Hands-On Azure Tutorials, Terraform Labs and Cloud Workshops.

Build private Premium ACR with Terraform and Windows Server containers. Prove managed-identity image access, diagnose authentication, authorization and client resolver failures, then verify cleanup.

Use Azure CLI, genuine Portal checkpoints, VNet flow logs, Traffic Analytics and KQL to investigate unexpected access and prove a narrow NSG correction.

Operate a two-instance service, distinguish health-probe and NSG access failures, then recover a missing file from Azure Backup while preserving the original VMs and data.

Combine App Service, managed identity, Private Link and KQL. Diagnose RBAC scope, private DNS and staging readiness, then practise release promotion, rollback and scaling.

Recover one missing synthetic file from verified pre-deletion VM and Disk Backup points. Restore into new disks, preserve the original VM, verify hashes and metadata, observe a real security alert, and clean up safely with CLI, PowerShell, Bicep and Portal.

A healthy VM with missing Syslog: diagnose its collection path with KQL, restore the exact DCR association, observe stateful alerts, and practise Network Watcher diagnostics using CLI, PowerShell, Bicep, and Portal.

Diagnose a staging HTTP 503, recover the saved application setting, practise slot swap and rollback, scale App Service, and restore a verified backup into a separate slot using CLI, PowerShell, Bicep, and Portal.

Learn ACR, ACI and Container Apps with digest-pinned deployment, image-pull troubleshooting, PowerShell recovery, sizing and scaling. Includes scripts, challenge, hints and knowledge checks. Instructional release; mandatory live tests remain pending.

Compare availability sets and zones, deploy a Flexible scale set, investigate a wrong health-probe port, restore it through PowerShell, and practice manual scaling with genuine Portal checkpoints.

Build an isolated Ubuntu VM, move its resources, resize it safely, diagnose an actual full-data-volume error, expand the managed disk and ext4 filesystem, and verify identities, hashes and cleanup.

Continue the AZ-104-based azure administrator series: compare redundancy and recovery, observe object replication, restore blob versions, deleted containers and Azure Files data, then verify hashes and cleanup.

Continue the AZ-104-based azure administrator series with AzCopy, Storage Explorer, SAS policies, storage firewalls, Azure Files REST and access-key rotation. Follow a synthetic dataset through controlled faults, recovery and SHA-256 verification.

Continue the AZ-104-based azure administrator series with Azure DNS, Bastion Developer, managed identity, service endpoints and Private Link. A practical tutorial with CLI, PowerShell, genuine Portal screenshots, scripts and a DNS recovery challenge.

Continue the AZ-104-based azure administrator series: build two peered VNets, diagnose a real private HTTP failure using effective routes and NSG decisions, recover with PowerShell, and verify cleanup. Includes tested scripts and genuine Portal evidence.

Continue the AZ-104-based azure administrator series: interpret and deploy Bicep and ARM templates, diagnose an actual missing-parent deployment failure, recover a private subnet, export and decompile, then verify cleanup. Includes genuine Portal evidence and tested scripts.

Continue the AZ-104-based azure administrator series: use Azure CLI, PowerShell and Portal to diagnose a denied tag deployment, preserve Policy and locks, inspect a disabled budget notification, recover and clean up. Includes genuine screenshots and tested scripts.

Continue the azure administrator series with disabled training users, an onboarding security group, and a controlled membership fault. Live-tested CLI and Graph PowerShell recovery; licensing, external users, and SSPR readiness are clearly marked guided topics.

Start the azure administrator series: build a scoped Reader assignment, diagnose a wrong-scope fault, and recover with Azure CLI, native PowerShell, and the Portal. Includes runnable scripts and live-tested evidence.

Connect a Windows workstation to private Azure resources using Microsoft Entra authentication, Azure VPN Client, private DNS, and a verified missing-route troubleshooting exercise.

Build a private Azure Monitor pipeline with AMPLS, Azure Monitor Agent, data collection rules, private DNS, and verified ingestion and query boundaries.