Resolve an ARM managed-identity reference after its owning resource exists
Check what a reference names before adding retries to a failed deployment.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 20 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Separate ExpressRoute Microsoft-peering NAT advertisements from internet routes
Review the public-prefix advertisements that can create asymmetric return paths.
Read the guide
Use Azure Policy count conditions to test individual array members
Verify that a policy checks the intended members of a resource-property array.
Read the guide
Investigate Connection Monitor's indeterminate state before declaring a network outage
Distinguish missing monitoring data from a measured connectivity failure.
Read the guide
Prove that an Azure SQL private-endpoint connection traverses the intended firewall
Pair a successful SQL connection with evidence of the firewall path.
Read the guide
Specify the transfer direction before copying Azure VM files with SCP
DSE recommends writing the source, destination, and intended direction into the transfer request before constructing the command.
Read the guide
Keep Azure VM cost filters and reporting scope visible in the review
DSE recommends saving the selected scope, date range, service filter, and grouping alongside each cost report.
Read the guide
Check Azure Compute Gallery names before creating the sharing resource
DSE recommends checking the proposed gallery name against both the naming rules and the subscription inventory before submitting the deployment.
Read the guide
Verify guest decryption before rebuilding an ADE-encrypted VM
DSE recommends a separate guest-decryption checkpoint before disk-copy work begins.
Read the guide
Treat Azure disk performance plus as a creation-time choice
DSE recommends recording performance plus in the new-disk specification before deployment.
Read the guide