Azure Spring Clean 2023: Configure Microsoft Defender For Cloud Continuous Export for an Azure Virtual Desktop Subscription with Terraform

Azure Spring Clean 2023: Configure Microsoft Defender For Cloud Continuous Export for an Azure Virtual Desktop Subscription with Terraform

Hi there, Welcome to my contribution for this year’s Azure Spring Clean 2023. It’s a community event taking place from march 13 until march 17th. For more info check the website here. Security is a very important part of your journey to and in Azure. If anything happens in your environment you need to be…

Enable Azure Disk Encryption on an AVD session host using a Nerdio scripted action

Enable Azure Disk Encryption on an AVD session host using a Nerdio scripted action

Hi there, Welcome to another Azure Virtual Desktop blog post where I combine AVD with the power of Nerdio. Security is a big subject these days and you want to make sure that you have enough security on each layer. You can have security on your Azure network but you also need to secure your…

Deploy the Azure Virtual Network Manager (Preview) with Terraform

Deploy the Azure Virtual Network Manager (Preview) with Terraform

Azure Virtual Network Manager is a feature that is currently in public preview. It enables you to view your entire network design in a single pane of glass. You can manage and create network topologies across al your subscriptions using this feature. If you want to learn more about this feature go here In this…

Festive Tech Calendar 2022: Deploy a new ADDS forest in Azure without a Remote Desktop Connection

Festive Tech Calendar 2022: Deploy a new ADDS forest in Azure without a Remote Desktop Connection

Hello and welcome to my contribution for the Festive Tech Calendar. This community event is organised by the community for the community. This year they are raising money for Missing People. Check out the website to see all the participants from this year’s edition. Identity and security are 2 of the most important things in…

Deploy Private Endpoints for Azure Virtual Desktop with Terraform

Deploy Private Endpoints for Azure Virtual Desktop with Terraform

Hello and welcome to another Azure Virtual Desktop with Terraform blog post. In this blog I’ll show you how you can automate the deployment of private endpoints for AVD. Networking and security are 2 very important components in Azure. By default, the Azure Virtual Desktop is available through the internet. With the option to use…

Harden Nerdio Manager for Enterprise Part 1 – App Service

Harden Nerdio Manager for Enterprise Part 1 – App Service

By default the Nerdio Manager for Enterprise is publicly available. I had the question to disable public access and to adhance the security of the entire Nerdio infrastructure. In this blog series I’ll walk you through the steps to do this. There are several components that we need to harden: App service SQL Keyvault Automation…

Deploy an Azure virtual machine with Azure Disk Encryption using Terraform

Deploy an Azure virtual machine with Azure Disk Encryption using Terraform

Security is this modern world is very important. You need to make sure that your Azure environment is as secure as possible. Off course it’s not only the Azure environment you need to secure. If you have virtual machines running, you also need to secure them. One of the options you have to secure your…

Deploy Azure Firewall and rules for AVD with Terraform

Deploy Azure Firewall and rules for AVD with Terraform

Hello and welcome to another blogpost about AVD in combination with Terraform. In this blogpost I’m gonna deploy an Azure Firewall with Terraform and apply the networking rules for AVD. First of all we need a vnet for the AVD session hosts. I prefer to create a vnet for AVD and create multiple subnets per…

Deploy an Azure Bastion into an existing Hub-Spoke network with Terraform

Deploy an Azure Bastion into an existing Hub-Spoke network with Terraform

Because security is very important, Microsoft developed a PaaS Service “Azure Bastion” to connect secure to your virtual machines over port 22 and port 3389. With this solution your virtual machines don’t need a public ip address anymore. In this blogpost I’ll show you how to deploy an Azure Bastion into an already existing Hub-Spoke…