Hands-On Azure Tutorials, Terraform Labs and Cloud Workshops.

Connect a Windows workstation to private Azure resources using Microsoft Entra authentication, Azure VPN Client, private DNS, and a verified missing-route troubleshooting exercise.

Build a private Azure subnet with no implicit internet access, prove outbound failure, add StandardV2 NAT Gateway, validate deterministic egress and SNAT behavior, and analyze native flow logs.

Build and validate an Azure Network Security Perimeter with Terraform, managed identities, Storage, Key Vault, transition-mode access logs, enforced denials, and explicit Zero Trust recovery.

Allocate four VNets from IPAM, deliberately exclude one from a tag-driven mesh, repair membership, and prove centralized Security Admin rules override local NSGs.

Build a redundant Azure workload, inject VM, CPU, memory, latency, DNS, and Entra ID failures, and measure real recovery with Azure CLI and PowerShell.

Troubleshoot a deliberately broken Azure network in 60–75 minutes with Azure PowerShell and Network Watcher. You will deploy two private Ubuntu VMs, activate an overriding NSG deny and a blackhole route at the same time, diagnose each layer independently, restore connectivity, verify HTTP 200, and delete the complete lab. WORKSHOP AT A GLANCE Level: Beginner to intermediate Time: 60–75 minutes Region: West Europe Estimated lab cost: about €0.03 of B1s compute for 75 minutes,

Build and test a secure Azure hub-and-spoke network with VNet peering, Azure Firewall Basic, user-defined routes, and private Ubuntu VMs—then clean up every lab resource.