Plan Bastion Kerberos DNS changes as a redeployment dependency
Microsoft warns that changed DNS server information does not propagate to an existing Bastion resource.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 89 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,777 articlesGuidance and analysis from DSE
Separate Firewall Policy edit availability from continued firewall operation
A policy-region outage can prevent changes while linked Azure Firewall instances continue operating.
Read the guide
Reconcile remediation permissions after changing an Azure Policy definition
Editing roleDefinitionIds does not automatically update the existing assignment identity's grants.
Read the guide
Verify Resource Graph candidates against the provider before irreversible actions
An asynchronously indexed resource list is useful for discovery, but stale state must not directly authorize destructive automation.
Read the guide
Check the IP-configuration boundary of Load Balancer outbound rules
IPv4 outbound rules support a NIC's primary configuration, not its secondary IPv4 addresses.
Read the guide
Reassess delegated role-assignment denylists when roles change
Blocking known privileged role IDs does not automatically block a future role with equivalent role-assignment permissions.
Read the guide
Choose how expired Service Fabric health reports affect evaluation
A report can disappear at expiry or remain as an error; an infinite lifetime does neither automatically.
Read the guide
Investigate partial state after a failed Blob immutability migration
A failed move to version-level immutability can leave blob policies that the portal does not yet display.
Read the guide
Separate Elastic SAN capacity expansion from performance expansion
Additional capacity increases storage space, while base capacity determines the SAN's shared IOPS and throughput pool.
Read the guide
Check recall-memory pressure before assuming a File Sync read warmed the cache
File Sync can stop persisting recalled content to disk when its reserved recall memory reaches the documented threshold.
Read the guide