4 – Bridging the Worlds: Networking and Identity in Azure

From Rack to Cloud: Part 3 – Lift, Shift, or Take the Scenic Route?

From Rack to Cloud: Part 2 - Know Your Beans Before You Brew

From Rack to Cloud: Part 1 - Breaking Up with your Data Centre

Mastering Azure DNS Solutions - Part 5 - Azure Firewall DNS Proxy

Mastering Azure DNS Solutions - Part 4 - Custom DNS Configuration

Mastering Azure DNS Solutions - Part 3 - Azure Native DNS

Mastering Azure DNS Solutions - Part 2 - Private Resolver

Mastering Azure DNS Solutions - Part 1 - Private DNS

Understanding Azure Service Level Agreements and the Resource Requirements Part 4 – Azure WebApps

Understanding Azure Service Level Agreements and the Resource Requirements Part 3 – Azure SQL

Understanding Azure Service Level Agreements and the Resource Requirements Part 2 – Storage Accounts

Understanding Azure Service Level Agreements and the Resource Requirements Part 1 – Virtual Machines

Building Resilient Networks with Azure Networking Services Part 5: Implementing VNet Service Endpoints & Private Link Services

Building Resilient Networks with Azure Networking Services Part 4: Implementing DDoS Protection

Building Resilient Networks with Azure Networking Services Part 3: Understanding Azure Load Balancing Solutions

Building Resilient Networks with Azure Networking Services Part 2: Understanding Azure Virtual Networks Peering

Building Resilient Networks with Azure Networking Services Part 1: Understanding Azure Virtual Networks (VNets)

Demystifying Azure VMware Solution: From Implementation to Workload Migration – Part 6

Demystifying Azure VMware Solution: From Implementation to Workload Migration – Part 5

Demystifying Azure VMware Solution: From Implementation to Workload Migration – Part 4

Demystifying Azure VMware Solution: From Implementation to Workload Migration – Part 3

Demystifying Azure VMware Solution: From Implementation to Workload Migration – Part 2

Demystifying Azure VMware Solution: From Implementation to Workload Migration – Part 1

Navigating the End of Azure VM Direct Internet Access: Part 5 - Implementing Azure VPN Gateway with Site to Site VPN

Navigating the End of Azure VM Direct Internet Access: Part 4 - Implementing Azure Load Balancer with Outbound Rules

Navigating the End of Azure VM Direct Internet Access: Part 3 - Implementing Network Virtual Appliance (NVA)

Navigating the End of Azure VM Direct Internet Access: Part 2 - Implementing Azure Firewall

Navigating the End of Azure VM Direct Internet Access: Part 1 - Implementing NAT Gateway

Azure Arc Update Management: Elevating Your Non-Azure Virtual Machines - Part 5 of 5

Azure Arc Monitoring: Leveraging Azure Monitor in On-Premises Machines - Part 4 of 5

Azure Arc Licensing Benefits: Windows and SQL Server Licensing - Part 3 of 5

Azure Arc Deployment: Mastering Installations with Scale - Part 2 of 5

Azure Arc Unleashed: A Journey into Hybrid Cloud Management - Part 1 of 5

2025 Shaking Things Up

Azure Bastion Automation with Azure DevOps

Azure SQL DTU DB Scaling with Azure Automation Account

2024

2024 Done and Dusted

Implementing Information Protection with M35 DSC

Implementing Defender for Servers using Bicep

Integrating Azure Logic Apps with On-Premises Systems

Network Security Perimeter

Protecting ALL Azure VMs with Azure Backup

Protecting Azure Virtual Machines with Azure Backup

Using Bicep for Microsoft Graph Resources

Integrating Azure Firewall in Azure vWAN

Integrating Third Party NVA in Azure vWAN

Integrating ExpressRoute and VPN in Azure vWAN

Azure Virtual WAN with Bicep

Working with Bicep files at scale

Deploy Azure Firewall Policy Premium with Bicep

Public Preview: Azure Network IP Address Management

Deploy Azure Policy with Bicep

Deploy Azure S2S with Bicep

Optimise Azure Bastion

Azure Function Apps

Azure Logic Apps

Deploy Azure Firewall using Bicep

Deploy Azure VPN Gateway with P2S Config using Bicep

Azure Networking Labs

Configuring Microsoft Purview with Microsoft 365 DSC

Mastering Your M365 Tenant with Microsoft 365 DSC

Azure DevOps

SharePoint: Implementing Access Reviews for SharePoint Sites

Protecting Azure Private Endpoints in Azure

Microsoft Defender Product Suite

Microsoft Purview: Information Boundaries

Microsoft Purview: Data Classifications

Preparing for Copilot for M365

Azure Policy: Enforcing Organisational Compliance

Azure Advisor: Optimizing Azure Resources

Azure Bastion Developer SKU

Azure Service Bus: Decoupling Applications in the Cloud

Azure Cosmos DB: Building Globally Distributed Applications

Azure App Service: Hosting Web Apps, Mobile App Backends, and RESTful APIs

Azure Key Vault: Securing Application Secrets

Entra ID: Enhancing Identity and Access Management

Azure SQL Database: Geo-Replication and Disaster Recovery

Implementing Azure Sentinel

Azure Storage Solutions: Blob, Queue, Table, and File Share

Azure Site Recovery: Ensuring Business Continuity

Azure Automation Accounts: Automating Cloud Management Tasks with Managed Identity

Azure Front Door Accelerating and Securing Web Applications

Azure Traffic Manager Optimizing Global Application Delivery

Azure Application Gateway WAF and Beyond

Azure Firewall A Deep Dive into Cloud-Based Network Security

Azure NAT Gateway

Azure Bastion Simplifying Secure Remote Access

Connecting On-Premises and Azure Cloud Resources

Azure Network Design Architecting for Scalability and Security

Azure Network Security Monitoring Leveraging Azure Monitor and Log Analytics

Enhancing Azure Network Monitoring and Diagnostics

Demystifying Azure Virtual Networks

Azure Monitor Automation with DevOps and Tags

2023

Microsoft & ACSC Essential Eight Empowers Organisations

Azure Virtual Desktop Networking and Security

2022

Advanced Microsoft Authenticator Security Features

Common Azure Cost Optimisation Practices

Access to BitLocker Recovery Key (Preview)

ExpressRoute Traffic Collector (Preview)

Azure Private DNS Resolver

Azure Private Link for Azure Monitor

Microsoft Dev Box

Managing Google Chrome with Intune

Azure Bring your own Public IP Addresses

2021

Azure Static Web App with GitHub Actions