// Manage your repositories at scale across the enterprise

What exactly is an Azure Landing Zone, and why does every cloud architect keep talking about it? In this episode, Chris Reddington is joined by Karim Fahmy — an Azure Solutions Architect with over 12 years of IT experience — to demystify Azure Landing Zones and their place within the Cloud Adoption Framework. Learn how landing zones provide the structured foundation covering networking topology, identity, governance, subscriptions, and security that your workloads need to succeed in the cloud. The episode also covers Azure Blueprints, Terraform automation, and real-world strategies for incrementally building and evolving your cloud foundation over time.

Introduces GitHub's Private Mirrors App, a self-hosted or GitHub-managed tool that helps organizations contribute to open source projects while managing compliance, legal, and security risk. The app creates private mirrors mapped to public forks, enabling teams to run CI/CD checks and policy enforcement before syncing changes back to the public fork for upstream contribution. The video demonstrates forking an upstream project, configuring multiple team mirrors, and integrating with an Enterprise Managed Users organization.

Chris Nesbitt-Smith traces how governance policies are typically born — emotionally, reactively, and as one-shot documents — then shows how applying software engineering principles transforms policy into a living, versioned artefact. The talk covers iterative policy management, Kubernetes admission control, open-source policy tooling, and the cultural shift required to make policy genuinely effective rather than just technically compliant.