Ctrl+Alt+Azure

Tobias Zimmergren, Jussi Roine

Weekly conversations for cloud architects, developers, CIOs, and CISOs navigating Microsoft Azure, cloud adoption strategy, security governance, identity, and agentic AI. Hosted by industry experts Tobias Zimmergren and Jussi Roine.

Play

Open in

34 episodes
weekly
Avg 37 min
English

Episodes 34

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

#368
Yesterday · 36 min
368 - Azure Container Apps Sandboxes: a microVM for every agent task
This week we'll focus on Azure Container Apps Sandboxes - what they are, how they work, and why should you care. We also compare ACA Sandboxes to the numerous different capabilities in Azure that allow you to run containers - as well as just spinning up a VM to do your agentic tasks locally, or in the cloud. (00:00) - Intro and catching up. (03:45) - Show content starts. Show links - Azure Container Apps Sandboxes overview (Microsoft Learn) - concepts, compute comparison, tiers, sandboxes vs dynamic sessions - Snapshots and lifecycle for Sandboxes (Microsoft Learn) - suspend modes, auto-suspend/auto-delete, snapshot caveats - Egress policies and network controls for Sandboxes (Microsoft Learn) - rule model, credential injection, inspection modes - Azure Container Apps Sandboxes, Now Generally Available (Apps on Azure blog) - Introducing Azure Container Apps Sandboxes (preview announcement, June 2026) - Azure Container Apps pricing - Official samples repo - Give us feedback!
#367
November 4 · 47 min
367 - Keeping work and private separate: devices, apps, and accounts
In this episode we talk about where the line should be between work and private devices. What your employer can and can't see, how work profiles, tenant restrictions, PAWs and Conditional Access let you draw those lines properly. (00:00) - Intro and catching up. (04:20) - Show content starts. Show links - What information can my organization see when I enroll my device? (Intune) - Apple User Enrollment methods in Intune (separate volume, privacy limits) - Data protection for Windows MAM (app protection on personal Windows devices) - Set up tenant restrictions v2 (blocking personal accounts and other tenants) - Privileged access devices (enterprise, specialized and privileged levels) - Configure and secure privileged workstations (Zero Trust adoption guidance) - Conditional Access architecture and personas - Conditional Access framework and policies (naming convention)
#366
October 28 · 42 min
366 - Expectations on Microsoft Ignite 2026
Microsoft Ignite 2026 is just around the corner. As is tradition by now, we take a look at what to expect from Ignite: the announcements, expectations, and sessions. Join us for a fun discussion on all things Ignite! (00:00) - Intro and catching up. (06:02 - Show content starts. Show links - Microsoft Ignite 2026 session catalog - Give us feedback!
#365
October 21 · 50 min
365 - Microsoft Digital Defense Report 2026
Microsoft recently released the 2026 edition of the Digital Defense Report. It's a massive report, 103 pages in total. We dive deep into the report, and unpack the content and share our thinking and thoughts around it. (00:00) - Intro and catching up. (04:00) - Show content starts. Show links - Microsoft Digital Defense Report 2026 (landing page) - Full report (PDF, 103 pages) - Executive summary - Conditional Access: authentication flows (blocking device code flow) - Our previous MDDR episodes: 314 (2025), 275 (2024), 210 (2023) - Give us feedback!
#364
October 14 · 38 min
364 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (05:09) - Show content starts. Show links - Public Preview: Foundry Routines in Foundry Agent Service - Public Preview: Network egress controls for hosted agents in Microsoft Foundry - Generally Available: Publishing Microsoft Foundry agents to Microsoft 365 Copilot and Teams - Generally Available: Enable and disable controls for Microsoft Foundry agents in Agent 365 - Generally Available: User-bound user delegation SAS for Azure Storage - Public Preview: Microsoft SQL Agent Skills - Generally Available: SQL Migration Agent Skills for assessment, migration, and validation - Public Preview: PostgreSQL skills and MCP plugin for Azure Database for PostgreSQL - Azure Updates: Retirement of Microsoft Dev Box - Generally Available: User-bound user delegation SAS for Azure Storage - Generally Available: Exceptions in WAF for Azure Application Gateway and Azure Front - Door - Public Preview: Azure Front Door profile and route level WAF policies - Generally Available: Microsoft Defender for Cloud support for Azure Container Apps - Generally Available: Confidential VMs for Azure Linux - Generally Available: Azure Database for PostgreSQL Flexible Server supports cross-tenant customer-managed keys - Retirement: Always Encrypted with Intel SGX Enclaves - Public Preview: PostgreSQL skills and MCP plugin for Azure Database for PostgreSQL - Microsoft 365: Upcoming Changes and End-of-Support Milestones - Windows 11 and Windows Server 2022 lifecycle reminders - Azure retirement updates - Microsoft Digital Defense Report 2026 - ACS retirement - Agent 365 updates for September - Telephony providers for Entra SMS and Voice - Give us feedback!
#363
October 7 · 38 min
363 - Reflections on sovereign clouds in 2026
Let's talk about sovereign cloud, and what it means, and what is relevant. We talk about our experience with sovereign solutions, what the risks are, and the varying aspects of sovereign solutions from Microsoft today in the market. (00:00) - Intro and catching up. (03:42) - Show content starts. Show links - One year on: Progress on our European digital commitments (Microsoft On the Issues) - Microsoft Sovereign Cloud adds governance, productivity and support for large AI models securely running even when completely disconnected (Official Microsoft Blog) - Microsoft offers in-country data processing to 15 countries for Microsoft 365 Copilot (with April 2026 update) - Microsoft sovereign cloud announcements (Azure Blog) - Microsoft’s Sovereign Cloud in 2026: How far does it go in addressing sovereignty risks? (KuppingerCole) - Microsoft admits it ‘cannot guarantee’ data sovereignty (The Register) - Not sovereign: Microsoft cannot guarantee the security of EU data (heise online) - AWS launches AWS European Sovereign Cloud (Amazon press release) - AWS European Sovereign Cloud: why a separate German region still can’t close the CLOUD Act gap (bex.co) - Sensitive data and Cloud Act: Microsoft France admits it cannot oppose an American injunction (ActuIA) - Give us feedback!
#362
September 30 · 46 min
362 - Sentinel isn’t just a SIEM anymore
We've talked about Microsoft Sentinel a few years ago, and realized it's time to brush up our understanding of the new and interesting capabilities it has to offer. In this episode, we talked about where Sentinel is today, the retirement of the Azure Portal side, new AI-related capabilities, as well as the recently announced ISOC. (00:00) - Intro and catching up. (04:34) - Show content starts. Show links - What is Microsoft Sentinel data lake? (Microsoft Learn) - Microsoft Sentinel pricing - Plan costs and understand pricing and billing (Microsoft Learn) - What’s new in Microsoft Sentinel (Microsoft Learn) - What’s new in Microsoft Sentinel: August 2026 - What’s new in Microsoft Sentinel: June 2026 - What’s new in Microsoft Sentinel: RSAC 2026 - UPDATE: New timeline for transitioning Sentinel experience to Defender portal - Onboard to Microsoft Sentinel data lake and graph (Microsoft Learn) - ISOC - Give us feedback!
#361
September 23 · 42 min
361 - What a small business actually needs to run cloud-native
We quite often talk about amazing enterprise-grade capabilities, like Azure Landing Zones, Data Lakes and clusters of super smart AI agents. But what about the small businesses? What do they need to get starting from scratch? In this episode we dissect the needs, the capabilities, the licenses, and security for anyone to get started in Azure and Microsoft 365! (00:00) - Intro and catching up. (03:00) - Show content starts. Show links - Microsoft 365 business plans and pricing - Azure Files Entra-only identities - Plan your Microsoft Entra join deployment - Windows Autopilot device preparation, user-driven Entra join - Plan for mandatory Microsoft Entra multifactor authentication - Give us feedback!
#360
September 16 · 36 min
360 - GitHub Enterprise explained
This week, we take a look at GitHub Enterprise, and why you should care. We talk about features, compliance, licensing, total cost, and preferred setups whether you're a small or large organization. Join us this week to level up your GitHub setup! (00:00) - Intro and catching up. (03:45) - Show content starts. Show links - GitHub pricing - Configuring SAML single sign-on for your enterprise (personal accounts mode) - About Enterprise Managed Users (SAML/OIDC/SCIM partner matrix) - Choosing an enterprise type (personal accounts vs EMU) - Entra ID SSO tutorial - GitHub Enterprise Cloud Organization - Entra ID SSO tutorial - GitHub Enterprise Cloud Enterprise Account - Give us feedback!
#359
September 9 · 43 min
359 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (05:35) - Show content starts. Show links - What's new in Microsoft Security: August 2026 - Microsoft Foundry docs: What's new for August 2026 - Resilience for long-running Microsoft Foundry hosted agents (preview) - Microsoft Entra Tenant Governance is now generally available - Copilot Code Review Reaches Azure Repos (InfoQ) - Announcing General Availability of Managed Instance on Azure App Service - Managed Instance on Azure App Service Reaches GA for Legacy Windows Apps - MCP Firewall in Global Secure Access - Microsoft Sentinel in Azure Portal will be retired March 31, 2027 - Project HydraFusion - Azure Multicloud Interconnect with AWS - Agent 365 license clarification - Conditional Access Policies, Licensing in general - Give us feedback!
#358
September 2 · 39 min
358 - What’s up, Exposure Management?
This week we take a look at Microsoft Security Exposure Management, and what has changed since the last time we looked at it. Among these findings we can see containment capabilities for AI agents, and several capabilities converging into MSEM. Join us for a fun discussion on the latest and great security capabilities! (00:00) - Intro and catching up. (03:42) - Show content starts. Show links - Secure Now - Containment strategies for AI in Secure Now - What's new in Microsoft Security Exposure Management - Overview of attack paths - Predefined classifications for critical assets - Agentic code security overview (Codename MDASH) - AI-powered defense for an AI-accelerated threat landscape - Our earlier take: episode 231 - Give us feedback!
#357
August 26 · 32 min
357 - Microsoft 365 E7 – let there be agents and security
This week we focus on licensing with Microsoft 365 E7. What's included in the bundle, and which ones are relevant and when? We reflect on the upgrade path from Microsoft 365 E5, as well as E3 + Defender Suite, and reflect on the options and pricing. (00:00) - Intro and catching up. (02:50) - Show content starts. Show links - Microsoft 365 E7 announcement - Microsoft Agent 365 overview - Microsoft licensing FAQ, Agent 365 - Purview data security and compliance for Agent 365 - Independent E7 licensing analysis (SAMexpert) - Our earlier take on Agent 365 and Entra Agent ID: Episode 336 - Give us feedback!
#356
August 19 · 34 min
356 - Renewing our understanding of Microsoft Global Secure Access
This week we take a look at Microsoft Global Secure Access (GSA). It's been a few years since it was announced, and it's time to refresh our thinking on what GSA is today, how companies can use it, and what a rollout in 2026 would look like. Join us in discussing GPUs, VPNs, and what a delivery project would include! (00:00) - Intro and catching up. (03:56) - Show content starts. Show links - Global Secure Access deployment guide - Private Access deployment plan - Global Secure Access operations guide - Enable Intelligent Local Access - Configure Private Access for Active Directory domain controllers (preview) - What is Global Secure Access (licensing overview) - Break-glass script for compliant network policies - Our previous take: Episode 201 - Give us feedback!
#355
August 12 · 28 min
355 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (02:18) - Show content starts. Show links - Microsoft Entra Backup and Recovery - Agent identities in Conditional Access policies - Project Perception and Microsoft Learn documentation - Azure Firewall Explicit Proxy - Microsoft Agent Framework – multi-agent orchestration SDK (GA) - Public Preview: AI Gateway in APIM - Public Preview: Protect sensitive generative AI telemetry in Application Insights - Foundational CSPM becomes opt-in for new subscriptions - Give us feedback!
#354
August 5 · 30 min
354 - A look at the new Azure Front Door edge actions
Azure Front Door just got programmable. Edge actions run your own JavaScript at Microsoft's edge, so A/B splits, token checks and origin routing happen before requests hit your backend. We cover what they do, where static rules run out, how they compare to Cloudflare Workers, and how to try them. (00:00) - Intro and catching up. (03:56) - Show content starts. Show links - Edge Actions - Azure Front Door | Microsoft Learn - Introducing Azure Front Door edge actions | Microsoft Community Hub - Give us feedback!
#353
July 29 · 30 min
353 - The Microsoft AD Tier Model explained
Microsoft has put the Active Directory Tier Model on GitHub, MIT-licensed, with a deployment engine, a drift auditor, and around 1,700 tests. This used to be consulting material that Microsoft deployed to you as a paid engagement, so the obvious question is: why now? We start with that question, and also consider whether Active Directory is still worth your attention. (00:00) - Intro and catching up. (03:55) - Show content starts. Show links - Repository - FAQ - What's new in Windows Server 2025 (the AD DS section) - Microsoft Learn - Enterprise access model - Microsoft Digital Defense Report 2025 - Give us feedback!
#352
July 22 · 34 min
352 - So long, SMS and voice authentication
Microsoft is retiring natively provided SMS and voice authentication in Entra ID, and the clock is ticking: passkeys become the default experience on September 1, 2026, and Microsoft-provided telecom delivery is fully retired on February 1, 2027. We walk through the timeline, what admins should do now to find and migrate affected users, and when the new Security Store telecom providers make sense. We also cover the everyday struggle: moving Microsoft Authenticator to a new phone without locking yourself out. (00:00) - Intro and catching up. (05:00) - Show content starts. Show links - Passkeys by default | MS Learn - Transfer Authenticator to a new phone - SMS/voice usage analyzer script - Plan a passkey deployment - End-user communication templates - Give us feedback!
#351
July 15 · 32 min
351 - Building and hosting a static site in 2026
In this week's episode, we talk about recent experience in moving away from Ghost and WordPress for blogs, and building a static site with Astro. Since it will be hosted in Azure, we will talk about the experience, the AI-assisted build, and the overall experience. Join us to learn how many mistakes we made, and learn from our failures! :) (00:00) - Intro and catching up. (03:00) - Show content starts. Show links - 046 - Azure Static Web Apps with Elio Struyf | Ctrl+Alt+Azure - Astro - Azure Static Web Apps hosting plans - Tobi’s blog - Jussi’s blog - Give us feedback!
#350
July 8 · 28 min
350 - Microsoft Tech Updates
In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up. (01:55) - Show content starts. Show links - Retirement: Azure Blueprints - Public Preview: Document PII playground sample in Microsoft Foundry NextGen - GA: Document PII NextGen Playground in Azure AI Language - Public Preview: Azure Migrate with GitHub Copilot modernization integration for code assessments - GA: Client-side data integrity protections in Azure Blog Storage - GA: ICMP support for Azure Standard V2 NAT Gateway - GA: Log Analytics Summary Rules experience - Microsoft certification updates - Give us feedback!
#349
July 1 · 40 min
349 - Back to basics: Managed identities vs. Service Principals vs. App Registrations
In this week's episode, we go back to basics to discuss ways to access resources secured by an Entra tenant. This is the bread and butter of Azure, and it's a good time to revisit these basics to understand why they are more relevant than ever in 2026. Join us in refreshing your knowledge on App Registrations, Service Principals, and Managed Identities! (00:00) - Intro and catching up. (03:20) - Show content starts. Show links - Application and service principal objects in Microsoft Entra ID - What are managed identities for Azure resources? - Managed identities FAQ (system vs user-assigned, no app object) - Give us feedback!

Showing 1–20 of 34 episodes