End-to-end guide: containerizing Backstage, provisioning Azure resources (with Bicep & CLI), enabling Microsoft Entra (formerly Azure AD) sign-in, managing secrets, scaling, observing, troubleshooting, and cleaning up — all aligned with current Azure best practices (managed identities, least privilege, and no hard‑coded secrets). Why Backstage + Azure Container Apps Backstage centralizes your internal developer portal (catalog,… Continue reading Backstage on Azure Container Apps with Microsoft Entra ID (Azure AD) Authentication
Category: Azure
Measuring API Latency & Throughput with k6
Modern API platforms live and die by their tail latency. Your users do not care that the “average” response time is fine if 5% of requests are 10× slower. This post walks through using k6 to benchmark Azure API Management (APIM) backed APIs, first with a basic latency script and then with per‑request telemetry streamed into Azure… Continue reading Measuring API Latency & Throughput with k6
Securely Trigger GitHub Workflows from Azure Logic Apps Using GitHub App Authentication
In this tutorial, we'll explore how to trigger GitHub Actions workflows from Azure Logic Apps without relying on Personal Access Tokens (PATs). Instead, we'll utilize GitHub App authentication, which offers enhanced security and scalability for automated workflows. 🧩 Prerequisites Before we begin, ensure you have the following: An Azure Logic App (Standard). A GitHub App… Continue reading Securely Trigger GitHub Workflows from Azure Logic Apps Using GitHub App Authentication
Multi-Tenant Identity Federation: Accessing Multiple Entra ID Tenants with Managed Identity
Introduction Recently, I had the opportunity to help a customer solve a complex challenge involving multi-tenant identity federation. They needed to securely access resources across different Azure Active Directory (now Entra ID) tenants without managing secrets or certificates. The solution involved using managed identity with federated credentials to perform token exchange between tenants—a powerful but… Continue reading Multi-Tenant Identity Federation: Accessing Multiple Entra ID Tenants with Managed Identity
Observability Unleashed: OpenTelemetry in Azure Functions with Go
In the evolving landscape of serverless computing, observability has become paramount for building reliable, scalable applications. This article explores how to implement OpenTelemetry (OTel) in Azure Functions using the new Flex Consumption plan with Go custom handlers, providing comprehensive telemetry data through Azure Monitor's Data Collection Endpoint (DCE) and Data Collection Rule (DCR). What is… Continue reading Observability Unleashed: OpenTelemetry in Azure Functions with Go
Blue-Green and Canary Releases with Zero-Downtime for Azure Functions Flex Consumption with APIM
This solution demonstrates the power of combining multiple Azure services to create sophisticated deployment patterns. As Azure Functions Flex Consumption matures, this approach provides a solid foundation that can be easily adapted when native deployment slots become available. The Challenge: Deployment Slots Without Slots Azure Functions on the Consumption plan has long provided deployment slots,… Continue reading Blue-Green and Canary Releases with Zero-Downtime for Azure Functions Flex Consumption with APIM
Azure Bot Service & Microsoft Teams – Architecture and Message Flow
Some time ago, I shared my experience building a secure bot using the Azure Bot Service and Bot Framework. Since then, I’ve frequently received questions about how the underlying system works. In this post, I’ll walk through the internal architecture of the Azure Bot Service—covering the key components, message flow, and supporting services—to provide a… Continue reading Azure Bot Service & Microsoft Teams – Architecture and Message Flow
Implementing RAG with WebRTC and Azure AI Search
This feature is currently in public preview. This preview is provided without a service-level agreement, and we don't recommend it for production workloads. Certain features might not be supported or might have constrained capabilities. Introduction In today's enterprise environment, accessing and leveraging organizational knowledge through natural conversation is becoming increasingly important. Azure OpenAI GPT-4o Realtime… Continue reading Implementing RAG with WebRTC and Azure AI Search
Enhance GitHub Copilot with RAG in VS Code – Part 3
This is a third part of a series of posts where I am writing my learning building a GitHub Copilot extension, RAG, using your own model etc. - First part here- Second part here Introduction Demo Extension in Marketplace As AI continues to revolutionize software development, GitHub Copilot has emerged as a powerful coding assistant.… Continue reading Enhance GitHub Copilot with RAG in VS Code – Part 3
Building GitHub Copilot Extension with Skillset – Part 2
This is a second part of a series of posts where I am writing my learning building a GitHub Copilot extension, RAG, using your own model etc. - First part here- Part 3 here. Introduction: Enhancing GitHub Copilot with Skillsets In the first part of this series, we explored how to extend GitHub Copilot by… Continue reading Building GitHub Copilot Extension with Skillset – Part 2
Reverse Engineering 