Ctrl+Alt+Azure

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (03:43) - Show content starts. Show links - Entra ID-based identities for Azure Blob Storage SFTP - GA: Draft & Deploy on Azure Firewall - Microsoft 365 E7 (and Agent 365) - Azure Skills Plugin - Defender for Cloud release notes - Microsoft Sentinel what's new - Defender XDR what's new - Microsoft Entra releases and announcements - AKS supported Kubernetes versions - AKS security bulletins - Give us feedback!

In this episode, we look at the newly released Microsoft Cloud Security Benchmark v2, which is now in preview. What is it, why should you care - and what changed since v1? We take it for a spin, discuss aspects of governance and regulatory compliance, and how to apply them in practice. (00:00) - Intro and catching up. (03:57) - Show content starts. Show links - MCSB v2 - Give us feedback!

In this episode, we take a focused look at Startup-Scale Landing Zones. We've previously discussed Enterprise-scale Landing Zones and how the default model from the Cloud Adoption Framework is the usual approach for new deployments. SSLZ is an opinionated approach that is better suited to smaller environments. We talk about the pros, cons, differences, and how to get started. (00:00) - Intro and catching up. (04:51) - Show content starts. Show links - Startup-Scale Landing Zone (GitHub) - Nice intro page for SSLZ - Give us feedback!

In this episode, we're not diving deep into a single feature of Azure - instead, we'll talk and share our insights on how to build a career working with Microsoft security. What should you know? What's relevant? What's less relevant? What are the core skills you should have? (00:00) - Intro and catching up. (04:51) - Show content starts. Show links - No links this week :) - Give us feedback!

In this episode, we take a look at the transition from "vibe-coding" to shipping verifiable, production-grade AI applications. This is the critical shift from relying on "gut feel" and prompt tinkering to implementing rigorous audit trails, versioning, and security controls. We discuss why many AI pilots fail due to a lack of explainability, the specific risks of privilege expansion and data leakage in agentic workflows, and also outline how to use Microsoft Foundry/Azure AI Studio to operationalize your models like true regulated software. (00:00) - Intro and catching up. (05:30) - Show content starts. Show links - RedAmon (GitHub) for automated agentic offensive security - Give us feedback!

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (03:30) - Show content starts. Show links - Preview: Virtual Network Routing Appliance - Claude and Codex on Agent HQ (Github Copilot) - Disabling NTLM by default - What's new in Microsoft Sentinel - Give us feedback!

In this episode, we take a look at the Unified Tenant Configuration Management APIs, or UTCM. This is a set of capabilities that allow you to monitor and extract tenant configuration for automated and code-based monitoring and management. We discuss why you would use these, how they work, and also try them out by building tooling around the APIs. (00:00) - Intro and catching up. (03:13) - Show content starts. Show links - UTCM APIs - Jussi's vibe-coded tooling on GitHub - Give us feedback!

In this episode, we take a look at Windows Backup for Organizations. What's the capability, and why should you use it? What's required, and anything that's missing from it? We discuss backups in general, also, and provide insights on what you should back up. (00:00) - Intro and catching up. (03:30) - Show content starts. Show links - Windows Backup for Organizations - LEGO Arcade Machine (40805) - Give us feedback!

In this episode, we dissect the newly refreshed Well-Architected Framework guidance on building AI workloads. What is AI, actually? The guidance is organized into sections, and we walk through each one, sharing our insights and thoughts. (00:00) - Intro and catching up. (04:26) - Show content starts. Show links - Google Gemini - AI Workload guidance in Well-Architected Framework - Reference architectures - Give us feedback!

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (04:45) - Show content starts. Show links - Update: Retirement date for default outbound access has been extended - GA: Tenant-owned Domain Impersonation for Teams messaging - Preview: Tenant-to-tenant migration with orchestrator for Microsoft 365 - Preview: Dynamic Threat Detection Agent - Get started with azureblobcontainer-to-azureblobcontainer migration in Azure Storage - Give us feedback!

In this episode, we take a look at the brand new Microsoft Security Dashboard for AI. We initially spotted this during Microsoft Ignite 2025, and have been eagerly waiting for it to become available. And here it is! We talk about the what, how, and why of this new capability. (00:00) - Intro and catching up. (02:40) - Show content starts. Show links - Microsoft Security Dashboard for AI - Fitness tests that Jussi is working on - part 1, part 2 (in Finnish) - Give us feedback!

In this episode, we take a look at Azure networking topologies from the ground up. What options do we have for building enterprise-scale architectures, and when should we choose one over another? We discuss our own experiences, and also the stuff we seemingly do not know enough about. (00:00) - Intro and catching up. (03:59) - Show content starts. Show links - Define an Azure network topology - Traditional Azure networking topology (Hub and Spoke) - Virtual WAN network topology (Managed) - Give us feedback!

In this episode, we dive deeper into Azure Trusted Signing, and how it can help with signing your binaries. Why should you care? What are the tools today and in the future, and how to get this done right? (00:00) - Intro and catching up. (03:01) - Show content starts. Show links - Signtool - Introduction to code signing - Trusted Signing - Give us feedback!

In this episode, we take a look at three interesting - and free - tools to help you manage and secure Azure and Entra ID. We take each tool for a spin and reflect on the findings and usage. (00:00) - Intro and catching up. (03:15) - Show content starts. Show links ‑ ScEntra ‑ azqr - Azure Quick Review ‑ EntraExporter - Give us feedback!

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (04:25) - Show content starts. Show links - Agent 365 tooling servers - Mistral 3 available in Microsoft Foundry - Microsoft 365 Copilot Business - Entra ID support for RDP Connections - Ignite 2025 Next Steps - Foundry Control Plane: Where Developers Build, Operate, and Govern Every Agent Feedback - Give us feedback!

In this episode, we unpack what's new with Microsoft Defender for Cloud. During Ignite 2025, Microsoft announced that the public preview of MDC would be available shortly, and it has arrived now. We'll take a look at what changed, what didn't, and why you should care. (00:00) - Intro and catching up. (03:52) - Show content starts. Show links - Defender for Cloud Preview - Give us feedback!

In this episode, we take a look at the new Microsoft Zero Trust Assessment tool. We reflect on Zero Trust in general, its application in the Microsoft security landscape, and what this exciting tool will offer you. (00:00) - Intro and catching up. (05:00) - Show content starts. Show links - Microsoft Zero Trust Assessment tool - Demo of Microsoft Zero Trust Assessment (Merill Fernando) - Give us feedback!

Microsoft Ignite 2025 is here! We reflect on the hero announcements and what they mean for the future. Some exciting announcements were made during the first keynote, and we already had a chance to try a few of them out. (00:00) - Intro and catching up. (03:35) - Show content starts. Show links - ESPC’25 in Dublin - Microsoft Agent 365 - Security Copilot announcement - Azure Copilot - Microsoft Foundry, and more here - Defender for Cloud - Give us feedback!

Microsoft Ignite 2025 is just around the corner. As is tradition by now, we take a look at what to expect from Ignite: the announcements, expectations, and sessions. (00:00) - Intro and catching up. (04:55) - Show content starts. Show links - Microsoft Ignite 2025 - Give us feedback!

This week, we unpack the hero announcements from GitHub Universe 2025. Much of this is related to agents, agentic AI, and GitHub Copilot. We reflect on these new announcements as we proceed. (00:00) - Intro and catching up. (03:59) - Show content starts. Show links - Agent HQ - Custom agents examples - Copilot integrations - Agentic code review in Copilot - Plan mode - Agents.md - GitHub Code Quality - Usage metrics and API - Enterprise AI controls and agent control plane - Give us feedback!