// Azure

For some time, I've been using GitHub actions to update the content of my site (i.e. pages, descriptions, metadata, etc.). Through Hugo, these content updates automatically update the RSS feeds. This then makes the episodes appear in podcast services such as Apple Podcasts, Google Podcasts and Spotify. However, throughout that time I have been manually uploading the podcast files to my storage account. It wasn't a significant overhead, but I kept thinking that there must be a better way to do this. And, there is - I've implemented it! This blog post will walk you through why I've made these changes, how I made them and what the result is.

Three months and 350+ subscribers in, with content shipping every day of the past week: a GitHub Codespaces Cloud Drop, the final GPG commit-signing instalment covering YubiKey hardware key storage, a Welsh Azure User Group lightning talk on GitHub Actions, and a Terraform Cloud deep-dive on Azure state management. Azure news centres on Microsoft's commitment to bring Availability Zones to every region by end of 2021, new forecasted cost alerts for Azure Budgets, and the Start Small & Expand landing zone guidance from Sarah Lean and Thomas Maurer. GitHub updates include Dependabot gaining private registry support, CodeQL scanning for Solarigate traces, and a detailed post-mortem on the recent GitHub.com security incident.

You may have heard of Terraform, but are you aware of Terraform Cloud or Terraform Enterprise? In this session, Chris walks through how he uses Terraform Cloud to deploy infrastructure onto Azure — covering HCL, the Azure RM provider, remote state management, Terraform modules, and a VCS-driven CI/CD pipeline via GitHub integration. Learn how Terraform Cloud's managed state compares to a self-hosted Azure Storage Account backend, and how terraform plan and terraform apply fit into an automated deployment workflow.

Vlog #11 debuts a refreshed brand and on-screen layout, then covers a busy week: the third instalment of Chris's GPG commit-signing series (linking keys to Git and GitHub), the Cache Aside cloud design pattern episode, and a preview of the upcoming YubiKey-focused Part 4. Azure news centres on the preview of Trusted Launch VMs (defending against bootkits and rootkits), Azure Defender for Storage's new malware-upload detection, and Naraya — the ML system Microsoft uses to predict and proactively mitigate infrastructure failures at scale. On the security operations side, GitHub and Azure DevOps announce automated token revocation for leaked PATs found on public GitHub repositories.

The cache-aside pattern loads data on demand from a data store into a cache, placing the synchronisation logic in the application layer when the cache does not natively support read-through or write-through operations. This episode covers cache-miss handling, expiration and eviction policies for Azure Cache for Redis, consistency challenges across distributed instances, and when to pre-warm the cache at startup instead.

The Azure CLI provides cross-platform command-line management of Azure resources from Windows, macOS, Linux, Docker containers, and Azure Cloud Shell. This Cloud Drop demonstrates az login, az account set, az group list, az upgrade, and the az config set auto-upgrade.enable=yes command for keeping your CLI automatically up to date.

Vlog #10 is a milestone episode: Chris celebrates his birthday and a full year of Cloud With Chris with a new Shure SM7B microphone upgrade. The bulk of the episode is a walkthrough of Microsoft Ignite announcements, covering Azure Arc-enabled Machine Learning for on-premises data sovereignty scenarios, the Azure Communication Services and Microsoft Teams interoperability story, and significant security updates including Azure Key Vault Managed HSM (preview) and Trusted Launch for VMs. GitHub Actions fans also get a bonus segment on four lesser-known platform capabilities, including semantic release note generation and bring-your-own-environment workflows.

Ever thought about what it takes to host a multiplayer game in the cloud? In the second episode of Cloud Gaming Notes, Chris and Lee Williams go hands-on with Halo 5 Guardians to explore the engineering behind matchmaking services. They cover the Actor model and Azure Service Fabric, skill-based matchmaking algorithms, the critical role of latency in competitive gaming, and how live ops and DevOps principles keep a game-as-a-service continuously updated without downtime. Real-world cloud architecture through the lens of AAA gaming.

Week nine of the vlog coincides with the one-year anniversary of the Cloud With Chris podcast. Chris kicks off a multi-part blog series on GPG key signing for Git commits, demonstrating how trivially easy it is to spoof a contributor's identity in Git without verification — and how GitHub's GPG validation feature closes that gap. Azure news this week is lighter than usual, covering serverless and low-code scenarios with PowerApps, the new Private Azure Marketplace, and the Azure Quota REST API, plus a significant list of retirement notices from the Azure Updates page all targeting 29 February 2024.

What exactly is an Azure Landing Zone, and why does every cloud architect keep talking about it? In this episode, Chris Reddington is joined by Karim Fahmy — an Azure Solutions Architect with over 12 years of IT experience — to demystify Azure Landing Zones and their place within the Cloud Adoption Framework. Learn how landing zones provide the structured foundation covering networking topology, identity, governance, subscriptions, and security that your workloads need to succeed in the cloud. The episode also covers Azure Blueprints, Terraform automation, and real-world strategies for incrementally building and evolving your cloud foundation over time.