Focus area
Identity
Make identity the security boundary.
Entra ID, PIM, workload identity, and secrets discipline.
Identity is the control plane. Ship patterns for privileged access, role separation, managed identities, and vault design that won’t crumble during the next audit.
Featured runbook
Identity-first Azure: the baseline every landing zone should start with
A practical identity baseline for secure Azure architecture: admin separation, PIM, Conditional Access, workload identities, and secrets. Written as a runbook you can implement.
Read now
Need context?
Jump into the guided path or skim the Weekly Azure Changes briefings when you need a refresher.
Explore other focus areas
Hop between landing zones, identity, networking, and more.