Ctrl+Alt+Azure
Ctrl+Alt+Azure is a weekly podcast about Microsoft Azure and cloud computing, aimed at cloud architects, developers, CIOs, and CISOs. Hosts Tobias Zimmergren and Jussi Roine discuss cloud adoption strategy, security governance, identity management, and emerging topics such as agentic AI. Episodes mix practical guidance with news and commentary from the Microsoft cloud ecosystem.
Avsnitt
359 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(05:35) - Show content starts.Show links- What's new in Microsoft Security: August 2026- Micr
358 - What’s up, Exposure Management?
This week we take a look at Microsoft Security Exposure Management, and what has changed since the last time we looked at it. Among these findings we can see containment capabilities for AI agents, and several capabilities converging into MSEM. Join us for a fun discussion on the latest and great security capabilities!(00:00) - Intro and catching up.(03:42) - Show content starts.Show link
357 - Microsoft 365 E7 – let there be agents and security
This week we focus on licensing with Microsoft 365 E7. What's included in the bundle, and which ones are relevant and when? We reflect on the upgrade path from Microsoft 365 E5, as well as E3 + Defender Suite, and reflect on the options and pricing.(00:00) - Intro and catching up.(02:50) - Show content starts.Show links- Microsoft 365 E7 announcement- Microsoft Agent 365 overview- Microso
356 - Renewing our understanding of Microsoft Global Secure Access
This week we take a look at Microsoft Global Secure Access (GSA). It's been a few years since it was announced, and it's time to refresh our thinking on what GSA is today, how companies can use it, and what a rollout in 2026 would look like. Join us in discussing GPUs, VPNs, and what a delivery project would include!(00:00) - Intro and catching up.(03:56) - Show content starts.Show links-
355 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(02:18) - Show content starts.Show links- Microsoft Entra Backup and Recovery- Agent identiti
354 - A look at the new Azure Front Door edge actions
Azure Front Door just got programmable. Edge actions run your own JavaScript at Microsoft's edge, so A/B splits, token checks and origin routing happen before requests hit your backend. We cover what they do, where static rules run out, how they compare to Cloudflare Workers, and how to try them. (00:00) - Intro and catching up.(03:56) - Show content starts.Show links- Edge Actions - Azur
353 - The Microsoft AD Tier Model explained
Microsoft has put the Active Directory Tier Model on GitHub, MIT-licensed, with a deployment engine, a drift auditor, and around 1,700 tests. This used to be consulting material that Microsoft deployed to you as a paid engagement, so the obvious question is: why now? We start with that question, and also consider whether Active Directory is still worth your attention.(00:00) - Intro and c
352 - So long, SMS and voice authentication
Microsoft is retiring natively provided SMS and voice authentication in Entra ID, and the clock is ticking: passkeys become the default experience on September 1, 2026, and Microsoft-provided telecom delivery is fully retired on February 1, 2027. We walk through the timeline, what admins should do now to find and migrate affected users, and when the new Security Store telecom providers m
351 - Building and hosting a static site in 2026
In this week's episode, we talk about recent experience in moving away from Ghost and WordPress for blogs, and building a static site with Astro. Since it will be hosted in Azure, we will talk about the experience, the AI-assisted build, and the overall experience. Join us to learn how many mistakes we made, and learn from our failures! :) (00:00) - Intro and catching up.(03:00) - Show co
350 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(01:55) - Show content starts.Show links- Retirement: Azure Blueprints- Public Preview: Docum
349 - Back to basics: Managed identities vs. Service Principals vs. App Registrations
In this week's episode, we go back to basics to discuss ways to access resources secured by an Entra tenant. This is the bread and butter of Azure, and it's a good time to revisit these basics to understand why they are more relevant than ever in 2026. Join us in refreshing your knowledge on App Registrations, Service Principals, and Managed Identities!(00:00) - Intro and catching up.(03:
348 - Updates to Azure Files in 2026
In this week's episode, we look into what's new with Azure Files in 2026. We touch on the usefulness of Azure Files, the past limitations and challenges in deploying it, and how things have evolved since the latest preview capabilities, all the way to the new general availability. Join us in modernizing your on-premises file shares for a cloud-first future!(00:00) - Intro and catching up.
347 - Microsoft's Security Adoption Model: a map for security modernization
In this week's episode, we dig into Microsoft's Security Adoption Model, the attempt to pull a decade of scattered security guidance under one roof. It's a role-aware way to plan security modernization across on-prem and multicloud, built on three layers: the business scenarios that explain why, the nine disciplines that define who's accountable, and the technology pillars that cover the
346 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(03:18) - Show content starts.Show links- Securing code, agents, and models across the develo
345 - Reflections from Microsoft Build 2026
In this episode, we reflect on some of our favorite announcements from Microsoft Build 2026. We touch base on some Windows 11 updates, like Intelligent Terminal, the new Run dialog, and moving the Taskbar again (finally?). We also check out the GitHub Enterprise Local announcement, Azure Logic Apps Automation, Microsoft Scout, Project Solara, some new AI models, and Microsoft Execution Co
344 - Insights on using applied AI with Rick Van Rousselt
This week, we sit down with Rick Van Rousselt, Microsoft 365 MVP and managing partner at Advantive Belgium, for an honest look at what's actually working with applied AI in customer environments and what's quietly failing. We dig into the agentic shift across Agent 365, Entra Agent ID, Microsoft Agent Framework, and AI Foundry; the build-versus-buy line now that Microsoft is shipping agen
343 - Essential MCP servers for working with Azure
In this episode, we explore MCP servers - the open Model Context Protocol that allows AI assistants like GitHub Copilot, Claude, and ChatGPT to connect to live tools and data instead of relying on outdated training data. We discuss what MCP servers are, why they are important, and review our favorite MCP servers for working with Azure. We'll also share some personal favorites! (00:00) - I
342 - Expectations on Microsoft Build 2026
Microsoft Build 2026 marks the biggest format shift in nearly a decade - moving out of Seattle to a 2,500-seat Fort Mason venue in San Francisco with a deliberate "no fluff" pivot toward AI developers, technical leaders, and enterprise architects. In this episode, we unpack what to expect across the six confirmed tracks - plus where we think Microsoft will double down on Foundry, GitHub C
341 - Foundry Toolkit goes GA: Building agents with code
The Foundry Toolkit for Visual Studio Code - formerly the AI Toolkit - is Microsoft's answer to fragmented AI development workflows, bringing model selection, prompt iteration, agent building, evaluation, and production tracing into a single VS Code extension. In this episode, we walk through the full feature surface. Whether you're picking your first frontier model or shipping a hosted a
340 - From outsourcing to AI-first: the rebuild that 8x'd our delivery
In this episode, we unpack nine months of lessons from Pons.io's full rebuild around agentic AI - cutting engineering outsourcing entirely, replacing HubSpot and Salesforce with an internal CRM built in seven days, and shipping dramatically more product on roughly half the staffing cost. We dig into what worked, what bit them along the way, and the practical mechanics of steering an agent
339 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(06:14) - Show content starts.Show links- ALZ for SMB- GA: Smart Tier for Azure Blob and Data
338 - Microsoft Agent Framework 1.0 is GA – why does it matter?
In this week's episode, we take a look at Microsoft Agent Framework 1.0, which has been generally available since early April. What is it, and why and how can you use it? We reflect on previous SDKs for building agents, how they relate to Copilot Studio-based and Foundry agents, and how to get started with them. Also, we share experiences using this for a real-agent solution.(00:00) - Int
337 - Microsoft's certification refresh: what you need to know
In this episode, we reflect on Microsoft certifications and what value they provide. It's been a while since we last looked at these, and plenty has happened - what's new, what's retired, and what's useful in 2026? We also reflect on the usefulness of certifications for juniors and seniors.(00:00) - Intro and catching up.(03:10) - Show content starts.Show links- Certification Poster- New
336 - Governing the Ungoverned: Agent 365 and Entra Agent ID
In this episode, we look at Microsoft Agent 365 and Entra Agent ID. What are these new capabilities, and why should you care? We dissect them both, in contrast with agentic engineering, vibe coding, and the growing needs of governing agents.(00:00) - Intro and catching up.(03:52) - Show content starts.Show links- What is Entra Agent ID?- What is Agent 365?- Give us feedback!
335 - Reflections on Defender for Cloud and CSPM
In this episode, we take a deeper look at Defender for Cloud and Cloud Security Posture Management. We reflect on what this is all about, what you can do, and how you should approach the capabilities as part of CSPM.(00:00) - Intro and catching up.(02:42) - Show content starts.Show links- What is Defender CSPM- Give us feedback!
334 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(03:43) - Show content starts.Show links- Entra ID-based identities for Azure Blob Storage SF
333 - The Microsoft Cloud Security Benchmark v2
In this episode, we look at the newly released Microsoft Cloud Security Benchmark v2, which is now in preview. What is it, why should you care - and what changed since v1? We take it for a spin, discuss aspects of governance and regulatory compliance, and how to apply them in practice.(00:00) - Intro and catching up.(03:57) - Show content starts.Show links- MCSB v2- Give us feedback!
332 - Checking out Startup-Scale Landing Zones in Azure
In this episode, we take a focused look at Startup-Scale Landing Zones. We've previously discussed Enterprise-scale Landing Zones and how the default model from the Cloud Adoption Framework is the usual approach for new deployments. SSLZ is an opinionated approach that is better suited to smaller environments. We talk about the pros, cons, differences, and how to get started.(00:00) - Int
331 - Breaking into Microsoft security as a career
In this episode, we're not diving deep into a single feature of Azure - instead, we'll talk and share our insights on how to build a career working with Microsoft security. What should you know? What's relevant? What's less relevant? What are the core skills you should have? (00:00) - Intro and catching up.(04:51) - Show content starts.Show links- No links this week :)- Give us feedback!
330 - From vibe-coding to production: Shipping verifiable AI
In this episode, we take a look at the transition from "vibe-coding" to shipping verifiable, production-grade AI applications. This is the critical shift from relying on "gut feel" and prompt tinkering to implementing rigorous audit trails, versioning, and security controls. We discuss why many AI pilots fail due to a lack of explainability, the specific risks of privilege expansion and
329 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(03:30) - Show content starts.Show links- Preview: Virtual Network Routing Appliance- Claude
328 - A lap around Unified Tenant Configuration Management APIs
In this episode, we take a look at the Unified Tenant Configuration Management APIs, or UTCM. This is a set of capabilities that allow you to monitor and extract tenant configuration for automated and code-based monitoring and management. We discuss why you would use these, how they work, and also try them out by building tooling around the APIs. (00:00) - Intro and catching up.(03:13) -
327 - Windows Backup for Organizations
In this episode, we take a look at Windows Backup for Organizations. What's the capability, and why should you use it? What's required, and anything that's missing from it? We discuss backups in general, also, and provide insights on what you should back up. (00:00) - Intro and catching up.(03:30) - Show content starts.Show links- Windows Backup for Organizations- LEGO Arcade Machine (408
326 - Building a Well-Architected AI Workload
In this episode, we dissect the newly refreshed Well-Architected Framework guidance on building AI workloads. What is AI, actually? The guidance is organized into sections, and we walk through each one, sharing our insights and thoughts. (00:00) - Intro and catching up.(04:26) - Show content starts.Show links- Google Gemini- AI Workload guidance in Well-Architected Framework- Reference ar
325 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(04:45) - Show content starts.Show links- Update: Retirement date for default outbound
324 - Governing AI with the Security Dashboard for AI
In this episode, we take a look at the brand new Microsoft Security Dashboard for AI. We initially spotted this during Microsoft Ignite 2025, and have been eagerly waiting for it to become available. And here it is! We talk about the what, how, and why of this new capability.(00:00) - Intro and catching up.(02:40) - Show content starts.Show links- Microsoft Security Dashboard for AI- Fitn
323 - Thoughts on Azure networking topologies
In this episode, we take a look at Azure networking topologies from the ground up. What options do we have for building enterprise-scale architectures, and when should we choose one over another? We discuss our own experiences, and also the stuff we seemingly do not know enough about.(00:00) - Intro and catching up.(03:59) - Show content starts.Show links- Define an Azure network topology
322 - Getting started with Azure Trusted Signing
In this episode, we dive deeper into Azure Trusted Signing, and how it can help with signing your binaries. Why should you care? What are the tools today and in the future, and how to get this done right?(00:00) - Intro and catching up.(03:01) - Show content starts.Show links- Signtool - Introduction to code signing - Trusted Signing- Give us feedback!
321 - Three free tools to help you with Azure and Entra ID
In this episode, we take a look at three interesting - and free - tools to help you manage and secure Azure and Entra ID. We take each tool for a spin and reflect on the findings and usage.(00:00) - Intro and catching up.(03:15) - Show content starts.Show links‑ ScEntra‑ azqr - Azure Quick Review‑ EntraExporter- Give us feedback!
320 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?(00:00) - Intro and catching up.(04:25) - Show content starts.Show links- Agent 365 tooling servers - Mistral 3 available
319 - Hello there, new Microsoft Defender for Cloud!
In this episode, we unpack what's new with Microsoft Defender for Cloud. During Ignite 2025, Microsoft announced that the public preview of MDC would be available shortly, and it has arrived now. We'll take a look at what changed, what didn't, and why you should care.(00:00) - Intro and catching up.(03:52) - Show content starts.Show links- Defender for Cloud Preview- Give us feedback!
318 - A look at the new Zero Trust assessment tool from Microsoft
In this episode, we take a look at the new Microsoft Zero Trust Assessment tool. We reflect on Zero Trust in general, its application in the Microsoft security landscape, and what this exciting tool will offer you.(00:00) - Intro and catching up.(05:00) - Show content starts.Show links- Microsoft Zero Trust Assessment tool- Demo of Microsoft Zero Trust Assessment (Merill Fernando)- Give u
317 - Reflections from Microsoft Ignite 2025
Microsoft Ignite 2025 is here! We reflect on the hero announcements and what they mean for the future. Some exciting announcements were made during the first keynote, and we already had a chance to try a few of them out.(00:00) - Intro and catching up.(03:35) - Show content starts.Show links- ESPC’25 in Dublin- Microsoft Agent 365- Security Copilot announcement- Azure Copilot- Microsoft F
316 - Expectations on Microsoft Ignite 2025
Microsoft Ignite 2025 is just around the corner. As is tradition by now, we take a look at what to expect from Ignite: the announcements, expectations, and sessions.(00:00) - Intro and catching up.(04:55) - Show content starts.Show links- Microsoft Ignite 2025- Give us feedback!
315 - A look at GitHub Universe 2025
This week, we unpack the hero announcements from GitHub Universe 2025. Much of this is related to agents, agentic AI, and GitHub Copilot. We reflect on these new announcements as we proceed.(00:00) - Intro and catching up.(03:59) - Show content starts.Show links- Agent HQ- Custom agents examples- Copilot integrations - Agentic code review in Copilot- Plan mode- Agents.md- GitHub Code Qual
314 - Microsoft Digital Defense Report 2025
This week, we review the Microsoft Digital Defense report 2025. We did the same for 2024 and 2023, so this time we'll look at what's interesting in the report and what to focus on from a security perspective.(00:00) - Intro and catching up.(03:40) - Show content starts.Show links- Microsoft Digital Defense Report 2025- Ctrl+Alt+Azure: Episode 275: Microsoft Digital Defense Report 2024- Ct
313 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?(00:00) - Intro and catching up.(04:40) - Show content starts.Show links- Public preview: VM Customization in Azure: Disa
312 - Avoiding identity mistakes using IdentityProxy with Stephan van Rooij
Today, we talk about identity mistakes, with our guest, Stephan van Rooij. We learn about OWASP top 10, his project IdentityProxy and things to avoid when building custom solutions that revolve around identities.(00:00) - Intro and catching up.(02:50) - Show content starts.Show links- Blog: https://svrooij.io- LinkedIn: https://linkedin.com/in/stephanvanrooij - IdentityProxy: https://gith
311 - The three must-have alert types for your Azure tenant
Today, we go through the three recommended and must-have alerts you should configure in all of your Azure tenants. We touch upon FinOps, security, a bit of WAF and CAF, and find out if we're using these recommendations ourselves.(00:00) - Intro and catching up.(03:20) - Show content starts.Show links- Azure Quota Alerts (Preview): Still overlooked, but incredibly useful | Microsoft Commun
310 - Stepping away from the cloud to reflect on Microsoft PowerToys in 2025
In this week's episode, we take a tour of Microsoft PowerToys in 2025. What's in there? What's new? Do we actually use these tools, or are they just gimmicks?(00:00) - Intro and catching up.(06:44) - Show content starts.Show links- Microsoft PowerToysFeedback - Give us feedback!
309 - Goodbye, Project Online and SharePoint 2013 Workflows
In this week's episode, we talk about our experiences with SharePoint and Project. Now that Project Online is going away, as well as SharePoint 2013-style Workflows, we discuss the options for moving to more modern capabilities, and why these are still very valid tools. (00:00) - Intro and catching up.(03:58) - Show content starts.Show links- Project Online is retiring- SharePoint 2013 Wo
308 - Running AI workloads at home
In this week's episode, we share ideas, experiences and lessons learned running AI workloads at home. On a laptop, in a custom-built AI rig, and everything in between!(00:00) - Intro and catching up.(03:37) - Show content starts.Show links- HuggingFace- Ollama & Open WebUI- LMStudio- Azure AI Foundry LocalFeedback - Give us feedback!
307 - Microsoft Security Updates
This week, we dive deep into security-focused updates from Microsoft. As we've done with more generic tech updates, this time we'll focus on the interesting security updates from Microsoft.(00:00) - Intro and catching up.(04:29) - Show content starts.Show links- RETIREMENT: Migration from Azure China CDN to Azure Front Door- PREVIEW: Custom block response codes and body for Application Ga
306 - Azure Storage Discovery
Today, we take a look at Azure Storage Discovery. It's a new preview feature that gives you insights and actionable items across all your Storage Accounts. We discuss our experience using it and how to properly test its capabilities.(00:00) - Intro and catching up.(03:25) - Show content starts.Show links- Azure Storage Demo Populator tool (GitHub) - Azure Storage Discovery- PricingFeedbac
305 - Finally here – Group Source of Authority in the cloud
Today, we'll take a look at something that is of the essence for anyone working with identities and the shift to the cloud. What is Group SOA, and why should you care? We reflect on the dependencies of Active Directory, the five stages of transformation, and what this capability will help you achieve. (00:00) - Intro and catching up.(05:20) - Show content starts.Show links- Group SOAProvi
304 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?(00:00) - Intro and catching up.(04:15) - Show content starts.Show links- Create Tenant Level Service Health Alerts (prev
303 - A look at Microsoft Sentinel in 2025
Back in 2020 we did our first episode on Microsoft Sentinel. We feel it's time to revisit Sentinel after five years, and take a look at where it stands today. What's relevant, what's new, and what's happening with Sentinel?(00:00) - Intro and catching up.(04:29) - Show content starts.Show links- Microsoft Sentinel Quickstart- Sentinel Data Lake- Give us feedback!
302 - A brief overview of Model Context Protocol (MCP)
In this week's episode, we break down Model Context Protocol, or MCP. What is it, why should you care, and how does it change your solutions? We discuss the concept, the architecture, and share our experiences working with MCP solutions.(00:00) - Intro and catching up.(03:02) - Show content starts.Show links- MCP home: modelcontextprotocol.io- Use MCP: Connect to Remote MCP Servers- Build
301 - A look at agentic workflows with n8n
In this week's episode, we'll take a look at n8n—the agentic workflow engine/tool/product/service. How does it compare to Power Platform, Azure Functions, Azure AI Foundry, Copilot Studio, and other similar offerings from Microsoft? Self-hosting vs. cloud-hosted? We also share lessons learned and other insights. (00:00) - Intro and catching up.(03:44) - Show content starts.Show links- n8n
300 - Episode Three Hundred, and some Microsoft security updates
This is episode 300! Massive thank you and gratitude to everyone for tuning in over the years. We reflect a bit on the past 6 years of the show, and then we dive deep into security-focused updates from Microsoft. (00:00) - Intro and catching up.(03:02) - Show content starts.Show links- What's new in Microsoft Defender for Cloud features | Microsoft Learn- Containers support matrix in Defe
299 - Lessons learned self-hosting small Docker-based services and utilities
In this week's episode, it's time to share insights and lessons learned from self-hosting stuff at home! We'll talk about the why and the what, and also some stuff that didn't work at all. You'll also hear about how to best service workloads from home, and what sort of equipment is needed.(00:00) - Intro and catching up.(04:04) - Show content starts.Show links- Cloudflare Tunnel- Jussi's
298 - Understanding Azure Virtual Network Manager from an ALZ perspective with Jack Tracey
Today, we'll talk about AVNM, or Azure Virtual Network Manager, with insights from Microsoft's Jack Tracey. What is it, and why do you need it? We talk about mesh networks, routing, IP address management, AVNM with Azure Landing Zones, and more!(00:00) - Intro and catching up.(05:08) - Show content starts.Show links- What is AVNM?- Frequently asked questions about Azure Virtual Network Ma
297 - Thoughts on vibe coding, productivity and the future of software development
In this week's episode, we'll talk about vibe coding - the practice of writing code that prioritizes aesthetics, creativity, and personal expression. What's our experience on this? What tooling are we using? What does this mean for productivity?(00:00) - Intro and catching up.(04:14) - Show content starts.Show links- Mistral Small 3.2Feedback - Give us feedback!
296 - Common questions about Azure landing zones with Jack Tracey
Today, we'll talk about Azure Landing Zones, with insights from Microsoft's Jack Tracey. What are landing zones, to be more exact? We touch topics on application and platform landing zones, networking, architectures, infrastructure as code, and many others.(00:00) - Intro and catching up.(02:30) - Show content starts.Show links- Azure Landing Zones | Cloud Adoption Framework- Azure Landin
295 - What’s new in MCRA – Microsoft Cybersecurity Reference Architecture?
In this week's episode, we look at MCRA - the Microsoft Cybersecurity Reference Architecture. Updates were released in April 2025; we'll go through the updates and explain why MCRA matters.(00:00) - Intro and catching up.(05:29) - Show content starts.Show links- Updated MCRAFeedback - Give us feedback!
294 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?(00:00) - Intro and catching up.(05:20) - Show content starts.Show links- Design, troubleshoot, and secure networks using
293 - The Dawn of Agent IDs in Entra ID
The future of generative AI might very well be agentic workloads. Fresh from Build 2025, we take a look at Agent IDs in Entra ID. What are they, and why would even need to know how they work? What's the difference from Enterprise Applications? We consider compliance, reporting, licensing and other aspects on Agent IDs. (00:00) - Intro and catching up.(04:08) - Show content starts.Show lin
292 - What are Service Groups?
Today, we're taking an initial look at Azure Service Groups. We're already familiar with Resource Groups and have discussed Management Groups and governance in general in previous episodes over the years. Service Groups provide a new approach to governing and managing your resources operationally. We'll share our thoughts on governance, this new capability, and how it can be utilized.(00:
291 - Reflections from Microsoft Build 2025
* NOTE: It seems like Microsoft Teams recording messed up big time. This episode has an audio distortion issue around the 16-minute to 20-minute mark. Apologies! *This week, we'll have our initial reflections and thoughts from major Microsoft Build 2025 announcements. What caught our eye? It's AI all the way, but we find other aspects as well. Tobi shares some surprising news, and we also
290 - Basics of Azure AI Foundry
This week, we'll tackle the basics of Azure AI Foundry. First, we'll talk about what it is and who it aims for. We will also walk you through the options and capabilities, like reviewing models, fine-tuning, and managing your data and indexes. We'll also consider the different aspects of building your apps before wrapping up with considerations on possible apps you could build.(00:00) - I
289 - Expectations on Microsoft Build 2025
In this week's episode, we ponder what to expect from Microsoft Build 2025. Is it worth traveling to Seattle for the event, that takes place May 19-22? We reflect on the possible announcements, the breakout session topics, as well as the keynotes.(00:00) - Intro and catching up.(04:56) - Show content starts.Show links- Microsoft Build 2025- DEM554: Building Agents with Security Copilot- B
288 - Review your environments with checklists!
This week, we take a look at Azure Review Checklists. Relatively unbeknownst to us, this interesting capability allows you to really supercharge the reviews on your Azure environments!(00:00) - Intro and catching up.(03:03) - Show content starts.Show links- Azure Review Checklists- Azure Resource Inventory- Give us feedback!
287 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?(00:00) - Intro and catching up.(03:45) - Show content starts.Show links- What's new in Microsoft Sentinel- What's new in
286 - A look at GitHub Copilot in practice in 2025
This week, we're revisiting GitHub Copilot. We talked about it a few years ago, when it was fresh. Has anything changed? How are we using it? Prepare to be blown away by one specific capability now in preview.(00:00) - Intro and catching up.(03:38) - Show content starts.Show links- GitHub Copilot- Visual Studio Code Insiders- Agent mode in GitHub Copilot- Give us feedback!
285 - Considerations when services are being deprecated
This week, we'll talk about services that are being deprecated, and what to think of that. How to best prepare when you get an announcement that something is going away? What are the business perspective, and the perspectives on security?(00:00) - Intro and catching up.(03:57) - Show content starts.Show links- Entra Permissions Management retirement- Azure AD B2C retirement- Remote Deskto
284 - Understanding Network Security Perimeter in Azure
This week, we look at Network Security Perimeter, which is currently in public preview. It's a nifty capability for controlling inbound and outbound traffic for your PaaS resources.(00:00) - Intro and catching up.(05:01) - Show content starts.Show links- Creating a network security perimeter in the Azure Portal - Tobias' device: ZTE U50, 5G Portable WiFi Hotspot (Amazon.se)- Give us feedb
283 - Getting started with Azure Firewall
This week, we're considering when and how to use Azure Firewall in your deployments. What are the features, SKUs, and capabilities? When should you choose Azure Firewall, and when should you choose something else? Considerations on enterprise architectures also.(00:00) - Intro and catching up.(02:59) - Show content starts.Show links- Azure Firewall Basic - getting started- Cloud Adoption
282 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding the scope beyond just Azure to include Microsoft 365, Power Platform, and similar Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?(00:00) - Intro and catching up.(04:15) - Show content starts.Show links- What's new in Microsoft Defender for Cloud feat
281 - Securing Microsoft Entra
This week, we take a look at fresh guidance from Microsoft on increasing security for Microsoft Entra. It's an interesting guide - easily digestible, solid advice, and very actionable recommendations. Also, Tobi asks Jussi an unexpected question.(00:00) - Intro and catching up.(02:50) - Show content starts.Show links- Securing Microsoft Entra-guidance- Give us feedback!
280 - A lap around Azure AI Foundry Agents (preview)
This week, we look at building agents using Azure AI Foundry. What's an agent, and why should you care? What's the process for building an agent? And where does Copilot Studio stand in here? Also, Jussi asks Tobi an unexpected question.(00:00) - Intro and catching up.(04:05) - Show content starts.Show links- Azure AI Foundry: Agents (preview)- Introducing Azure AI Agent service- Ctrl+Alt+
