Topic

access control

A collection of 7 issues

How to list Azure RBAC Roles to Secure AKS Clusters

When working on a managed Kubernetes cluster, such as on cloud platforms, securing access to it becomes a very critical aspect. You would not want your cluster to be accessed by anyone having access to the cloud platform. To secure this access to your cluster, we have the concept of

Setting Approvals Through Azure Pipelines Environment

In this post, we’ll be discussing the steps to configure manual approvals for your Yaml based pipeline through Azure Pipeline Environments. Before your proceed further, I would strongly suggest you to go through my old blog post explaining deployment through Yaml based Pipelines [https://akhilsharma.work/yaml-deploy-using-azure-pipelines-pipelineasacode/] where we

GKE Sandbox: Harden workload isolation

Do you run or test untrusted or unknown code often on GKE? Or have any requirement of deploying the code on GKE from any opensource space where you have a lot of unknown contributors? Ever faced downtime or crashing of your GKE nodes after deploying any odd application on your

The Innocent Killer on Azure

Ever thought that a small feature can hand access of your sql server databases to anyone with an Azure account? Yes, you read it right, “anyone with an Azure account”. With this feature enabled, anyone on Azure network can access your SQL databases in Azure SQL Server from any of

Add/Update IP Restrictions on Azure WebApp Dynamically with PowerShell

Well, it’s exactly a month since my last post on estimation of parallel jobs on AzureDevOps. I was away all this while due to a shoulder injury. I got both my shoulders dislocated and was hospitalized due to that for quite some while. I finally got to working full

Microsoft Azure Bastion - Secure access to Azure VMs

Microsoft recently announced Azure Bastion as a new managed PaaS service that provides seamless RDP and SSH connectivity to your virtual machines over the Secure Sockets Layer (SSL). Azure Bastion is provisioned directly in your Virtual Network (VNet) and supports all VMs in your Virtual Network (VNet) using SSL without

Azure Resource Locks

Ever been in situation when someone removed your resource accidentally? And what if that resource contained some very important confidential data? And what if that data had no backup copy and is now lost with that resource? I guess the above situation would have given you cold sweat. You must