Back
Azure infrastructure Terraform layered architecture model showing network, security, traffic, compute and data access
29Mar, 2026

Azure Infrastructure with Terraform/OpenTofu: From Network Design to Scalable Compute

Azure infrastructure Terraform is often presented as a set of individual resources — but real platforms are built as connected architectural layers. When engineers start working with Azure and Terraform, most examples focus on individual resources. A Virtual Network here. A VM there. Maybe a Load Balancer on top. But …

Azure Private DNS Terraform architecture
18Mar, 2026

Azure Private DNS with Terraform — Foundation Before Private Endpoints

In this guide we explore how to deploy Azure Private DNS Terraform and why it forms the architectural foundation behind Private Endpoints and private platform services. When engineers start working with private networking in Azure, they usually begin with Private Endpoints. They deploy a storage account, create a private endpoint, …

Azure NAT Gateway Terraform – private subnet outbound architecture
13Feb, 2026

Azure NAT Gateway with Terraform: Designing Outbound Access for Private Subnets

Private workloads still need the internet.Not for exposure — but for controlled, auditable outbound traffic. In Azure, outbound connectivity is often treated as an afterthought — yet Azure NAT Gateway Terraform provides a clean, architecture-grade way to design outbound identity for private subnets. In production platforms, the real architectural question …

Azure NSG design patterns – NIC-level security boundary architecture
06Feb, 2026

Azure NSG is not a firewall: Designing security boundaries with Terraform (NIC vs Subnet)

Azure NSG design patterns are not about opening ports — they are about defining security boundaries in your network architecture. 🔵 Azure NSG vs Firewall — What’s the Difference? (Terraform Example) module “compute” { source = “github.com/foggykitchen/terraform-az-fk-compute” attach_nsg_to_nic = true nsg_id = module.nsg.id } module “private_subnet_nsg” { source = “github.com/foggykitchen/terraform-az-fk-nsg” …

01Feb, 2026

Azure Load Balancer as a Traffic Contract — A Clean Terraform Module Baseline

Using a Terraform Azure Load Balancer Module as a Clean Baseline This article shows how to use a Terraform Azure Load Balancer module to define an explicit traffic contract between the public edge and independently managed backend virtual machines. Azure Load Balancer is often introduced too late in the infrastructure …

Azure Blob Storage Private Endpoint Terraform
19Jan, 2026

Azure Blob Storage with Private Endpoint — Designing a Private Object Store with Terraform

Azure Blob Private Endpoint Terraform is often treated as a public service by default. 🔵 Terraform Azure Private Endpoint Example (Module-Based) This is a minimal working example of Azure Blob Storage exposed via a Private Endpoint using FoggyKitchen Terraform modules: – Private Endpoint for Blob (module-based) – Private DNS integration …

Azure Files with Private Endpoint and Private VMs architecture using Terraform
16Jan, 2026

Azure Files with Private Endpoint and Private VMs — A Clean Storage Baseline with Terraform

Azure Files Private Endpoint Terraform example using reusable modules. 🔵 Terraform Azure Private Endpoint Example (Module-Based) This is a minimal working example of Azure Private Endpointusing the FoggyKitchen Terraform modules: – Private Endpoint for Azure Files (module-based)– Private DNS integration– Access from private VM inside a VNet This example uses …

azure private vm terraform architecture diagram
23Dec, 2025

Azure Virtual Machines with Load Balancer and Bastion using Terraform/OpenTofu (2026 Edition)

Running Azure private VM Terraform looks simple — until you need to make them reachable for users without exposing public IPs. In this post, we build a production-ready foundation using a Load Balancer for application traffic and Bastion for secure SSH access. The first decisions around networking and access control …

AKS pulling images from Azure Container Registry using Private Endpoint and Private DNS with Terraform
19Dec, 2025

Securing AKS Image Pulls with Azure Private Endpoints (using Terraform/OpenTofu)

VNet, ACR, Private DNS, and Intent-Driven Networking with Terraform AKS ACR Private Endpoint Terraform is a common requirement when securing container image. Designing an Azure Virtual Network is rarely just about “connecting things together”.Once you introduce AKS, Azure Container Registry, and Private Endpoints, networking becomes a first-class architectural concern — …

Azure VNet Terraform module with purpose-driven subnets
18Dec, 2025

Designing Azure VNets with Purpose-Driven Subnets (using Terraform Module)

Azure VNet Terraform Module – Explained An Azure VNet Terraform module is the foundation of every scalable Azure network architecture. Yet in many projects, virtual networks are still designed ad-hoc — without clear intent, subnet boundaries, or future workloads in mind. In this article, I’ll show how to design Azure …