Cloud engineering, explained clearly
Practical notes and walkthroughs from work with Microsoft Entra ID, Azure, PowerShell, and the systems around them.
Start here
InteractiveChoose admin roles, check existing controls, and get a practical list of what to review next.
From the blog
A step-by-step guide to Azure Monitor Agent: the three pieces it needs, three ways to install it, and the ten traps that leave machines "installed" but sending nothing.
From Local Ollama Models to a Public OpenAI-Compatible API Running multiple AI models locally is becoming increasingly practical. With Ollama, you can run models such as Llama, Qwen, and DeepSeek on your own hardware. At the same time, cloud providers such as Anthropic, OpenAI, and Google provide access to much larger hosted models. The problem …
If you’re managing Entra ID (Azure AD), you’re facing constant attacks. The single most effective way to protect your tenant is with Conditional Access. But don’t just click around in the portal-deploy your security as code. We’ll build a simple, modular, and production-ready Terraform framework to deploy this “Top 4” set. The “Top 4” Critical …
Disabling Windows Defender (now called Microsoft Defender Antivirus) may be necessary for developers, software testers, or IT professionals. Deactivation allows for testing applications without interference or for installing a third-party antivirus solution. Important: Disabling Defender leaves a system unprotected. Always re-enable security features after testing to protect against viruses and malware. When Should You Disable Defender? …
Introduction A critical flaw in Microsoft Entra ID (formerly Azure Active Directory) - CVE-2025-55241 - reminds us how fragile cloud identity can be when legacy token flows linger. While Microsoft has already patched the issue, the lessons go far beyond a single CVE. At Terait, we help organizations secure Entra ID and Azure identity services. …
If you’ve deployed Vaultwarden in Docker and want to access it securely via a custom domain (like vault.yourdomain.com) instead of an IP and port, this step-by-step guide will help you achieve it using CyberPanel and OpenLiteSpeed. In this tutorial, I’ll show you how to expose Vaultwarden (running on http://<server-ip>:8062) under a subdomain with SSL encryption. …
In today’s rapidly evolving digital landscape, a sound identity governance strategy is paramount. Central to this strategy is a clear and consistent naming convention for Microsoft Entra ID (formerly Azure Active Directory) objects-ranging from Security Groups and Conditional Access Policies to Applications and Administrative Units. A well-designed naming convention ensures discoverability, automation readiness, security compliance, …
When troubleshooting patching issues or assessing update compliance, finding the right log files is critical. The logs provide insights into agent activities, patch assessments, and update installations. This guide covers the various log locations depending on whether you’re working with Azure VMs or Azure Arc‑enabled servers, and explains how to query centralized update assessment results. …
Introduction Managing access to resources in any organization is crucial for security, compliance, and operational efficiency. Microsoft Entra ID (formerly Azure AD) provides governance features to help organizations control who has access to what and ensure that access is granted appropriately. Two key features that help with access management are: Although both play a role …
Why Do You Need This Script? Organizations register applications in Entra ID to authenticate users and grant access to Microsoft services. However, some apps:🔹 Lose valid secrets or certificates and stop working🔹 Remain unused for long periods but retain permissions🔹 Can be exploited if left unmanaged IT administrators need to identify unused applications and those …
Why Do You Need This Script? Guest users in Entra ID (formerly Azure AD) are external users invited to collaborate within an organization. However, many guests:🔹 Never accept their invitations🔹 Stop using their accounts after a period of time🔹 Pose a security risk if their access isn’t revoked To maintain security and compliance, IT administrators …
When it comes to monitoring and managing your Azure resources, Azure Alerts and Action Rules (formerly known as Processing Rules) are two powerful tools in Azure Monitor. While they both play a role in alert management, they serve different purposes and operate at different stages of the alert lifecycle. Let’s break down the differences and when to use each. …