Azure

A Conditional Access deployment from Microsoft’s own guidance: licences, security defaults, report-only testing, break-glass accounts, federated apps and cost.

What a Microsoft licence review should find, from Microsoft’s own reports and terms, and the dates on which each finding can actually come off your bill.

Choosing a CSP partner: direct-bill or indirect reseller, GDAP admin roles, tenant ownership, new commerce terms and how to leave, checked against Microsoft.

CSP vs Enterprise Agreement vs MCA: the seven-day rule, the 2026 price rises, and what each agreement changes about how you run your Microsoft estate.

What an enterprise architecture assessment should include: business, data, application and cloud layers, evidence from the running estate, and a checklist.

Container Apps vs AKS is usually settled by habit. Microsoft names two narrow reasons to need AKS, and neither is that the application is cloud-native.

Managed service vs project gets treated as a commercial choice. It is an operating model decision, and a project cannot deliver the central layer at all.

Choosing between Azure messaging services starts with one question: is this a command or an event? Answer that and the product choice mostly makes itself.

Azure subscription design has four triggers for a new subscription, and none of them is a region. What a subscription is really a boundary for, and why.

Azure cost optimisation is usually treated as a reporting problem. It is a provisioning problem. The controls that stop spend drifting before it starts.

An Azure landing zone accelerator deploys Microsoft’s reference architecture as code. When that is the right call, when a custom build is, and what decides it.