Independent Cloud Security Lab
Practical cloud security, DevSecOps, SRE, and automation labs designed around enterprise architecture and operational requirements.
Latest
A masked PMWORKS case study: moving Vue/Vite and Maven builds into Jenkins, deploying a WAR to JEUS with restricted service-account wrappers, and restoring a pre-deployment backup through a separate rollback job.
Compare Azure DDoS IP Protection and Network Protection by eligible resources, attachment scope, telemetry, response benefits, and pricing structure.
Compare Azure Firewall SKUs by real traffic paths, throughput, FQDN control, threat intelligence, TLS inspection, IDPS, cost, operations, and migration risk.
Build and verify a single-region Azure Firewall hub-spoke path with UDRs, symmetric return routing, DNS Proxy, Private Resolver, DNAT, hybrid routing, and a controlled forced-tunnel branch.
Learn Azure networking through a three-tier example: plan non-overlapping CIDRs, segment subnets, read stateful NSG rules, and prove both allowed and denied traffic paths.
Design a private Azure VM by separating guest administration, application ingress, explicit internet egress, and private Azure service access—with evidence for every path.
