Azure Managed HSM – AccessDenied when creating a Role Assignment
When creating a Role Assignment at the scope of an Azure Managed HSM key, I received an AccessDenied. But, even with the error, the permission was created.
Articles
Technical archive
101 tutorials, investigations, and practical notes on Azure, Sitecore, DevOps, security, identity, and infrastructure.
55 articles found — Azure
↗
Managed Identity – Access SQL Database with App Service
With Azure Managed Identity it is possible to eliminate the need for developers to manage passwords and credentials, keeping communication secure between services. If you still don’t know what Azure…
What is Azure Managed Identity?
Password and credential management has always been a challenge for developers, especially for service-to-service communication. Although it is possible to use Azure Key Vault to securely store such information, services need a way to access it.
Grant access to a project in Dev Box
As you may have seen in my article about what Dev Box is, Dev Box is a pre-configured computer created through a self-service portal, which provides autonomy to your team of developers and accelerates integration to projects…
Access Virtual Machine with Bastion Without Connecting to Azure
I've discussed Azure Bastion in other posts here on the blog (here and here), and, for those who don't know, it's a Platform as a Service that provides secure RDP and SSH connectivity to protect your…
What is Azure Dev Box?
Have you ever thought it would be possible to access a portal where you could create a machine in Azure, accessible from anywhere in the world and from any device? This is already possible with Azure Dev Box What is…
Microsoft Most Valuable Professional
Last Thursday, June 6, I received excellent news: I was recognized as a Most Valuable Professional by Microsoft. And after getting to this point, I decided to express my GRATITUDE once again!
Bug in the Azure Portal?
I recently swapped out two monitors connected to my laptop for a larger monitor. I ended up dividing the screen into four parts to be “more productive,” and everything was going well until I noticed a bug in the…
Generate a bacpac for Azure SQL Database
There are several ways to transfer a bacpac from an Azure SQL Database to storage. However, you should take some precautions to ensure the export is transactionally consistent. Transactionally…
Migrate Service Bus Standard to Premium
Until recently, Azure Service Bus only had the Standard tier optimized for low-throughput environments and for developers. The Premium Tier provides dedicated resources per namespace, ensuring predictable latency and higher throughput at a fixed price, optimized for production environments and high throughput.
Granting Access to a Virtual Machine Using Azure Bastion
Today I’ll show how to grant access to a Virtual Machine using Azure Bastion. Azure Bastion As you may have seen in my article about Improving Security with Azure Bastion, Azure Bastion is…
Migration of resources between Subscriptions – Azure SQL Database
I was participating in a project that would migrate several resources from one _Subscription_ to another, within the same _Tenant_. I even wrote an article about Resource migration between…
Improve Security with Azure Bastion
Are you looking for a new way to improve security when connecting to your virtual machines in Azure? You should check out Azure Bastion. In the past, to ensure RDP connectivity and…
Unable to find the storage account associated with the Function App
Recently I had to resolve an issue with an Azure Function deployment, using _Bicep_ with the following message: Unable to find the storage account associated with the Function App.
Modify Routing Rule Type in Azure Application Gateway
When creating a Routing Rule in Azure Application Gateway, there are two options Basic and Path-Based, but how can you modify it? When configuring the Application Gateway, you will need to create a default rule, which will be associated with the _Listener_, _Backend Pool_, and the _HTTP settings_.
Azure: Remove Unused Disks
Today’s article will cover Removing Unused Disks and is part of the series of posts that help save money when using resources in Azure. I once heard, and have used ever since, this analogy: using cloud resources is like using electricity—the more you use, the more expensive it gets. But you can also save money if you apply to the cloud what you currently do with electricity.
Migration of resources between Subscriptions – CosmosDB for PostgreSQL Cluster
I was participating in a project that would migrate various resources from one Subscription to another, within the same Tenant. The idea was to use Azure Resource Mover so that the process would occur quickly and simply…
Diagnosing and Troubleshooting Issues in App Service
Azure App Service is a Platform as a Service (or PaaS), meaning there is a shared responsibility between the customer and the cloud provider, so the customer—in this case, you—do not have the same level of unrestricted access as you had in your own on‑premises environment.
Azure SQL Database Performance Analysis
Everyone has been frustrated with slow applications and there was no way to figure out what might be happening, since, apparently, everything seemed normal. Have you considered performing a performance analysis in Azure…
Identify who made changes to Azure resources
On March 5, 2024, the Public Preview of the Change Actor feature was announced, aiming to facilitate identifying who made changes to Azure resources. Now with Change Analysis, you can see who started the change and which client was used, for all your Tenants and Subscriptions.
3 Ways to Reduce Network Latency in Azure
Network latency is considered one of the factors for your application's performance success, and in Azure there are several options to reduce it. Latency, in short, is the time between the moment you perform an action and the moment you see the result…
Azure Key Vault – Error restoring a certificate
Recently I had to perform some experiments related to an Azure Application Gateway and use certificates that were in an Azure Key Vault. In short, I needed to configure an Application Gateway…
Modify Azure Web App Application Settings without losing configurations
A while ago I needed to modify a parameter of the Application Settings on more than 50 Azure Web Apps, and it should be fairly simple with PowerShell, since I would test on a Web App, validate it, and be able to replicate with a few lines of code…
Cost Management – Using PowerShell to collect Azure SQL costs
Using Cost Analysis in the Azure Portal, you can easily check the prices of Elastic Pool, Standalone databases, and SQL Server. In the image above, you can determine the cost of the Elastic Pool, of…
Azure Application Gateway
Azure Application Gateway is an application-layer load balancer for web applications, directing traffic based on criteria such as IP address and port, differentiating from traditional load balancers that operate at the [transport layer](https://www.alura.com.br/artigos/conhecendo-o-modelo-osi#camada-4---transporte "camada de transporte").
Azure Portal Timezones
In today’s post I’m going to share a challenge I face from time to time when dealing with Azure Portal Timezones. UTC Time Range If you had to guess the timezone you are looking at while using Azure…
Diagnose and Solve Problems for App Service
In today’s post I am going to show you how to use Diagnose and Solve Problems for App Services to help you with your troubleshooting issues. App Service is a Platform as a Service, and you don’t have access to…
Filtering backups in Azure App Service
In today’s post I am going to show you how to filtering backups in Azure App Service and keep your application protected. Regardless the App Service Plan tier, the backup cannot exceed 10GB, and this is the…
Backup an Azure App Service
In today’s post I am going to show you how to Backup an Azure App Service and keep your application protected. Before I start to show you how to backup an Azure App Service, let me explain a couple things…
Application Insights Data Usage
In today’s post I am going to describe how to check the Application Insights Data Usage and to understand how it could affect your monitoring. Application Insights Application Insights is a powerful resource part of the Azure Monitor toolset that enables you to monitor your application and [designed to help you continuously improve performance and usability](https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview?wt.mc_id=MVP_374008).
Reduce Azure App Service Costs
Today’s post will cover Reduce Azure App Service Costs and is part of the Azure Savings series that covers ways to save money on Azure. I once heard—and have used since this analogy—that using cloud resources is similar to using electricity: the more you use, the more expensive it will be. However, you can also save money if you apply to the cloud what you currently do for electricity.
Ranked #23 top Azure Blog to follow in 2020
This Monday I was surprised by an email saying that my blog has been ranked #23 on the list of top Azure blogs to follow in 2020! And this was only possible because of your interest in the content I am sharing here, so… I really appreciate your interest, and THANKS FOR READING.
Scaling Sitecore Azure Web App
Before scaling Sitecore Azure Web App, you should read about the experience I had and plan to share in this post. In Azure Web Apps, you can easily adjust existing resources almost in real time to accommodate business needs, and this also applies to Web Apps where you can Scale Up and/or Scale Out your application.
Azure Web App Updates
In today’s post I am going to share about the experience I had recently with the Platform as a Service: Azure Web App Updates Platform as a Service By having the PaaS flavor, a couple things are no longer…
Redeploy Azure Virtual Machine
In today’s post I’m going to show the Redeploy Azure Virtual Machine feature and how it can be helpful when you’re facing problems with your Virtual Machine. I often see people having issues with their VMs, and in most cases, the redeploy process resolves the problem and can save hours of troubleshooting.
Azure Delete unattached disks
Today's post covers Delete unattached disks and is part of the Azure Savings series that covers ways to save money on Azure. I’ve heard—and have used since—that the analogy of cloud resources is like electricity: the more you use, the more expensive it becomes. However, you can also save money in the cloud by applying to cloud what you currently do for electricity.
Grant access to Virtual Machine using Azure Bastion
In today’s post, I am going to show you how to grant access to a Virtual Machine using Azure Bastion. Azure Bastion highlights As you probably saw in my Improve Security with Azure Bastion post, Azure…
Improve Security with Azure Bastion
Are you looking for a new way to improve security to connect to your VMs in Azure? You should check out the feature Azure Bastion. In the past, to secure RDP and SSH connectivity to your Azure Virtual…
3 Ways to Reduce Network Latency in Azure
Network latency is a key factor in your application's performance, and in Azure there are plenty of ways to reduce it. Network Latency In summary, latency is the time between an action and its result…
Azure Certification Journey
Lately, I’ve been seeing a lot of people asking how they can get started on their Azure Certification Journey, and although I hate to say it this way, here it goes: “it depends”! It depends. It does…
Get a bacpac from Azure SQL Database
There are several ways to get a bacpac from an Azure SQL Database to storage. However, you should take precautions to ensure the export is transactionally consistent. Transactionally Consistent One thing not to…
Azure Savings Scheduled Shutdown and Startup of Virtual Machines
Today’s post will cover Scheduled Shutdown and Startup of Virtual Machines and is part of the Azure Savings series of that cover ways to save money on Azure. Once I heard, and used ever since this analogy,…
Azure Web App Scale Out and ARR Affinity
On Azure Web App Scale Options post, you were introduced how to Scale Up and Scale Out your Web Application, but what happen after scale out completion? In summary, it will add – or remove – a copy of your…
Azure Web App Scale Options
One of the benefits of having your application in the cloud is the possibility to easily change existing resources almost in real time to accommodate a specific situation. And it also applies to Azure Web App…
Azure SQL This location is not available for subscriptions
Lately, when you get a fresh Azure Subscription there are a couple problems you might face, so don’t freak out, especially if you see the following message while provisioning an Azure SQL This location is…
Why AZ-900 became the next big thing?
Have you wondered why AZ-900 became the next big thing? And I believe I might have a good explanation to share, keep going… Nowadays, the exam AZ-900 : Microsoft Azure Fundamentals is the entry level for…
Azure Alerts
People may disagree with me, but no one wants to be the last to know. So you should consider using Azure Alerts for your environment, right? Alerts proactively notify you when important conditions…
Azure Application Insights Live Metrics
In today’s post I’m going to share about Azure Application Insights Live Metrics, and the importance to know what is happening LIVE! Sometimes it is really painful to go after the logs to find an error or…
Sitecore Identity Server and Azure AD security groups limit part 3
Part 1 – A user was member of 180 Security Groups and after provide its credentials, it was either redirect to a HTTP 431 error page or a blank page but never to Sitecore Experience Platform. Part 2 – User…
Sitecore Identity Server and Azure AD Security Groups Limit—Part 2
I didn’t expect to write another post about the Sitecore Identity Server and Azure AD Security Groups limit, since I thought that by finding the magic number last time and the workaround of reducing users’ membership would be sufficient.
Sitecore Identity Server and Azure AD security groups limit
One of the most exciting – and easy – things to perform now with Sitecore Identity is the integration with Azure Active Directory (AD) which allows your users authenticate with the same credentials as for…
Sitecore Identity Server and Azure AD security groups limit
One of the most exciting – and easy – things to perform now with Sitecore Identity is the integration with Azure Active Directory (AD) which allows your users authenticate with the same credentials as for…
[Solved] Issue with Sitecore Identity Server and Azure AD
I had to set up an integration between Azure Active Directory and Sitecore 9.1, and I was able to accomplish it by following the steps on Derek Correia’s blog. Then, I had to map claims to User Profiles as…
Sitecore PaaS on Azure: is it all about cost?
To sum up this article, the answer is: NO! Of course, I won’t make the assertion that cost isn’t a factor in the decision-making process, but I can say that it certainly isn’t the only consideration. You…
Sitecore databases – using Azure SQL
Since I have seen the term CLOUD for the first time, I already heard many assumptions from “in love” to “no supporters” people. Everyone has its own perspective, and who wouldn’t smell a rat when their…