A Drink of Technology for the Thirsty Mind
A common challenge that integrators run into is managing secrets and subsequently, managing access to secrets. Azure Key Vault is a service that developers can use to store their secrets, keys and other sensitive data. However, there is still a challenge with accessing these secrets. If you are storing the credentials to access Key Vault in a non-secure manner, you […]
Read moreCloning an Azure virtual machine is something I thought it was directly integrated (as in, one click/command and that’s it, but no, it involves several steps. However, it is not complicated, and in this post I will explain how to do it! Step 1. Go to Azure portal, navigate to the virtual machine you want to clone. In the Disks section, click on its operating system disk. […]
Read moreUnlike a traditional hub and spoke when you have site to site VPN with azure with multiple virtual networks. Azure Express route gives you an additional option to create up-to to 10 connections directly with the express route circuit. Where the virtual network can be from different subscriptions. It makes life much easier when you have multiple business units within […]
Read moreWhat is Packer? Packer is a tool developed by Hashicorp (the company behind Terraform) that makes it easy to automate the creation of custom images (or AMIs in AWS). The tool itself will automate the creation of VMs, will run whatever scripts you want it to run, and will then instruct your cloud provider to take that image. Packer itself is […]
Read moreAzure Policy is a powerful tool in your Azure toolbox. It allows you to enforce specific governance principals you want to see implemented in your environment. Some key examples of what Azure Policy allows you to do is: I recently ran into a customer scenario, where they wanted to block VMs from having a public IP. If at possible, this […]
Read moreUserType is not always accurate for identifying external or member users If you search an Office 365 user with Get-AzureADUser or Get-MsolUser, you get details about the account type with the attribute UserType. The value can be: Member: the user is part of the Azure AD tenant Guest: the user is a guest, for example to access to Microsoft Teams or SharePoint site According […]
Read moreWhat is a Private Endpoint A private endpoint is a network interface that uses a private IP address from your virtual network. This network interface connects you privately and securely to a service using a Private Link. According to Microsoft, using a private endpoint allows the service to enter into your VNET. The Private Endpoint also enables a private and […]
Read moreAPI Reference and Permissions The official documentation is here: Send mail – Microsoft Graph v1.0 | Microsoft Docs fileAttachment resource type – Microsoft Graph v1.0 | Microsoft Docs Azure App Registration Rights: Mail.Send The PowerShell Script to send Mail with Attachment using MS GRAPH API That’s the Script on using PowerShell with MS GRAPH API to send a Mail with […]
Read moreAPI Reference and Permissions Read the following DOCS for more Details https://docs.microsoft.com/en-us/graph/api/application-post-applications?view=graph-rest-1.0&tabs=http Create an Azure App Reg with the following GRAPH API Application Permissions Application.ReadWrite.OwnedBy Application.ReadWrite.All All done, then let’s see the Script The Result We get an empty Azure App Registration without a Secret, Cert, or Permissions.
Read moreIn this article, you will learn how to prepare to use the EXO V2 module to run Exchange Online unattended scripts with app-only modern authentication. You’ll learn how to: Register a new app in Azure Active Directory and enable its service principal. Assign API permissions and roles. Generate and upload a self-signed certificate. Use the app and certificate to authenticate and […]
Read more