Search articles Alt /

Foundations and governance

Tenant security, subscriptions, policy, RBAC and the tools every other recipe uses.

  1. GOV-01 Secure a new Azure tenant in the first hour: MFA, break-glass accounts, security defaults Coming soon · wave 1
  2. GOV-02 Azure CLI, Az PowerShell and Bicep on Windows and Linux: the toolkit every recipe usesInstall PowerShell 7, Azure CLI, Bicep and the Az module on Windows or Ubuntu, sign in, and prove it all works in one script. 15 min (plus 5-10 min for the Az module) · Beginner ·
  3. GOV-03 Management groups and subscriptions for a small organisation Planned
  4. GOV-04 Naming and tagging standard, enforced with Azure Policy Planned
  5. GOV-05 Azure Policy: allowed regions and VM sizes Planned
  6. GOV-06 Resource locks: stop the accidental delete Planned
  7. GOV-07 Least privilege with a custom "VM Operator" role Planned
  8. GOV-08 Privileged Identity Management for Azure roles: just-in-time Owner Planned
  9. GOV-09 Azure Resource Graph: 15 queries every admin needs Planned
  10. GOV-10 A self-cleaning sandbox: expiry tags and a nightly cleanup Function Planned
  11. GOV-11 Azure Landing Zone with the Bicep accelerator, sized for a small tenant Planned
  12. GOV-12 Activity Log in Log Analytics: who deleted what, and when Planned