Latest Blogs
Branch Manager: A Web UI for Cleaning Up Stale Azure DevOps Branches
I built a self-hosted web tool to filter, review, and bulk-delete stale branches across all repositories in an Azure DevOps project, because the portal was never designed for this.
From Hugo to Nuxt: Why I Switched to Vibe Code My Blog
How switching from Hugo to Nuxt opened the door to vibe coding with GenAI and why a mature framework makes all the difference when you want to build, explore, and experiment fast.
PIM + Conditional Role Assignments: Secure Autonomy for Azure Landing Zones
Combine PIM eligible roles with conditional role assignments to give teams just-in-time Owner access while preventing privilege escalation.
Azure Conditional Role Assignments with Bicep!
Implement secure workload autonomy using Azure conditional role assignments with Bicep and Azure Verified Modules.
Centralizing Password Policy Management in Multi-Tenant Entra ID Environments
Automate banned password list management across multiple Entra ID tenants using Microsoft Graph API, PowerShell and Azure DevOps.
Azure Privileged Identity Management as code
Configure PIM Eligible Role Assignments on Azure subscriptions using the ARM API in PowerShell, including role policies, approvers, and eligible role creation.