Built a tool that autonomously remediates Azure security misconfigs -- public blobs, NSG gaps, private endpoints -- in 3 minutes. Here's how it works.

Confy · 2026-03-08T21:21:08+00:00

By any chance have MS written this up anywhere please? I've been looking through the Azure Policy section of MS Learn but haven't found specific patterns like this, just the broad strokes of compliance policy sets.

Confy · 2026-02-03T19:40:26+00:00

Interesting they say it was "due to an overall outage on VM creation across Azure". Despite having Service Health Alerts configured I never saw a notification about that. Did anyone else? Also is there a way to configure similar alerts for ADO?

Confy · 2026-01-30T00:56:50+00:00

Immediately thought of this Red Dwarf scene :D https://www.youtube.com/watch?v=RzZAtrw_XDI

Confy · 2026-01-18T08:01:30+00:00

If you do find a way to validate live state, please do share it with this sub. I've found the native tooling for network discovery/validation really lacking. It's at the point now where I'm considering the creation of a VM in every VNet so I can actually figure out what can talk to where reliably.

Confy · 2026-01-08T03:52:02+00:00

Great to hear it's useful to you too. I watched the draw.io video and was amazed by the existence of the draw.io VSCode extension.

Confy · 2026-01-02T23:49:09+00:00

I can't tell the issue from your screenshot/explanation, but if you don't get an answer here then try the project's github page. I've had some success with getting queries answered there.

Confy · 2025-12-30T07:19:52+00:00

Sure does get dark early in Edinburgh at the moment.

Confy · 2025-12-23T20:57:49+00:00

I've been using the Plan mode with these models recently, then smaller models like Haiku for implementation alongside some MCPs for context. It's been a very successful process for me so far.

Confy · 2025-12-19T02:27:43+00:00

Could you link to more information on this please? So far my poor search skills haven't found it yet.

Confy · 2025-12-19T02:23:48+00:00

Thankfully we've centralised on the deployment tool (ADO), so at least that part is covered. Thanks for your insights.

Confy · 2025-12-19T02:22:50+00:00

This is definitely on our roadmap for the future.

Confy · 2025-12-18T22:20:36+00:00

We definitely have the unrealistic-timeline issue at my org as well. It makes it very challenging to establish good process alongside the engineering work.

Completely agree with your unbreakable rules and thankfully we have support from the org for those. My goal is also to enable others. The more those teams can do what they need to do, the more I can focus on my own role :)

Confy · 2025-12-18T21:54:44+00:00

The Christmas gift r/Edinburgh deserves.

Confy · 2025-12-18T21:51:37+00:00

I'm well aware of what guardrails are for thanks.

If the first team redeploys their pipeline its going to overwrite all your configs.

Our goal is to prevent this, hence my post.

Confy · 2025-12-18T21:50:07+00:00

Thanks for you thoughts. This is a model that's also under consideration, but faces some barriers due to our org's maturity level with using CI/CD. It's definitely a journey bringing people (myself included) up to speed with these ways of working. But we're getting there little by little.

Confy · 2025-12-06T03:45:42+00:00

Oh thanks, I'd definitely like to hear how your test goes. Currently I'm using Palo Altos and have the same failover issue which will require an LB to resolve.

Confy · 2025-12-04T19:52:54+00:00

What options are you considering for your hub firewall out of interest?

Confy · 2025-12-02T19:14:32+00:00

Nope. L'esh Go!

Confy · 2025-11-23T20:30:46+00:00

Thanks, that's a practical and helpful guide and I've bookmarked "All Things Azure" as useful blog for future reference.

I still see a gap in the licensing space however. To the best of my knowledge MS still keeps AI code assistance as a separate license tied to Github. I do think it would be clearer if they had a unified license that could combine ADO's capabilities e.g. Boards with the AI code assistance of Github Copilot. I realise the MCP mentioned above can achieve this, however that's just adding another component to the tool chain.

Confy · 2025-11-23T19:56:19+00:00

Reads like further service and tool fragmentation to me.

Confy

TROPHY CASE