Back
Azure NAT Gateway Terraform – private subnet outbound architecture
13Feb, 2026

Azure NAT Gateway with Terraform: Designing Outbound Access for Private Subnets

Private workloads still need the internet.Not for exposure — but for controlled, auditable outbound traffic. In Azure, outbound connectivity is often treated as an afterthought — yet Azure NAT Gateway Terraform provides a clean, architecture-grade way to design outbound identity for private subnets. In production platforms, the real architectural question …

Azure NSG design patterns – NIC-level security boundary architecture
06Feb, 2026

Azure NSG is not a firewall: Designing security boundaries with Terraform (NIC vs Subnet)

Azure NSG design patterns are not about opening ports — they are about defining security boundaries in your network architecture. 🔵 Azure NSG vs Firewall — What’s the Difference? (Terraform Example) module “compute” { source = “github.com/foggykitchen/terraform-az-fk-compute” attach_nsg_to_nic = true nsg_id = module.nsg.id } module “private_subnet_nsg” { source = “github.com/foggykitchen/terraform-az-fk-nsg” …

01Feb, 2026

Azure Load Balancer as a Traffic Contract — A Clean Terraform Module Baseline

Using a Terraform Azure Load Balancer Module as a Clean Baseline This article shows how to use a Terraform Azure Load Balancer module to define an explicit traffic contract between the public edge and independently managed backend virtual machines. Azure Load Balancer is often introduced too late in the infrastructure …

Azure Virtual Machine architecture with multiple Azure Managed Disks Terraform
21Jan, 2026

Azure Managed Disks with Terraform: Designing Multi-Disk VM Persistence (The Right Way)

Azure Managed Disks Terraform allow you to design Virtual Machine persistence explicitly, using independent data disks, predictable LUN mapping, and clean lifecycle separation. When you deploy a single Azure Virtual Machine with one disk, storage feels trivial. The moment you attach a second disk, Azure stops being “just a VM” …

Azure Blob Storage Private Endpoint Terraform
19Jan, 2026

Azure Blob Storage with Private Endpoint — Designing a Private Object Store with Terraform

Azure Blob Private Endpoint Terraform is often treated as a public service by default. 🔵 Terraform Azure Private Endpoint Example (Module-Based) This is a minimal working example of Azure Blob Storage exposed via a Private Endpoint using FoggyKitchen Terraform modules: – Private Endpoint for Blob (module-based) – Private DNS integration …

azure vmss autoscaling terraform architecture with private vms
29Dec, 2025

Azure Virtual Machine Scale Sets with Load Balancer, Bastion and Terraform/OpenTofu (2026 Edition)

In this post, we configure Azure VMSS autoscaling Terraform to scale private compute without exposing VMs to the internet. Running workloads on individual Azure VMs is straightforward — but production teams rarely stop there.Once your application grows, you need more than one VM, and you need them to scale without …

azure private vm terraform architecture diagram
23Dec, 2025

Azure Virtual Machines with Load Balancer and Bastion using Terraform/OpenTofu (2026 Edition)

Running Azure private VM Terraform looks simple — until you need to make them reachable for users without exposing public IPs. In this post, we build a production-ready foundation using a Load Balancer for application traffic and Bastion for secure SSH access. The first decisions around networking and access control …

aks log analytics terraform diagram
24Nov, 2025

AKS Log Analytics with Terraform — How the FoggyKitchen Module Automates Azure Monitor Integration

AKS Log Analytics Terraform is one of the cleanest ways to enable Azure Monitor and Container Insights for your Kubernetes clusters. In this article, I’ll show how the FoggyKitchen AKS module automatically creates a Log Analytics Workspace and connects it to your cluster without any manual steps. Monitoring is one …

azure container registry terraform diagram
21Nov, 2025

Deploying Container Images to AKS Using Azure Container Registry: Why It Matters

In this guide, you will learn how Azure Container Registry Terraform works with AKS when deploying workloads with Terraform — a crucial workflow for any real-world Kubernetes project. When you start automating workloads on Azure Kubernetes Service (AKS), the first real challenge is not the cluster itself — it’s your …

Architecture diagram of Azure PostgreSQL Flexible Server deployed with Terraform/OpenTofu using Private DNS and delegated subnet.
27Oct, 2025

Deploying Azure PostgreSQL Flexible Server with Terraform/OpenTofu — Private DNS, Subnet Delegation, and Lifecycle Control

In this post, we’ll explore how to deploy Azure PostgreSQL Terraform, using Private DNS, subnet delegation, and full lifecycle control. Databases are the heart of every cloud deployment. While compute instances can spin up and down in seconds, your data layer demands stability, privacy, and precision. In Azure, that’s where …