PPPaul Popainpaulpopablog.hashnode.dev·Apr 20 · 7 min readNobody Told You What Azure Tags Can Actually Do...If you’re like 99% of teams, you are using Azure tags completely wrong. You probably think they are just sticky notes for FinOps. A way to figure out which department to blame when the monthly cloud b00
PPPaul Popainpaulpopablog.hashnode.dev·Apr 12 · 8 min readDeploy a Basic SKU VPN Gateway to existing Azure infrastructure using TerraformWhy Terraform? While Microsoft recently (and quietly) brought the Basic SKU back to the Azure Portal dropdown, the GUI remains incredibly unreliable. The option was missing for over a year due to back00
PPPaul Popainpaulpopablog.hashnode.dev·Mar 13 · 10 min readLeast-Privilege User Management in Microsoft Entra ID Using Administrative UnitsIf you've ever had to manually enable or disable a batch of user accounts in Microsoft Entra ID, for example, a group of exam accounts at the start or end of term, you'll know how quickly it becomes t00
PPPaul Popainppcazureprojects.hashnode.dev·Mar 7 · 4 min readAVD Migration from VDIImplementing a secure Azure Virtual Desktop environment with a unique cross-region constraint. This project demonstrates Site-to-Site VPN connectivity, VNet Peering for subscription limit workarounds,00
PPPaul Popainppcazureprojects.hashnode.dev·Mar 7 · 6 min readSecure Exam Endpoint Architecture Using Microsoft Intune & Azure FilesDesigned a high-security exam environment serving 200+ students on 48 shared devices. This project leverages Microsoft Intune and Azure Storage to deliver strict device hardening, centralized data iso00
