Short, honest write-ups of the ideas that come up in interviews and on the job. Each one teaches the concept properly, cites the Microsoft documentation, and points back to the class that drills it until it sticks.
Most people start with AZ-900 — and the one case you skip it. Study time, cost, and the honest part: neither gets you hired alone.
What each tier is for, and the feature cliffs — Always On, slots, VNet — that force an upgrade. F1 to P1v3, side by side.
P1 for everyone, P2 for admins — and what is already free. The Free/P1/P2 feature ladder, and how not to overbuy.
Engineers build and run it; architects design it. The AZ-104 to AZ-305 path, salary reality as ranges, and the messy DevOps middle.
ACI runs a container; Container Apps runs a container service. Burst jobs versus scale-to-zero, cost, and the AKS off-ramp.
UDRs override Azure's default routing. System routes, next-hop types, forcing traffic through a firewall, and route precedence.
MFA is the what; Conditional Access is the when. Why you use both, Security Defaults versus CA, and the P1 licensing line.
One blueprint, one instance per tenant, one portal view. The mental model that finally makes Entra app identities click.
Same product, new name (July 2023) — nothing breaks. Why the rename, what stayed identical, and the old-to-new cheat sheet.
The NSG is the firewall; an ASG is a label on VMs for cleaner rules. A web-tier to app-tier example without hard-coded IPs.
Both are hireable — pick by job market and your start point. A service-name Rosetta (EC2 to VM, S3 to Blob) and which to learn first.
Every career question in one place — is it for you, breaking in from zero, what it pays, Azure vs the rest, AI's real effect, and getting hired.
The whole cert cluster in one guide — whether a cert is worth it, the AZ-900 → AZ-104 ladder, and closing the certified-but-not-hired gap.
Three real options with real monthly-dollar math — and the places where "free" quietly bites you later.
Enable the $web container, upload your site, find the endpoint — and the custom-domain HTTPS wall nobody warns you about.
Static and JAMstack go to Static Web Apps; server-rendered apps and backends go to App Service. The full cost and feature split.
Why Free and Shared tiers can't do it, the DNS and verification steps, the free managed cert, and the apex-domain traps.
Blob can't do custom-domain HTTPS alone. Put Front Door in front for a managed cert — and why older CDN guides now mislead.
Who each is right for, the day-to-day, pay and job volume, cert paths — and the honest "certified isn't hired" part per stack.
AI drafts the boilerplate IaC, first-pass runbooks, and log triage; the architecture, root-cause, and accountability stay yours.
The bottom rung got narrower, not removed. What changed, what still hires a junior, and a no-panic plan for starting now.
Sourced total-comp ranges by level — GCP skews higher, the bands overlap, and your metro moves the number more than the logo.
The two ladders rung for rung, the time and cost to each level, and which cert employers actually ask for.
Add a GPU node pool, let pods request GPUs, autoscale to zero when idle. When Kubernetes beats raw VMs for AI — and when it's overkill.
Two ways an AI job stalls: a slow GPU interconnect and storage that can't feed them. InfiniBand plus a parallel file system keep the expensive silicon busy.
GPU compute is the whole bill. Right-size, spot, reserve, scale to zero — and know when serverless model APIs beat renting GPUs at all.
HDD, SSD, Premium, Premium v2, Ultra — which managed disk to pick, by the IOPS and latency your workload needs, not the name. Plus the over-provisioning trap.
The three ways to run SQL Server on Azure, and how much you trade control for how much Azure manages. When each one is the right call.
RBAC controls who can do what; Azure Policy controls what's allowed to exist. Different jobs, and you need both. The confusion, cleared up.
Azure Firewall guards the network; a WAF guards the web app. Different layers, and serious apps run both — not either/or. Where each one sits.
One short, honest Azure note at a time — plus the occasional hiring signal. No spam, no card, unsubscribe in one click.