Two more arguably confusing identity objects in Azure AD – Service Principal and Managed Identities. Let’s tackle them down by defining what they are and how they distinguish from each other.

As part of my new job, I'm learning a lot more about the mysteries of the Domain Name System than any mortal should know I thought possible. The humble unix dig command allows you to query all sort of DNS information. For example, to see name server records…

In one of the last Azure posts, I wrote about the differences between Service Principal and Managed Identities. Since there are two types of MIs – User-assigned and System-assigned, I’m going to cover them both broadly.

Getting Microsoft Graph API Delegated and Application permission IDs are definitely hard to find, if you are doing things right – the programmatic way.

Since there isn’t any resource_enabled = false feature developed by Terraform yet, here’s a quick hack to enable / disable resources.

Another probably valuable Terraform nugget to share. Suppose that you want to get the current working directory name only for some reason. There are few helpful built-in references and functions that could help.

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source) - slimtoolkit/slim

Every once in a while, using built-in Terraform modules is just not enough. From time to time as new cloud features are developed and released, there is no native support yet, so it always takes time for them to be added in the respective TF module pipelines.…

Another GCP Terraform issue I was facing this week to share. It was related to not having API enabled as with most of them. This time the error I saw in the default console output was: Error: Error, failed to create instance xxxx: googleapi: Error 400: Invalid…

If you are struggling to get login credentials for ECR authentication to be able to push or pull a Docker image from ECR, then you are probably executing the aws ecr get-login command. Since AWS announced version 2 of the AWS CLI, this command doesn’t work…

If you listen to anyone discussing AWS security, you probably heard about Amazon GuardDuty. It's an intelligent "threat detection" service from AWS. Should you enable GuardDuty? I hope you'll reach closer to your answer by the end of this blog post.

Docker Compose is an excellent optimization tool for development and production. Learn best practices for Docker Compose

As I was working on a docker-compose stack I received the following warning message that was coming from the Redis service: WARNING overcommit_memory is set to 0! Background save may fail under low memory condition. To fix this issue add 'vm.overcommit_memory…

In this post, we get a behind-the-scenes look at the engineering work required to change a critical platform component with code paths that are exercised billions of times a day while minimizing service disruptions and maintaining SLA for our customers. We…

By default, Git completely ignores directories because it’s an intentional design choice. Since empty dirs don’t include any files or content, therefore they’re ignored. And sometimes, we might need to add an empty directory in a repo for some reason. There…

Ops is hard. What have learned so far?

GitHub now supports SSH commit verification, so you can sign commits and tags locally using a self-generated SSH public key, which will give others confidence about the origin of a…

Instant, easy, and predictable development environments - jetify-com/devbox

Another cool command by Git and this time we are going to try to list all local (unpushed) commits. As always, there’s more than one way to shine a penny.