AWS SAP-C02: Direct Connect and VPN Resilience Patterns
Hybrid connectivity is often designed as if “a Direct Connect” or “a VPN” were complete architectures. They are only components. Resilience depends on…
Read articleEDITORIAL TOPIC / EXAMTOPICS EDITORIAL
Cloud Computing.
Cloud platforms, workload architecture, operations, storage, and infrastructure.
PUBLISHED COVERAGECurated by subject
AWS SAP-C02: Shared Services Across AWS Accounts
A multi-account AWS environment creates strong isolation, but isolation alone does not eliminate the need for common infrastructure. Teams still need DNS, identity…
Read articleAWS SAP-C02: Data Residency and Sovereignty Architecture
Data residency and digital sovereignty requirements turn geography into an architecture constraint. A workload may need to keep customer content in a particular…
Read articleAWS SAP-C02: Centralized Logging Across AWS Accounts
Multi-account AWS environments need a logging strategy that survives the failure or compromise of individual workloads. If every account keeps its own audit…
Read articleAWS SAP-C02: Control Tower for Enterprise Governance
Enterprise AWS governance is difficult when account creation, access, logging, networking, and policy enforcement are handled as separate projects. AWS Control Tower addresses…
Read articleAWS AIF-C01: Responsible AI Concepts for AWS Practitioners
Practice responsible AI concepts across the AWS application lifecycle Responsible AI is the discipline of building and using AI systems in ways that…
Read articleAWS AIF-C01: Foundation Models and Generative AI
Understand foundation models and generative AI applications Foundation models change the way applications are built because much of the model capability already exists…
Read articleAWS AIF-C01: Choosing AWS AI Services for Business Use Cases
Select AWS AI services for the task and operating model AWS offers AI services at very different levels of abstraction. A team can…
Read articleMicrosoft SC-100: Zero Trust Architecture Across Microsoft Cloud
Zero Trust is a security strategy, not a product bundle. Microsoft describes it through three principles: verify explicitly, use least privilege access, and…
Read articleMicrosoft SC-100: Defender for Cloud Posture Management
Cloud posture management is the discipline of continuously finding configuration, exposure, permission, and vulnerability conditions that make compromise more likely. Microsoft Defender for…
Read articleMicrosoft SC-100: Application Security in the Microsoft Cloud
Application security in the Microsoft cloud is not a single product decision. It is a lifecycle problem that begins with architecture and continues…
Read articleMicrosoft AI-102: AZ-204 Retirement: Where Azure Developers Go Next
AZ-204 retirement and the AI-200 developer path The Microsoft AZ-204 exam and Azure Developer Associate certification retired on July 31, 2026. That change…
Read articleMicrosoft AZ-400: Secure Secrets in Azure DevOps Pipelines
The safest pipeline secret is the secret the pipeline no longer needs to store. Azure DevOps can use workload identity federation for many…
Read articleMicrosoft AZ-400: Reusable GitHub Actions for Azure Deployments
Reusable GitHub Actions workflows become valuable when an organization needs many repositories to deploy to Azure without copying the same authentication, validation, and…
Read articleMicrosoft AZ-400: Release Gates and Progressive Delivery in Azure
Release gates are useful when they answer a specific question before more production risk is accepted. Is the artifact trusted? Did the required…
Read article