Cloud engineer in Switzerland. Notes on Azure governance, security, Terraform and running AI on Azure.
The Azure DevOps issuer for workload identity federation retires on July 1, 2027. What changes, how to find affected service connections, and what to watch for when Terraform manages them.
Part 2 of the governed AI platform: a custom RAI content filter with harm thresholds, plus an MCP gateway that tiers tool access.
How I built an internal AI platform on Microsoft Foundry with governance first: data residency, secret-less identity, and central audit.
How I use Daniel Miessler's Personal AI Infrastructure to add memory, skills and lifecycle hooks to Claude Code, and what has worked so far.
Patterns for reusable Terraform modules on Azure: secure defaults, input validation, conditional resources and testing with Terratest.
Azure budget alerts at 50/80/100/120%, cost allocation tags enforced by policy, anomaly alerts, and a Terraform budget module for landing zones.