Governance

Santa´s Magic Cost Management Automation

Santa´s Magic Cost Management Automation

My contribution for Festive Tech Calendar 2023

Erlend Rushfeldt
This blogpost is posted in correlation with the Festive Tech Calendar. Festive Tech Calendar is a community event that goes on through the whole of December. The event is raising donations for the Raspberry PI Foundation. The Raspberry PI Foundation is a charity that help children learn to code. Please checkout the Just Giving page and the Festive Tech Calendar. Santa’s workshop has changed immensely the last 10 years. With kids wanting iPhones, PlayStations or the newest Fortnite battle pass.
Cost Optmization in the Wild

Cost Optmization in the Wild

A collection of code used in presentation of Cloud Optimization in the wild

Erlend Rushfeldt
Here is a collection of snippets of code used in the “Cost Optimization in the wild! - Experiences from reducing costs” presentation. If you are missing any snippets of code used in a demo, or if you have any other question, feel free to message me on Twitter or LinkedIn. Orphaned disks Old Snapshots App Gateways and Load Balancers Storage v1 App Service Plans Orphaned disks KQL to find disks resources | where type == "microsoft.
Query Azure Policy Compliance results using KQL

Query Azure Policy Compliance results using KQL

How do you get more information about your Azure policy compliance?

Erlend Rushfeldt
Last blogpost I showed you an Azure Policy that checked for a SQL server firewall rule. The results would be a compliance view in Azure Policy. After the blogpost, me and Dennes Torres had a chat about the results you get in the compliance view. The problem: you don’t get the resource ID or resource name for the SQL server with the setting on. This isn’t really a problem if you have only one not-compliant resource, but if you have several, it becomes tedious.
The SQL Server AllowAllAzureIps setting

The SQL Server AllowAllAzureIps setting

The story about a deep dive into Azure SQL firewall rules and the setting AllowAllAzureIps

Erlend Rushfeldt
This is going to be a longer one. You have been warned! This adventure started last week when I attended the Azure User Group Norway with a session on Azure SQL networking secrets by Dennes Torres. Dennes showed a setting in the firewall rules on Azure SQL server that said, “Allow Azure services and resources to access this server”. Now you might think “Yeah, I need that for my App Service to access the database”, but in reality, this setting will allow ALL Azure IPs to access the SQL server!
Introduction to Automanage

Introduction to Automanage

Get a intro to Azure Automanage and set-up best practice configuration for you new and existing VMs.

Erlend Rushfeldt
What if you could make configuring the supporting services of your VMs so much easier? And without needing to assign and manage several policies. This is where Azure Automanage comes flying in like the savior you always needed! What is Automanage? Automanage is as simple as a configuration profile that you apply to your VMs that will automatically configure the services that are best practice for VMs in Azure. For example, Azure Log Analytics and Azure Backup.