▶ 24:12
AzurePrivate Networking·
Private Endpoints vs Service Endpoints: the decision nobody explains
Why private DNS zones are the real decision, and how to centralise them in a hub.
Topics
$ ls ./topics
Azure · AWS · GCP
Hub-spoke, private endpoints and DNS that actually resolves — the networking decisions that quietly make or break enterprise platforms.
Why private DNS zones are the real decision, and how to centralise them in a hub.
Centralised egress, inspection VPCs and route-table design at enterprise scale.
Azure · AWS · GCP
Workload identity, federation and least privilege at scale. Removing secrets without breaking every pipeline.
OIDC from GitHub Actions to AWS, scoped roles, and the trust-policy mistakes to avoid.
Azure · AWS · GCP
Org structure, guardrails and subscription vending — the foundation every other decision sits on.
Folder hierarchy, org policies and project vending for a multi-team organisation.
Azure · AWS · GCP
Module design, state boundaries and multi-team pipelines that survive contact with fifty engineers.
Splitting state by blast radius and ownership, with a working multi-stack repo.
Azure · AWS · GCP
Promotion strategies, policy gates and secure delivery from commit to production.
Build once, promote everywhere — with OPA checks that block risky changes.
Azure · AWS · GCP
FinOps decisions baked into architecture, not bolted on after the invoice arrives.
Committed use, egress traps and the design choices that drive the bill.
Azure · AWS · GCP
Where agents genuinely help infrastructure operations — and where they become a liability.
A guarded agent for drift triage — read-only by default, with human approval.