Hands-On Azure Tutorials, Terraform Labs and Cloud Workshops.

Administer a private Linux VM through Azure Bastion with no public VM IP, short-lived Microsoft Entra SSH certificates, Defender JIT access, and auditable sessions.

Build a private Azure SQL path through hub-spoke networking, intentionally break DNS, repair Private DNS links and records, and validate bidirectional resolution with managed identity.

Build an Azure Policy-as-Code governance lab with Terraform and AzAPI. Stage a North Europe canary, audit before Deny, remediate tags and Blob diagnostics, add a scoped exemption, detect drift, and finish with a clean plan.