

Azure Private Link Deep Dive: Private Endpoints, DNS, and Hub-Spoke Networking
Build a private Azure SQL path through hub-spoke networking, intentionally break DNS, repair Private DNS links and records, and validate bidirectional resolution with managed identity.

Christos Panagiotidis
11 min read


Azure Policy-as-Code Deep Dive: Terraform, AzAPI, Governance, and Remediation
Build an Azure Policy-as-Code governance lab with Terraform and AzAPI. Stage a North Europe canary, audit before Deny, remediate tags and Blob diagnostics, add a scoped exemption, detect drift, and finish with a clean plan.

Christos Panagiotidis
12 min read


Azure Key Vault Deep Dive: Passwordless Access with Managed Identities, RBAC, and Certificates
Build a passwordless Azure Key Vault lab with a user-assigned managed identity, least-privilege RBAC, secrets, RSA signing, and X.509 certificate lifecycle validation.

Christos Panagiotidis
14 min read








