Log Analytics Contains Your Most Sensitive Security Data Azure Log Analytics Workspace is the central repository for logs from every Azure service, VM, container, and application. It contains security events, authentication logs, network flows, and application telemetry. Access to Log…
Category: Azure
How to Resolve Azure Fluid Relay Service Connection Issues
Understanding Azure Fluid Relay Connections Azure Fluid Relay enables real-time collaborative experiences by synchronizing shared state across multiple clients. Connection issues manifest as authentication failures, container creation errors, or WebSocket disconnections. This guide covers every common connection problem and how…
How to harden security of Azure Logic Apps
Logic Apps Automate Business-Critical Workflows — Secure Them Azure Logic Apps connects to hundreds of services via managed connectors — from Office 365 and Salesforce to SQL databases and file systems. A compromised Logic App workflow can exfiltrate data, send…
Getting Diagnostic Settings for all resources
One needs to enable Diagnostic Settings to gain detailed insight into the Azure infrastructure. For example you want to see who has accessed Azure Key Vault, or what kind of traffic is allowed/denied in Azure Firewall, or what clients using…
Bulk execute bash on Linux VMs in Azure
Suppose you have hundreds of Linux VMs in Azure across dozens of Azure subscriptions and you would like to run some commands programmatically on them. Each VM in Azure gets what they call guest agent, that helps the underlying Virtual…
Get all Access Policies of All Azure Key Vaults
There are several ways to secure Azure Key Vault’s Data Plane. If you have configured it to be secured via Access Policies, often time it is advisable to audit the assignment at regular interval to ensure that no unwanted user…
Search Azure resources by tag
There are many ways to organize resources in Azure and one best practice is to set tags and be able to query resources based on tags. Most commonly, tags are used for cost management where filters and dashboards can be…
Develop Azure Dashboards from Legacy Application Custom Logs
Overview and Problem You have an application (for example a desktop application, an application running in baremetal IIS, a console application, a Windows Service, so on..) that is producing custom application logs, CSV, Kafka middle-ware or so, being stored in…
Azure Policy: Restrict Azure Functions from using Consumption Plan
Azure Functions can either use a Consumption or a Premium/Dedicated/other for execution and pricing. Consumption plans are good when you want to stay dynamic in terms of how you want to scale up based on the utilization and you can…
Best Practices: Migrating On-Prem Linux Virtual Machine to Azure
Satellite Repositories / Repo Configs You may have satellite (local) repositories on your local On-Prem where your Linux VMs used to download the package updates and those On-Prem satellite repositories maybe are no more accessible from this newly spun VM…