// Azure in a Nutshell | DEVREAL.io

Weekly Vlog #19 is broadcast live, opening with Azure's Fluent Design icon rebrand and covering key security and platform updates including the AKS Secret Store CSI driver add-on, Azure Security Center improvements for hybrid and multi-cloud Kubernetes, and new Azure VPN Gateway multi-authentication capabilities. GitHub Enterprise Server 3.1 launches with GitHub Actions, Packages, and Advanced Security, while the release radar spotlights Pulumi as an emerging cross-cloud infrastructure-as-code framework. Chris also recaps Cloud Gaming Notes episode four featuring Sudoku Social's Azure PlayFab backend and a new Cloud Drop on PowerShell in Azure Functions with Carol de Winter.

Once you have a working GitHub Actions workflow, the next challenge is safely deploying across dev, staging, and production with the right secrets in the right places. This episode deep-dives into GitHub Actions Environments: how to scope secrets per environment to enforce the principle of least privilege, configure required reviewers and wait timers as production gates, and assign service principals with minimal Azure RBAC permissions. A live demo deploys the cloudwithchris.com Hugo site to Azure Storage, making every concept concrete.

Azure Functions supports PowerShell Core as a runtime stack, enabling PowerShell scripters to build serverless event-driven workflows without compiled code. This Cloud Drop demonstrates creating an HTTP trigger and an Event Grid trigger function, configuring requirements.psd1 to load the Az PowerShell module, and using a system-assigned managed identity with the Contributor RBAC role to dynamically tag Azure resource groups on creation.