Content by abhilashasr (3)

abhilashasr threat-models Azure MCP Server for AI-assisted incident response, focusing on how Entra ID, Azure RBAC, Key Vault, Policy, and monitoring controls prevent an assistant from turning diagnostics into unintended production changes. It also includes a read-only demo connecting GitHub Copilot in VS Code to Azure Monitor and Log Analytics.

abhilashasr proposes an Azure-native pattern for keeping Private Endpoint DNS records in centrally owned Private DNS zones when workloads span multiple Entra tenants. It combines Azure Policy (DeployIfNotExists) with Azure Lighthouse delegation, and outlines deployment phases, validation checks, and security guardrails.

abhilashasr outlines how “subscription vending” in Azure Landing Zone uses automation and Infrastructure as Code to create governed Azure subscriptions at scale, including management group placement, billing alignment, budgets, provider registration, and RBAC setup.