Azure private networking for your (web) application

As a developer you primarily focus on developing your application code, but it is also becoming important to think about the hosting part of your application. What service will be used within the Azure cloud and how will it communicate with other services using secure connections.

During this sessions we will talk about how to enable private networking for your Azure services. Understand how your frontend can reach the backend or database services by using private networking. We will talk about virtual networks, private endpoints in combination with services that host your application (i.e. App Services).

Join me to find out how you can further improve your Azure services to securely communicate to other services using private networking.

Govern your Azure environment with Azure Policy

When your Azure environment is relatively small, it is straightforward to keep track of what resources you have running in Azure and make sure that your solution is secure, compliant, and cost-effective. When your cloud workload gets bigger, and you have a lot of subscriptions and multiple management groups, that is much harder to do. Luckily, Azure has a built-in feature called Azure Policy that can help you govern your Azure resources. But how do we implement policies, guarantee compliance and security, without decreasing developer agility?
This workshop will teach you how to deploy policies using Infrastructure as Code. You will get to use the built-in policies and will create and deploy your own. We will look at all the different effects that a policy can have and which should be used when.

Workshop

Securely expose your web application with Application Gateway

There are always Web applications hosted within an Azure cloud environment, and usually these web application will need to be exposed to the internet. But how do you securly expose these services, this is where Application Gateway can help.
During this workshop you will learn how to design, deploy and troubleshoot the Application Gateway and how to secure it with a Web Application Firewall (WAF).

Secure and Private DNS Resolution in Hybrid Cloud Environments

Resolving DNS queries in a hybrid cloud can be challenging, especially resolving on-premise environments from the Azure cloud and vice versa.

If you are looking for a secure and private way to resolve DNS queries between Azure and the on-premises infrastructure, Azure DNS Private Resolver is the solution you need. It allows you to resolve DNS queries for resources within your Azure Virtual Network using a private DNS zone without any exposure to the public internet. This means you can use it to facilitate communication between your on-premises infrastructure and Azure Virtual Networks.

Join me for this talk to learn how you can leverage this powerful service to ensure seamless communication in your hybrid cloud environment.

Govern your Azure environment through Azure Policy

When your Azure environment is relatively small, it is straightforward to keep track of what resources you have running in Azure and make sure that your solution is secure, compliant, and cost-effective. When your cloud workload gets bigger, and you have a lot of subscriptions and multiple management groups, that is much harder to do. Luckily, Azure has a built-in feature called Azure Policy that can help you govern your Azure resources. But how do we implement policies, guarantee compliance and security, without decreasing developer agility? This session will teach you how to deploy policies using Infrastructure as Code. You will see how to use the built-in policies and how to create your own. We will look at all the different effects that a policy can have and which should be used when. You will learn how to assign policies on different scopes and finally how to review the compliance status. All with the goal to enforce security, being compliant, monitoring that continuously, and keep costs at bay.

Say Goodbye to ClickOps! Embrace IaC for Game-Changing Automation

In the ever-evolving IT operations and software development landscape, adopting Infrastructure as Code (IaC) has become essential. This presentation dives into the transformative advantages that IaC brings in contrast to the traditional manual configuration, often dubbed 'clickops.' IaC fundamentally revolutionizes infrastructure management by ushering in automation through code, leading to heightened efficiency, consistency, scalability, and reproducibility.

We will explore the advantages of IaC, highlighting its capacity to boost agility, minimize errors, facilitate collaboration, and expedite the deployment and management of complex infrastructures. The analysis underscores the clear superiority of IaC over manual configurations, firmly positioning it as the foremost method for managing infrastructure in today's dynamic, cloud-centric landscape.

Seamless Cloud Communication: Harnessing Azure DNS Private Resolver

Struggling with DNS queries in the hybrid cloud jungle? Azure vs. On-premises - Enter the dynamic fusion in the world of DNS resolutions.

Discover the Game-Changer: Azure DNS Private Resolver. Your secure, private passage for seamless DNS query resolution between Azure and your on-premises fortress(es)!

Ready to conquer your cloud challenges? Don't miss this talk! Join me in this demo-rich session and unlock the secret to frictionless communication in your hybrid cloud universe!

Identity Lifecycle Management with Microsoft Entra ID Access Packages

How convenient would it be to let users determine for themselves when and which permissions they need within Azure without compromising on control and security? How nice would it be to fully automate the onboarding and offboarding of users in numerous Entra ID groups?
With Access Packages, Microsoft provides a powerful tool to solve these kinds of issues and automate Identity Lifecycle Management!

Understanding Azure Virtual WAN and lessons learned

The session provides a comprehensive overview of Azure Virtual WAN, exploring its key features and functionalities. I will share some personal insights and lessons learned from practical experience, offering valuable takeaways for optimizing network architecture and enhancing connectivity within the Azure environment. You will gain a deeper understanding of Azure Virtual WAN's capabilities and practical considerations for successful implementation.

Azure VPN: Dynamic Address Pool Assignment by User Groups

Have you ever pondered the challenge of employing a single VPN solution while applying distinct firewall rules for individual users or user groups? Azure VPN offers a groundbreaking solution with dynamic address pool assignment based on user group membership. This session unveils practical strategies, implementation best practices, and real-world use cases for optimizing connectivity, enhancing security, and ensuring compliance. Tailored for IT professionals and network administrators seeking to maximize the potential of Azure VPN services, it provides insights on efficiently managing firewall rules for diverse user groups, all while leveraging the dynamic capabilities of Azure VPN.

10 things a developer needs to know about Azure networking

When developing applications on Azure, you are quickly confronted with a lot of different Azure networking services. Hosting an application securely is not as easy as one might think. In this session we will guide you through the most important Azure networking services for developers and we will explain how they can benefit you! We will answer questions like ‘how do I access my database or Key Vault privately and securely’ and ‘how do I securely expose my application to the entire world’. With lessons learned using Azure networking services, you won’t make the same mistakes as we did. Join us to find out how you can improve your software development by leveraging Azure networking services!

Why I love using Managed DevOps Pools, and why you should too

Have you ever had to deploy, configure, and maintain your own DevOps agents for Azure DevOps or GitHub? If so, you probably found it a hassle to keep everything up-to-date and running.

Let's examine Managed DevOps Pools and understand how they can help accelerate deployments. During this session, we will discuss what Managed DevOps Pools are, how they can be used, how to deploy and use them, some of the differences between traditional self-hosted agents, and the caveats and lessons learned. Join me and fall in love with Managed DevOps Pools too!

Azure private networking for your (web) application

As a developer you primarily focus on developing your application code, but it is also becoming important to think about the hosting part of your application. What service will be used within the Azure cloud and how will it communicate with other services using secure connections.

During this session we will talk about how to enable private networking for your Azure services. Understand how your frontend can reach the backend or database services by using private networking. We will talk about virtual networks, private endpoints in combination with services that host your application (i.e. App Services).

Join me to find out how you can further improve your Azure services to securely communicate to other services using private networking.

Using Azure IPAM Pools for automate your Azure IP Addresses

Managing your IP addresses is a tedeious task, usually done inside a spreadsheet or markdown file, which require manual checks for available ranges and manual updates after you have used a network range. If you are like me and do not like manual actions join my session about Azure IPAM Pools.
During this session I will show you how to use the IPAM Pools within the Azure Virtual Network Manager to automate the assignment of address spaces in both your Virtual Networks and the subnets.