This repository provides a playground to safely experiment with and learn Azure API Management (APIM) policies in various architectures.

API Management - Hands-on Lab Workshop

An ASP.NET Core app for bootstrapping your next Web Apps for Containers service using Key Vault and Managed Identities

Lightweight, self-hosted Entra ID governance portal: track app/identity ownership, surface credential and access risk, and score tenant health — running in your own Azure subscription.

☁️🕵️‍♂️ Azure Managed Identity tool

A sample .NET Core App to show how to securely connect to an Azure SQL Database using managed identity.

This repo contains the demo's for my talk "Configuration in Azure. Done right."

Kubernetes Helm Chart for HashiCorp Vault with Auto-Unseal This Helm chart helps deploy HashiCorp Vault on Kubernetes with auto-unseal enabled using cloud KMS (Azure, AWS, GCP). The repository includes a step-by-step guide for seamless setup, troubleshooting, and secure configurations for production environments.

10 hands-on Microsoft Identity and Access Administrator SC-300 labs covering Microsoft Entra users, groups, devices, external and hybrid identity, MFA, SSPR, Conditional Access, ID Protection, Global Secure Access, workload identities, enterprise apps, app registrations, governance, PIM, logs, KQL, and exam readiness.

10 hands-on AZ-500 Azure Security labs covering identity, RBAC, PIM, MFA, Conditional Access, app registrations, managed identities, networking, Private Link, Firewall, WAF, compute, storage, SQL, Key Vault, Defender for Cloud, Sentinel, compliance, and readiness.

ARM template deployment test

10 hands-on AZ-204 Azure Developer labs covering containers, ACR, App Service, Functions, Blob Storage, Cosmos DB, identity, MSAL, Graph, Key Vault, managed identities, Application Insights, API Management, events, messaging, Redis, CDN, and developer readiness.

This application demonstrates how applications hosted on Azure VMs can use managed identity to authenticate with HashiCorp Vault using the Azure Auth Method.

This article shows a way to use Azure Keyvault integration with Azure LogicApps in order to manage sensitive information but by using Managed Identity (formerly Azure MSI) and not the LogicApps KeyVault Connector.

Starter template for Azure fullstack apps with Bicep and Azure Developer CLI

A workload running in a spoke VNet that authenticates to Azure Key Vault in a different VNet using a managed identity

Some useful code snippets for doing common stuff with Microsoft Graph API.