Zero to Hero with Terraform Cloud

In this session, you will learn how to get started deploying and configuring Azure resources using Terraform Cloud.

In this demo-heavy session, we will explore the steps of setting up a Terraform Cloud tenant. The configuration will include configuring a “Workspace”, selecting the workflow, connecting source control, setting up variables, and the plan/apply mode.

With this automated workflow configured we will explore the process of performing deployments and discuss methods more advanced topics such as Sentinel and the private module registry.

After attending, this session you will be ready to configure your first Terraform Cloud implementation.

Shields Up: Securing your Azure Deployments

As cloud workloads become more distributed and AI services drive new architectures, securing your Azure environment requires more than a checklist—it demands a strategy. This session delivers a tactical, real-world guide to locking down your Azure deployments using native tools, best practices, and field-proven architecture patterns.

Using a modern Azure AI solution architecture as the backdrop, we’ll walk through layered defenses across identity, network, platform, and data layers. You’ll learn how to:
• Enforce Zero Trust principles with RBAC, Privileged Identity Management (PIM), and Management Group governance.
• Use Managed Identities and Key Vault to eliminate secrets in code and control access at scale.
• Secure network traffic with Private Link, NSGs, and Next-Generation Firewalls (NGFWs) deployed in hub-spoke or Virtual WAN topologies.
• Monitor and maintain posture with Microsoft Defender for Cloud, Log Analytics, and Azure Monitor and Azure Managed Grafana.

Whether you’re deploying foundational infrastructure or advanced AI services like Azure OpenAI and RAG pipelines, this session provides the patterns and practices to confidently build and operate in a secure cloud environment.

Takeaways:
• Reference architecture: Securing an Azure AI solution end-to-end
• Managed Identity and Key Vault integration patterns
• Role-based access and PIM strategies that actually scale
• Firewall and Private Link patterns for network segmentation and control
• Tools and telemetry for ongoing security posture management

Running multi-region applications on Azure

Have you ever wondered what it would take to run a highly available multi-region application on Azure? In this session, we will examine the Azure services, features, and data center technologies that make this possible. Come learn from our pain building and running applications on Azure. Compute topics: IaaS, PaaS, Serverless, and Azure Kubernetes Services. Networking topics: Traffic Manager, Frontdoors, Application Gateway/WAF, and Azure load balancer.

Running AKS in Production

In this session, you will go behind the lines of a real AKS deployment into production. Lessons learned about Infrastructure, Networking, Key Vault, WAF, and AKS will be covered. Learn how we locked down the deployment from the Network Security Groups to RBAC on the containers. You will see how Azure DevOps was used to create a true end to end CI/CD for both the Application and Infrastructure. Our pain, your gain…

Takeaways:

1. Best practices for deploying production application with AKS
2. Use Azure DevOps pipelines and Terraform to manage an AKS deployment
3. Secure your AKS deployment

Running AKS in Production

In this session, you will go behind the lines of a real AKS deployment into production. Lessons learned about Infrastructure, Networking, Key Vault, WAF, and AKS will be covered. Learn how we locked down the deployment from the Network Security Groups to RBAC on the containers. You will see how Azure DevOps was used to create a true end to end CI/CD for both the Application and Infrastructure. Our pain, your gain… Takeaways:

1. Best practices for deploying production application with AKS
2. Use Azure DevOps pipelines and Terraform to manage an AKS deployment
3. Secure your AKS deployment

Mastering Terraform Deployments for Azure

First, let’s get you started with the configurations needed to deploy to Azure from Terraform Cloud. Next, we will discuss breaking up your deployments into layers of an “Azure Cake”. We will use these layers to configure workspaces that allow for multiple environments for “Dev” and “Prod”, exploring best practices for setting up your repos, variable sets, and workspaces. After attending this session you will be ready to configure your first Terraform Cloud implementation and start building your Azure Cloud environments.

Getting started with DevOps on Azure

In this session the basics of DevOps as practices will be examined. Time will be spent helping you get started on moving your teams away from their traditional silos. The session with then move toward the tooling in Microsoft’s cloud and how DevOps can be implemented for different types of deployments from IaaS to PaaS. Look for a demo filled session that will help jumpstart your move to DevOps in the Cloud. Takeaways:

1. Learn Core Principals DevOps
2. Discover the DevOps Tool Chain.
3. Get jumped started on how to use DevOps tools in Azure.

Getting Started with Azure Networking

With more than 165,000 miles of private fiber spanning 60+ regions and 170+ network PoPs across the world, Azure provides the scale, performance, high availability, and enterprise-grade security you need to meet your most extreme workload requirements.

Let's get you started on the path to building networks in the Azure Cloud. You will learn the basics of Virtual Networks, Private Links, Firewalls, and load balancers.

In addition, you will discover the hybrid networking capabilities to connect on-premises networks to Azure and the many troubleshooting tools available in the Azure NetworkWatcher.

Getting Started with Azure Networking

In this session, we will explore how to connect and deliver your hybrid and cloud-native applications with low-latency, Zero trust-based networking services.

During this survey of networking technologies, you will learn how to securely build a hybrid cloud connecting your on-premises networks Azure.

Then a full rundown of IaaS, PaaS, and Serverless networking connections will be covered. Load balancing and network security will also be introduced covering all of the needs of your applications.

Deploying Co-Pilot Ready Infrastructures with FLLM

Are you ready to start building your first Generative AI application on Azure? Don't know where to start on the infrastructure needed to build on OpenAI in Azure? Then this is the session for you.

FoundationLLM https://foundationallm.ai/ is a platform accelerating the delivery of secure, trustworthy, enterprise copilots.

In this demo-heavy session, we will run a deployment of FLLM into an Azure subscription and show you how to get your first Chat session up and running. This platform will fast-forward you through the complexities of running OpenAI on Azure to the fun of vectorizing your data and building Co-Pilots at scale for the enterprise.

Just some of the items on the Agenda:
• Azure subscription requirements and quota configurations including regions to use for your OpenAI and FLLM deployment
• Configuring a developer workstation to get started with the platform
• Deploying the Quick Start infrastructure for FLLM
• Configuration of the FLLM platform using the Management Portal and FLLM CLI
• Role Based Access Control – RBAC on the platform to ensure data governance

When you leave this talk, you will have the tools to get started on your first Co-pilot using FLLM.

Building Multi-Region AI Applications in Azure

This session explores the architecture and deployment of multi-region AI applications on Azure. Learn how to deploy models across regions for performance, compliance, and resilience. We’ll compare Pay-As-You-Go vs. Provisioned Throughput Units (PTU) for Azure OpenAI, and examine how to use Azure API Management for intelligent load balancing and regional routing. The talk will also cover supporting services, such as Azure Kubernetes Service (AKS), Azure Storage, and Cosmos DB, as well as the patterns required to keep data and compute in sync across different geographies.