Author Archives: anuj - Page 24
Understanding the GCP Organization Resource
What is it that is Hierarchal - IAM or resources? People talk about hierarchical IAM in GCP. In reality, it is the resource hierarchy that is hierarchical. IAM just follows…
Transit Gateway equivalent in GCP?
Is there a direct parallel to aws' transit vpc in gcp? Network Connectivity Center - Recently, Google launched something called the Network Connectivity Center. Consisting of a central hub (which…
Azure Private Link and Private Endpoints
In GCP. VPC Endpoints and Private Google Access are closely related as described here. In Azure as well, Private Link and Private Endpoints are part of the same 'Privatizing PaaS'…
Private VM in GCP
Also read - Private Subnets in GCP and Azure Private Links versus Private Endpoints Overview The default setting for a VM instance is to have an ephemeral external IP address ( This…
A Reusable Hub Spoke Network Design on Azure
This content is password protected. To view it please enter your password below: Password:
Azure Hub Spoke VNET Spin Up – Using Azure Building Blocks
Overview If you have worked with Terraform Sentinel IaC policies, Azure Building Blocks are similar. While not as powerful as Sentinel policies, these building blocks can ensure several best practices…
Top Governance Tasks for a New Azure Subscription
Also see - Subscription approaches in Azure Network Design Comes First Apart from a hub spoke network design to protect your resources at a network level (with associated FW rules…
Routes in Azure – A poor man’s DMZ
Apart from firewall rules, routes are the key networking component that need to be configured for your subnets/VNET. To build a poor man's DMZ, one could simply have an Azure…
Azure AD Connect – Getting Corporate Identities in Azure AD
See also Top Governance Practices on Azure SubscriptionsWhat is AAD Connect?Azure AD Connect is a service that syncs identities between your corporate AD and your cloud AD (AAD).The Azure AD…
Azure Subscription Strategies
See also Top Governance Practices on Azure Subscriptions Subscription Layout Considerations Workload separation strategy As an organization adds new workloads to the cloud, different ownership of subscriptions or basic separation…