user-guides

Welcome to the User Guides

Note: These are based on my research and experience. Please read it for your learning, should NOT be taken to production

This is the page for few guides, which will be helpful to understand technology and steps for the implementation.

Please select a guide from the list below:

• Azure Image Builder: Hardened VM Images Guide

---

• Automatically Tag Azure VMs with Creator ID

---

• Deploying the Idle VM Shutdown Solution to Production

---

• Keycloak ↔ Single Sign-On for Contoso360 and Power BI

---

• Partner users accessing Power BI in MedY tenant

---

• Keycloak ↔ Single Sign-On How-To for Contoso360 and Power BI

---

• Managing B2B Guest Users & Groups with Microsoft Graph API in Azure Entra ID

---

• Power BI Licensing & Management Comparison

---

• AKS Security & Governance

---

• Hub-Spoke Architecture

---

• Azure vWAN Shared Services Architecture

---

• Azure vWAN Integration

---

• Azure CR-LB Architecture End‑to‑End Communication Flow — (per‑Broker SLB)

---

• Azure CR‑LB Architecture for RC System — One SLB per Broker

---

• Active-Active DR Architecture for Drupal 10 Website

---

• Active-Passive DR Architecture for Drupal 10 Website

---

• Multi-Tenant Application Architecture on Azure VMs

---

• High Availability Architecture for Contoso-Fabrikam-Customer Connectivity

---

• Azure Traffic Manager (ATM) Architecture for RC System – End-to-End Communication Flow

---

• AMPLS Multi-Region Architecture with Precise DNS Forwarding

---

• AMPLS Multi-Region Component Placement Guide

---

• AMPLS Private Endpoint in Hub vs Spoke

---

• AMPLS Q&A

---

• AMPLS - Traffic Routing & Bandwidth Guide

---

• AMPL DNS Troubleshooting Guide

---

• Azure Front Door – Best Practices, Configuration, Caching, and Logging

---

• Azure Files NFS Share Snapshot Automation

---

• Azure Blob Storage Vaulted Backup Solution

---

• Azure Blob Storage Backup & Resiliency Strategy

---

• Azure CR‑LB Architecture for RC System — TLS & mTLS Architecture FAQ

---

• Azure Front Door High Availability Architecture Guide

---

• Azure Private Endpoint /32 Routing and HSPE Deep Dive

---

• Route-table based solution (vWAN vHub Route Tables)

---

• Firewall-based solution (Azure Firewall in vWAN hubs)

---

• Azure Front Door Standard vs Premium

---

• Production Architecture: Keycloak → Entra ID (B2B Direct Federation + Domain Routing) → Power BI

---

• Use partners.Fabrikam.com for partner access to Power BI (SSO preserved via Keycloak)

---

• CAF / Azure Landing Zone (ALZ) Accelerator for Azure Virtual Desktop (AVD)

---

• Azure Load Balancing Solution for OnPrem

---

• Azure Load Balancing Solution for OnPrem_V2

---

• Azure Resource Manager (ARM) Migration Guidance

---

• Keycloak Integration with Entra ID - Authentication Flow

---

• Azure Logic App (Consumption) — Auto-Close ServiceNow Incident on Azure Monitor Alert Resolution

---

• Azure Files SMB — AKS Persistent Volume IOPS Troubleshooting Guide

---

• Azure Service Health Alerts — Configuration Guide

---

• Power BI – Entra ID Group Assignment Propagation Delay Guide

---

• Power BI Cache Timing Test — Polling Logic

---

• Azure Landing Zone — Contoso Multi-Tenant SaaS Contact Center Platform Guide

---

• Microsoft Entra ID — Sign-in Log Retention: Cost Estimation

---

• Multi-Tenant SaaS Landing Zone Architecture on Azure

---