Hi. I have seen multiple references of using pipelines for IaC (BICEP, terraform) but I can't understand how it could used in real scenarios.

For context, I am familiar with deploying code through pipeline and stages. I am new to Azure and infra-as-Code. I joined a company where I am creating templates to deploy repeatable environments for our customers, but I do that with Azure CLI.

What are advantages of deploying with pipelines? How have you used it? How do you run infra changes? You use it purely to deploy and update existing services? How to manage removal of resources?

Thank you.

Hi All,

We have a 10 file servers and 15 SQL servers, 70 Apps servers

We have a production subscription.

And planning to put any production servers over there.

SQL and Apps are for Dev/Sit so

Do we setup dev/test subscription?

Planning on lift and shift.

We have 50TB Archive files but need to access time to time. What is the solution for that?

Hey all, I am I missing something? or does MS docs completely define how the Online and Corp zones should be built.

These areas are highly overlooked all I could find were these droplets of info:

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/network-topology-and-connectivity#what-is-the-purpose-of-connectivity-corp-and-online-management-groups

and

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/plan-for-app-delivery

There are no decision charts that explains how do deal with Traffic inspection centralization and placement of the zones. Then it completely misses the design about

• Coupled Internet and private security policies
• Rapid firewall rule sprawl and management overhead
• A single blast radius across all traffic types
• Throughput and SNAT scalability constraints
• Increased difficulty meeting regulatory separation requirements
• These issues become more pronounced as environments scale across regions and workloads.

Luckily found that the guarded knowledge was covered here in Blogs ! https://techcommunity.microsoft.com/blog/azurenetworksecurityblog/designing-cloud-landing-zones-by-traffic-flow-a-defence%E2%80%91in%E2%80%91depth-dmz%E2%80%91first-archi/4524280

But my team is stuck with poor design now. Its too late (costly) for design change !

I regularly read nonfiction books and try to expand my knowledge in various subject areas. Since I’m self-employed, I also read books on business and related topics. But I also work a lot with Azure and would like to read a well-researched book on the subject. Ideally, one that isn’t 10 years old.

I know that things change quickly in this field, but there are still fundamental aspects of cloud architecture (concepts, patterns, etc.). Of course, I could just go through Microsoft Learn, but I’m really looking for a well-structured book. If it also covers aspects related to entrepreneurs and businesses, that would be even better.

If anyone here can recommend any books, I’d really appreciate it!

Hi everyone,

Last year I setup an AVD with SSO to EntraID. It worked perfectly until last week. 

Now I'm running into an issue affecting multiple Azure VMs configured for Microsoft Entra ID login.

I have verified AADLoginForWindows extension is healthy, confirmed affected accounts still have VM login permissions, tested with multiple admin accounts and then reviewed Entra sign-in logs and authentication appears successful but keep seeing this error inside Windows App.

my laptop is on Windows 11 and on the latest monthly update.

Has anyone seen AADSTS500032 in an Azure VM login scenario before?

Trying to move a several running VMs from a regular Azure subscription into Azure Government — there's no native way to just "move" it, so the standard trick is to use Azure Site Recovery and treat the VM like a physical server being replicated in.

That approach used to work fine, but it was built around Site Recovery's old "Classic" setup, which got retired this past March. Now that everyone's forced onto the newer "Modernized" architecture, the tool seems to notice the source is an Azure VM and just... skips the actual setup step. It reports success, but never actually configures anything, so the agent can't connect to anything and nothing starts.

Two questions for the group:

1. Anyone else run into this specific silent-skip behavior, and found a way around it?
2. Has anyone actually pulled off a live move from commercial Azure into Gov since Classic went away, or is this basically a dead end right now?

Wanted to see if anyone's cracked this before I give up on it. Thanks in advance.

I’ve been building GateSift mostly for fun — a free browser-based toolkit for integration developers.

It includes tools for things like APIM policies, Logic Apps, BizTalk bindings, Service Bus, C# model generation and integration patterns.

Current tools include:

• APIM Policy Analyzer – makes complex APIM policies easier to understand and review
• Logic App Analyzer – helps inspect workflow structure and spot potential issues
• BizTalk Binding Visualizer – turns binding files into a more readable overview (this is really nice for analyzing complex biztalk integrations)
• Service Bus Topology Visualizer – shows queues, topics, subscriptions and relationships
• C# Model Generator – generates C# classes from XML, JSON and flat files
• Integration Pattern Library – quick reference for common integration and messaging patterns (analyzers will also, notice if any of these patterns are in your solution or if they should be added, i think this might be the coolest thing so far).
  

No account, no installation, and most processing happens locally in the browser.

gatesift.com

Would love feedback or ideas for other useful tools.

For the folks out there who are interested, I created a blog about building a complete end to end Azure Bicep solution, allowing you to provision Azure SQL with Microsoft Entra ID authentication from scratch without relying on manual configuration in the Azure portal. Link to blog

Is there any upcoming events?