Author: rodrigtech

  • Kubernetes in Action RBAC

    Kubernetes offers a plethora of plugins that are used throughout your orchestration needs however natively speaking on security we have to consider RBAC and roles that are needed or used to access the resources in our cluster. For today’s demo I’m going to go through some CLI of creating a role, deciphering the YAML, and…

  • Kubernetes Certificate Signing Requests

    Today I’m going to cover concepts aligned with CKA in terms of security. Certificate Signing Requests have to be approved by the kubernetes administrator to be allowed For this tutorial I’m going to be running AKS in Azure you can run K8s in you’re preferred platform such as GCP, AWS or DigitalOcean. I’m running this…

  • Azure DevOps Pipeline DevSecOps with Terraform and Tfsec

    Azure DevOps is the platform that operates on Microsoft Cloud providing CI/CD capabilities to developers in one area, for this post I’m going to show how to run a release pipeline with TFSec to run IaC Scanning on potential misconfigurations that can arise when writing IaC. If you want to follow along a few pre-requisites…

  • K8s and using AKS

    When deciding on breaking down monolithic applications for a micro-services approach, take good inventory of your technical depth of your team. Kubernetes will unlock an entire universe of possibilities with many plugins, repos, and products to choose from you might be asking yourself where do I begin. When deciding AKS/EKS/GKE determine on how much do…

  • Defender for Cloud (Cloud Security in Azure)

    Defender for Cloud was a rebranding of Azure Security Center and is the premier offering from Microsoft Azure as a control plane for security and visibility in Azure. While this is a small view of the dashboard you can see the experience has changed in Azure, AWS and GCP as of recently you can now…

  • Microsoft Entra (CIEM/Verified ID)

    Microsoft has made some bold acquisitions and recently launched Microsoft Entra with a few new offerings in Azure. Notably, the acquisition of CloudKnox has been integrated with Permissions Management if you recall permissions in IAM can really make or break access that can be overlooked by those who don’t understand permissions. But what happens when…

  • Azure Data Factory Moving Data into CosmosDB

    Azure Data Factory is Microsoft’s Service for transferring data but also building (Extract, Load, Transform) of Data or what is also known as Extract, Transform, Load. However, this is one way of getting data into your CosmosDB DB and respective containers for this post, I’ll deploy two items Azure Cosmos DB Account (SQL Core API)…

  • Azure CosmosDB DP-420 Prep

    What is Azure CosmosDB? It’s a NoSQL Database offering that offers scale massively across practically unlimited partitions. How does this intersect in the data domain? Likely after you’ve complete DP-900 you’d want to scratch the surface of understanding more how data interacts in the cloud and perhaps use cases that your organization is evaluating. CosmosDB…

  • GCP A first-look

    Google Cloud has come a far Google operates on a model that is a little different from Microsoft Azure instead of what we know of as “tenant” or “subscription” is called “Projects” in GCP. These Projects think of as your tenant traditionally in Azure (Isolated) to the resources that fall under the project. As you…

  • Withings Application

    Scope It’s been a while since I’ve wrote my last post and figured I’d document my experience building an application to communicate with the Withings API. My idea is a simple concept, authorize into the Withings API and take the data populated from various metrics in JSON format and sent a POST request into FitnessPal…