

Azure Deployment Stacks Deep Dive: Safe IaC Lifecycle, Deny Settings, and Cleanup
Build and validate Azure Deployment Stacks with Bicep, Azure CLI, deny settings, managed resource lifecycle controls, safe detachment, and verified cleanup.

Christos Panagiotidis
4 min read


Azure Bastion Deep Dive: Secure VM Administration with Entra ID, JIT, and Audit Logs
Administer a private Linux VM through Azure Bastion with no public VM IP, short-lived Microsoft Entra SSH certificates, Defender JIT access, and auditable sessions.

Christos Panagiotidis
8 min read


Azure Key Vault Deep Dive: Passwordless Access with Managed Identities, RBAC, and Certificates
Build a passwordless Azure Key Vault lab with a user-assigned managed identity, least-privilege RBAC, secrets, RSA signing, and X.509 certificate lifecycle validation.

Christos Panagiotidis
14 min read








