Skip to content

Microsoft Azure

Architectural Context

Detailed reference for Microsoft Azure in the context of Cloud Providers (Hyperscalers).

Standard Reference

Agentic Engineering

Model Context Protocol

Azure Integrations

Cloud Infrastructure

Azure

Enterprise Architecture

Platform Engineering

  • Subscription Vending Implementation Guidance [ADVANCED LEVEL] [COMMUNITY-TOOL] — Explains the architectural pattern of automated subscription vending on Azure.

  • Guides cloud platform teams to construct GitOps-driven workflows.

  • Automatically provisions fully governed, secure, and networked Azure subscriptions using Bicep or Terraform.

Cloud Management

FinOps

Cost Optimization

Cloud Native

Kubernetes

Fleet Management

Cloud Providers

Azure (1)

AKS

Hands-on Labs
  • AKS Labs - Introduction [ENTERPRISE-STABLE] — Microsoft's structured laboratory ecosystem designed to onboard engineers to Azure Kubernetes Service (AKS). The content delivers a reliable, production-aligned guide covering core infrastructure topics such as advanced networking, cluster security integration, and enterprise scaling mechanics.

AKS Updates

  • Azure Updates AKS 🌟 [DOCUMENTATION] [ENTERPRISE-STABLE] — Official update tracking feed detailing Azure Kubernetes Service platform improvements, retired APIs, and native feature promotions. Curator insights mark it as a vital operational pulse for infrastructure engineers, while live grounding confirms its role in tracking Kubernetes version deprecations and control plane releases.

Cloud-Native Infrastructure

Infrastructure as Code

AI-Assisted Operations

  • Enhancing Infrastructure as Code Generation with GitHub Copilot for Azure [ENTERPRISE-STABLE] — Curator Insight: Analyzes the application of LLM co-pilots in rapidly writing secure ARM and Bicep configurations. Live Grounding: Demonstrates how contextual AI generators drastically lower human-error risk in pipeline IaC templates. Highly representative of modern 2025/2026 operational shifts.

Networking

Ingress

Azure AGC

Istio Integration
  • Application Gateway for Containers: Istio Integration [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A modern engineering analysis detailing the integration of Azure Application Gateway for Containers (AGC) with an internal Istio service mesh topology. Focuses on seamless north-south traffic routing and end-to-end TLS bridging configurations inside Azure cloud architectures.

Platform Engineering (1)

AI Integration

Agentic Engineering (1)

  • Azure DevOps MCP Server Public Preview [ENTERPRISE-STABLE] — The official public announcement details the release and capabilities of the Azure DevOps MCP server. Highlights the architectural integration of Large Language Models directly into enterprise ADO workflows for automated engineering management.
  • Azure DevOps MCP Server ⭐ 1718 [ADVANCED LEVEL] [ENTERPRISE-STABLE] — An official Microsoft MCP server repository enabling AI Agents (like Claude or GitHub Copilot) to interact seamlessly with Azure DevOps. Allows agents to manage work items, query repositories, inspect pipeline logs, and orchestrate PR reviews dynamically.

CI-CD Pipelines

AI Integration (1)

Azure DevOps
  • Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A practical implementation guide demonstrating how to integrate Azure OpenAI into Azure DevOps pipelines to automatically generate comprehensive pull request descriptions from code differences. Demonstrates prompt engineering techniques and YAML pipeline configurations to enhance team productivity and standardise PR documentation using generative AI.

Infrastructure as Code (1)

Azure DevOps (1)
  • Automate Terraform Testing with Azure DevOps Pipelines [ADVANCED LEVEL] [ENTERPRISE-STABLE] — Provides a complete implementation walkthrough for embedding robust automated test suites (including tftest and checkov) inside Azure DevOps pipelines. Demonstrates how to validate infrastructure compliance and dry-run infrastructure updates early in the pipeline.
  • Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A production-grade, step-by-step tutorial on building a fully secure and automated Terraform deployment pipeline within Azure DevOps. Provides robust, reusable YAML template definitions, including state locking configurations, plan validations, and multi-environment promotions.

Language Runtimes

Azure DevOps (2)
  • Install Java 23 in an Azure DevOps Pipeline [SPANISH CONTENT] [COMMUNITY-TOOL] — A technical guide written in Spanish demonstrating how to dynamically configure, install, and leverage the Java 23 SDK runtime inside Azure DevOps build pipelines, using modern Microsoft-hosted and self-hosted runner strategies. [SPANISH CONTENT]

CI-CD Security

Azure DevOps (3)

  • Securing Azure DevOps When Using Private Repositories [COMMUNITY-TOOL] — Analyses secure integration patterns for private Azure DevOps environments. Offers standard reference controls for isolating source code hosting, managing external worker access, and mitigating common misconfiguration patterns across self-hosted agent pools.
  • Dependabot Version Updates in Azure DevOps [SPANISH CONTENT] [COMMUNITY-TOOL] — A practical guide explaining the installation and automated orchestration of Dependabot-style dependency scanning and automated PR version updates within Azure DevOps repositories. Written in Spanish. [SPANISH CONTENT]
  • Update to Azure DevOps Allowed IP Addresses [DOCUMENTATION] [COMMUNITY-TOOL] — Official documentation outlines the network security updates for Azure DevOps, focusing on the transitioning IP address ranges and service tags. Crucial for security engineers managing firewalls and strict ingress/egress rules to maintain uninterrupted pipeline connectivity.

Cloud Security

Identity Federation

  • mattias.engineer: Azure Federated Identity Credentials for GitHub [EN CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — An in-depth configuration guide explaining how to design passwordless integrations between GitHub Actions and Microsoft Azure using OpenID Connect (OIDC). Eliminates long-lived static API secrets in favor of short-lived federated credentials.

Public Cloud Providers

Azure Kubernetes Service AKS

Observability and Monitoring

Service Mesh

Security

Identity Management

Cloud Integration

  • From Zero to Hero with Identity and Access Control in Azure Kubernetes Service [EN CONTENT] [ADVANCED LEVEL] [GUIDE] [ENTERPRISE-STABLE] [GUIDE] — Curator Insight: Architect blueprint for managing Microsoft Entra ID integration in Azure Kubernetes Service. Live Grounding: Walks through configuring fine-grained identity federation and replacing Kubernetes cluster roles with enterprise Azure AD mappings.

Infrastructure Security

Network Protection

  • Building a DDoS Response Plan with Azure DDoS Protection [EN CONTENT] [COMMUNITY-TOOL] — Curator Insight: Architecture plan to withstand high-volume distributed denial-of-service attempts. Live Grounding: Focuses heavily on cloud-native patterns like rate-limiting, load-balancer protection, and Edge integration on Azure platforms.

💡 Explore Related: AWS Tools Scripts | AWS | AWS Architecture