Hands-On Azure Tutorials, Terraform Labs and Cloud Workshops.

Build a private Azure Monitor pipeline with AMPLS, Azure Monitor Agent, data collection rules, private DNS, and verified ingestion and query boundaries.

Build and validate Azure Deployment Stacks with Bicep, Azure CLI, deny settings, managed resource lifecycle controls, safe detachment, and verified cleanup.

Explore an offline-validated, command-first AZ-104 learning environment with 28 labs, 1,250 objective-mapped questions, deterministic break/fix exercises, automated validation, and safe cleanup.

Build and validate a patched Windows Server 2025 golden-image pipeline with Azure VM Image Builder, Compute Gallery replication, Trusted Launch, immutable version rollout, and rollback.

Build a private Azure subnet with no implicit internet access, prove outbound failure, add StandardV2 NAT Gateway, validate deterministic egress and SNAT behavior, and analyze native flow logs.

Build and validate a private Azure Container Apps platform with Terraform, private endpoints, private DNS, managed identity, Key Vault, Front Door Private Link, and WAF enforcement.

Build and validate an Azure Network Security Perimeter with Terraform, managed identities, Storage, Key Vault, transition-mode access logs, enforced denials, and explicit Zero Trust recovery.

Build a pooled Azure Virtual Desktop environment with Microsoft Entra-joined Windows 11 session hosts, FSLogix profiles on Azure Files, autoscale scaling plans, and Azure Monitor Insights.

Build and validate an Azure platform landing zone with Terraform, Azure CLI, management groups, inherited policy, RBAC, centralized logging, and safe subscription onboarding.

Build a hands-on Azure FinOps environment with tag inheritance, budgets, scheduled cost exports, Cost Management queries, and a least-privilege VM shutdown guardrail.

Build a redundant Azure workload, inject VM, CPU, memory, latency, DNS, and Entra ID failures, and measure real recovery with Azure CLI and PowerShell.

Build a three-zone Azure VM Scale Set with Azure CLI, trigger real CPU autoscale, replace an unhealthy instance automatically, roll out version v2 with MaxSurge, validate the result, and clean up.

Build a secure Azure Storage private path with PowerShell, a blob Private Endpoint, Private DNS, managed identity, real Portal evidence, DNS troubleshooting, and verified cleanup.

Troubleshoot a deliberately broken Azure network in 60–75 minutes with Azure PowerShell and Network Watcher. You will deploy two private Ubuntu VMs, activate an overriding NSG deny and a blackhole route at the same time, diagnose each layer independently, restore connectivity, verify HTTP 200, and delete the complete lab. WORKSHOP AT A GLANCE Level: Beginner to intermediate Time: 60–75 minutes Region: West Europe Estimated lab cost: about €0.03 of B1s compute for 75 minutes,

Build a highly available Azure web tier with PowerShell, two zonal Ubuntu VMs, a zone-redundant Standard Load Balancer, health probes, failover testing, recovery, and cleanup.

Build and test a secure Azure hub-and-spoke network with VNet peering, Azure Firewall Basic, user-defined routes, and private Ubuntu VMs—then clean up every lab resource.