iiinova — where your digital self keeps evolving

Brian Veldman @brianveldman.bsky.social · 06/09/2026

In this blog, we will explore how to define and manage Azure Files access for cloud only identities in Microsoft Entra ID, creating a structured and scalable approach to permissions. cloudtips.nl/managing-per...

cloudtips.nl

Medium

000

Brian Veldman @brianveldman.bsky.social · 16/08/2026

🔥Want to learn how to deploy Azure Virtual Desktop Session Hosts with Ephemeral OS Disks using Bicep? Get the best of both worlds: great performance and no additional storage costs for the OS disk. cloudtips.nl/deploying-az...

cloudtips.nl

Deploying Azure Virtual Desktop Session Hosts with Ephemeral OS Disks using Bicep! 😍

Deploying Azure Virtual Desktop Session Hosts with Ephemeral OS Disks using Bicep! 😍 In a previous blog, I demonstrated how to deploy Azure Virtual Desktop environments by using the new Azure …

000

Reposted by Brian Veldman

Merill Fernando 💚 @merill.net · 15/08/2026

Have you read this weeks Entra.News ?

151

Brian Veldman @brianveldman.bsky.social · 09/08/2026

🔥Learn how to automate Microsoft 365 security validation with Maester, the open source security testing framework built for Microsoft environments. www.youtube.com/watch?v=Pvl_...

youtube.com

Secure Your Microsoft Tenant with Maester | Microsoft Security Test Automation

YouTube video by Brian Veldman

011

Brian Veldman @brianveldman.bsky.social · 27/07/2026

❤️ Based on the positive feedback on my blog about Azure SRE Agents, I also created a YouTube video that dives deeper into how Azure SRE Agents help maintain the health and performance of your Azure resources through AI powered monitoring and assistance. youtu.be/Bi0yXNB0860?...

youtu.be

Getting Started with Azure SRE Agents

YouTube video by Brian Veldman

111

Brian Veldman @brianveldman.bsky.social · 20/07/2026

🔥 Azure Bicep has taken another big step forward by introducing support for publishing and restoring modules from any OCI compliant registry through the experimental ociEnabled feature, available starting with Azure Bicep v0.45.6. medium.com/azure-bicep/...

medium.com

Publish Azure Bicep Modules to GitHub Container Registry 😍

Azure Bicep has supported publishing modules to Azure Container Registry for quite some time, making it easy to share and version reusable…

000

Brian Veldman @brianveldman.bsky.social · 15/07/2026

🎉 I am excited to share that I have been renewed as a Microsoft Most Valuable Professional (MVP) for another year!

000

Brian Veldman @brianveldman.bsky.social · 27/06/2026

Extendable parameter files have reached General Availability (GA). This feature introduces the extends keyword for .bicepparam files, making it easier to reuse parameter configurations across environments while reducing duplication and improving maintainability. cloudtips.nl/the-new-bice...

cloudtips.nl

The NEW Bicep Extendable Parameter Files! 🔥

With the release of Azure Bicep v0.44.1, extendable parameter files have reached General Availability (GA). This feature introduces the…

031

Brian Veldman @brianveldman.bsky.social · 15/06/2026

Recently, I implemented Microsoft Entra Private Access for a customer who wanted to provide external users, such as contractors, with secure access to private resources by using the Global Secure Access platform. That experience inspired me to write this blog. 💪 cloudtips.nl/entra-global...

cloudtips.nl

Entra Global Secure Access❤️ External User Access

Microsoft Microsoft Entra Private Access removes the need for traditional VPN clients and enhances security by using Microsoft Entra ID…

000

Brian Veldman @brianveldman.bsky.social · 09/06/2026

🔥 It’s here! Microsoft Defender for Cloud now provides discovery and posture coverage for supported serverless container workloads in public preview. cloudtips.nl/improve-your...

cloudtips.nl

Improve your Azure Container Apps Security with Defender for Cloud!

As more and more workloads are being deployed as microservices, platforms such as Azure Container Apps are rapidly gaining popularity…

000

Brian Veldman @brianveldman.bsky.social · 20/05/2026

Hi folks! Thanks last week for the positive feedback on my blog over the Azure Resource Manager MCP. I decided to create a video for the people who would like that. Let me know what your experiences are on the new MCP. youtu.be/ggJxD5A78xI?...

youtu.be

The Azure Resource Manager MCP!

YouTube video by Brian Veldman

010

Brian Veldman @brianveldman.bsky.social · 08/05/2026

After the strong response and positive feedback on my previous blog, I wanted to share another practical use case that builds on the same foundation, but focuses on a different challenge I encounter in my day to day work. This time, it is all about cost awareness. cloudtips.nl/automating-a...

cloudtips.nl

Automating Azure Cost Calculations with GitHub Copilot CLI Custom agents ❤️

After the strong response and positive feedback on my previous blog, I wanted to share another practical use case that builds on the same…

000

Brian Veldman @brianveldman.bsky.social · 30/04/2026

In this blog, I will demonstrate the new Maester feature called multi-tenant reporting. This allows you to run your security tests across multiple tenants and view the results in a single report. This setup enables monthly security checks across your Microsoft tenants. 🔥 cloudtips.nl/maester-%EF%...

cloudtips.nl

Maester ❤️ Multi-Tenant Reports — Microsoft Security Test Automation Framework

Maester is a PowerShell based Microsoft Security test automation framework designed to help you maintain control over your Microsoft…

000

Brian Veldman @brianveldman.bsky.social · 17/04/2026

💪In this blog, I will show you how to retrieve group claims when authenticating with Microsoft Graph, for example in Azure App Services, making it possible to enable or disable specific fields in the UI. cloudtips.nl/getting-the-...

cloudtips.nl

Getting the Group Claims when authenticating with Microsoft Graph

In a customer project we had the requirement to fetch the Security Groups an employee is a member of, making it possible to enable or…

000

Brian Veldman @brianveldman.bsky.social · 24/03/2026

During MVP Summit, I met @luke.geek.nz, the legend who nominated me and helped me become a Microsoft MVP. Honored 🔥

110

Brian Veldman @brianveldman.bsky.social · 21/03/2026

Underway to Redmond for the MVP Summit! 💪🏻Together with @johnlokerse.dev

071

Brian Veldman @brianveldman.bsky.social · 18/03/2026

cloudtips.nl/take-control... The FinOps Toolkit helps accelerate your FinOps journey by offering starter kits, scripts, and advanced solutions to automate and extend the Microsoft Cloud. In this blog we will use the Azure Verified Module pattern to deploy the Azure FinOps Toolkit — FinOps Hub

cloudtips.nl

Take Control of Azure Cloud Spend with FinOps and Azure Verified Modules

The FinOps Toolkit helps accelerate your FinOps journey by offering starter kits, scripts, and advanced solutions to automate and extend…

010

Brian Veldman @brianveldman.bsky.social · 12/03/2026

Azure Sandbox is a Terraform-based project designed to simplify the deployment of sandbox environments in Azure. In this blog, I will walk you through deploying Azure Sandbox and getting started. 🔥 cloudtips.nl/the-azure-sa...

cloudtips.nl

The Azure Sandbox 😍

Azure Sandbox is a Terraform-based project designed to simplify the deployment of sandbox environments in Azure. It provides a modular and…

020

Brian Veldman @brianveldman.bsky.social · 01/03/2026

🔥 Azure Bastion has introduced support for signing in with Microsoft Entra ID when using RDP to access Windows virtual machines directly from the Azure portal. cloudtips.nl/entra-id-sup...

cloudtips.nl

Entra ID support for Azure Bastion 😍

Azure Bastion has introduced support for signing in with Microsoft Entra ID when using RDP to access Windows virtual machines directly from…

010

Brian Veldman @brianveldman.bsky.social · 26/02/2026

🔥Azure Service Groups make it possible to bring resources together and manage them, even when they are spread across multiple subscriptions and resource groups, without being tied to the default Azure hierarchy. cloudtips.nl/azure-servic...

cloudtips.nl

Azure Service Groups for Flexible Resource Organization

Azure Service Groups make it possible to bring resources together and manage them, even when they are spread across multiple subscriptions…

011

Brian Veldman @brianveldman.bsky.social · 17/02/2026

In this blog, I will show you how to get started with the Bicep console and how it supports my daily development workflow, so it can save you time as well. cloudtips.nl/the-azure-bi...

cloudtips.nl

The Azure Bicep Console = ❤️

When working with Bicep templates, one of the biggest challenges is validating your logic before deployment. Naming rules, conditions…

021

Brian Veldman @brianveldman.bsky.social · 13/02/2026

What if I told you that you can export your Conditional Access policies to PowerPoint, providing a high-level overview of your security posture? youtu.be/ANZLw1jkX8s?...

youtu.be

Conditional Access Documenter

YouTube video by Brian Veldman

021

Brian Veldman @brianveldman.bsky.social · 09/02/2026

🔥 It is here. The unified tenant configuration management (UTCM) APIs allow administrators to control and manage configuration settings across a single workload or multiple workloads within the organization. cloudtips.nl/unified-tena...

cloudtips.nl

Unified Tenant Configuration Management (UTCM) APIs in Microsoft Graph = ❤️

The unified tenant configuration management (UTCM) APIs allow administrators to control and manage configuration settings across a single…

010

Brian Veldman @brianveldman.bsky.social · 30/01/2026

Recently, in a customer project, I had to switch from Passthrough Authentication to Password Hash Synchronization. That experience inspired me to write this blog for anyone who receives the same assignment but is unsure how to approach it. 💪🏻 cloudtips.nl/microsoft-en...

cloudtips.nl

Microsoft Entra Connect Sync — Migrate from Pass-through Authentication to Password Hash Sync

Recently, in a customer project, I had to switch from Passthrough Authentication to Password Hash Synchronization. That experience…

020

Brian Veldman @brianveldman.bsky.social · 24/01/2026

Many organizations deploy AI solutions on Microsoft Azure with a strong focus on innovation and speed. What is often underestimated is the importance of a well designed foundation. cloudtips.nl/this-is-why-...

cloudtips.nl

This is why your AI platform on Azure needs a Landing Zone

Many organizations deploy AI solutions on Microsoft Azure with a strong focus on innovation and speed. What is often underestimated is the…

010

Brian Veldman @brianveldman.bsky.social · 08/01/2026

Did somebody said snow? ⛄️❄️

010

Brian Veldman @brianveldman.bsky.social · 30/12/2025

First of all, I have to say that 2025 was an incredible year. I am truly grateful for everyone who supported my community contributions and helped me grow along the way. cloudtips.nl/reflecting-o...

cloudtips.nl

Reflecting on 2025: Microsoft MVP, How It Started and What’s Next 🚀

First of all, I have to say that 2025 was an incredible year. I am truly grateful for everyone who supported my community contributions and…

010

Brian Veldman @brianveldman.bsky.social · 22/12/2025

In this blog I will show how to configure Microsoft Entra Private Access to tunnel selected application traffic through a private network in order to meet the access control policy of an application that depends on network based restrictions. cloudtips.nl/source-ip-an...

cloudtips.nl

Source IP Anchoring with Entra Global Secure Access 🔥

Source IP Anchoring with Entra Global Secure Access 🔥 Global Secure Access (GSA) is a comprehensive solution that integrates Microsoft Entra Internet Access and Microsoft Entra Private Access …

000

Brian Veldman @brianveldman.bsky.social · 15/12/2025

💪🏻Together with my colleagues Robert and Wouter, we migrated 100 VMs this weekend, phased out the old RDS farm, introduced AVD with six host pools and 125 VMs, and migrated fourteen locations from IPVPN to fiber and DSL via SDWAN to vWAN. Grateful for the gift and happy to help innovate IT platforms.

010

Brian Veldman @brianveldman.bsky.social · 15/12/2025

🎄 It is December at the North Pole. The elves are rushing around, workloads are flying everywhere, and even Santa is complaining that he has too many permissions. It is clearly time to bring some order with a bit of Bicep magic. cloudtips.nl/the-north-po...

cloudtips.nl

The North Pole Azure Landing Zone

🎄It is December at the North Pole. The elves are rushing around, workloads are flying everywhere, and even Santa is complaining that he…

000

Reposted by Brian Veldman

Sam Erde @samerde.day3bits.com · 09/12/2025

⚡Adding Intune P2 features to Microsoft 365 E3 and E5 is getting a lot of well-deserved attention, but did you see the blip that isn't? Some Defender for Office P1 features are coming to E3 and E1 in 2026! 📧 www.microsoft.com/en...

021

Brian Veldman @brianveldman.bsky.social · 30/11/2025

🔥 It is here. Microsoft Entra Kerberos authentication for cloud only identities on Azure Files SMB is now available in preview. This makes it possible to access Azure Files without any domain controllers or hybrid identity requirements. cloudtips.nl/microsoft-en...

cloudtips.nl

Microsoft Entra Kerberos authentication for Cloud-only Identities on Azure Files SMB ❤️

Azure Files now allows SMB access through identities that exist entirely in Entra also known as cloud-only accounts. These accounts live in…

032

Brian Veldman @brianveldman.bsky.social · 23/11/2025

When remote users connect through a Point to Site (P2S) VPN in Azure Virtual WAN, you can route all their traffic including internet bound traffic through Azure Firewall by pushing a default route (0.0.0.0/0). This approach is commonly referred to as forced tunneling. 🔥 cloudtips.nl/secure-your-...

cloudtips.nl

Secure Your Traffic with Forced Tunneling in Azure Virtual WAN P2S VPN 😍

Secure Your Traffic with Forced Tunneling in Azure Virtual WAN P2S VPN 😍 When remote users connect through a Point to Site (P2S) VPN in Azure Virtual WAN, you can route all their traffic including …

010

Reposted by Brian Veldman

Luke Murray @luke.geek.nz · 20/11/2025

[Share] 🔥 Microsoft Ignite 2025 Next Steps After attending Microsoft Ignite 2025, your next steps to continue your learning journey! #msignite #mvpbuzz

github.com

GitHub - microsoft/ignite25-next-steps

Contribute to microsoft/ignite25-next-steps development by creating an account on GitHub.

022

Brian Veldman @brianveldman.bsky.social · 10/11/2025

In this blog, I will demonstrate how to use Azure Container App Jobs to automate tasks with Microsoft Graph. For example, you might want to back up your Conditional Access rules from Entra ID to a secure location, such as an Azure Storage Account. 🔥 cloudtips.nl/automate-mic...

cloudtips.nl

Automate Microsoft Graph Tasks with Azure Container App Jobs! ❤️

Azure Container Apps Jobs allow you to run containerized tasks that execute for a finite duration and then exit. You can use jobs for…

010

Brian Veldman @brianveldman.bsky.social · 02/11/2025

In this blog, I’ll demonstrate how to automate Privileged Identity Management (PIM) in Azure Landing Zones using Azure Bicep and the Microsoft Graph Provider, powered by Microsoft Entra ID Governance. cloudtips.nl/microsoft-en...

cloudtips.nl

Microsoft Entra ID Governance — Automating Privileged Identity Management in Azure Landing Zones…

Azure Landing Zones provide a solid foundation for deploying workloads in the cloud by integrating best practices across governance…

010

Reposted by Brian Veldman

Merill Fernando 💚 @merill.net · 19/10/2025

This week's Entra newsletter is out. Get it at entra.news

061

Brian Veldman @brianveldman.bsky.social · 15/10/2025

🚨 The Terraform MSGraph provider is a gamechanger. Today, I will show how you can use it to improve your Entra ID configuration and strengthen your security posture. cloudtips.nl/managing-ent...

cloudtips.nl

Managing Entra ID Configuration and Security using the Terraform MSGraph Provider ❤️

Recently, I wrote a blog about using the new Terraform MSGraph provider. This provider, currently in public preview, allows you to describe…

030

Reposted by Brian Veldman

Merill Fernando 💚 @merill.net · 12/10/2025

I just sent out this week's Entra newsletter. 🚀 Most popular posts from last week 🥇Microsoft Introduces Restore Capability for Conditional Access Policies • Tony Redmond 🥈Why Setting Office IP as a Trusted Location in Conditional Access Is Risky • AIMA

131