https://eljirari.me/tags/azure/Recent content in azure on Youssef El JirariHugo -- gohugo.ioenhttps://eljirari.me/posts/ipam-at-scale/Mon, 01 Jan 0001 00:00:00 +0000https://eljirari.me/posts/ipam-at-scale/IP address management looks unnecessary when the environment is small. You have a few VNets, somebody keeps a spreadsheet with the CIDRs, and before creating a new network you check that the range is not already used. It works. Then the cloud estate grows. You have tens or hundreds of subscriptions, multiple regions, separate production and non-production environments, connectivity hubs, private endpoints, on-premises networks and different teams deploying infrastructure independently. At that point, the problem is no longer which CIDR should I use?https://eljirari.me/posts/azure-landing-zones/Mon, 01 Jan 0001 00:00:00 +0000https://eljirari.me/posts/azure-landing-zones/An Azure landing zone is sometimes presented as a collection of subscriptions, policies and management groups that you deploy before application teams arrive. That is technically true, but it undersells the problem. The real objective is to make it possible for many teams to use Azure independently without every team having to redesign identity, networking, security, governance and operations from zero. Why a landing zone appears With one subscription and one team, governance can be informal.