Private workloads still need the internet.Not for exposure — but for controlled, auditable outbound traffic. In Azure, outbound connectivity is often treated as an afterthought — yet Azure NAT Gateway Terraform provides a clean, architecture-grade way to design outbound identity for private subnets. In production platforms, the real architectural question …
Azure NSG design patterns are not about opening ports — they are about defining security boundaries in your network architecture. 🔵 Azure NSG vs Firewall — What’s the Difference? (Terraform Example) module “compute” { source = “github.com/foggykitchen/terraform-az-fk-compute” attach_nsg_to_nic = true nsg_id = module.nsg.id } module “private_subnet_nsg” { source = “github.com/foggykitchen/terraform-az-fk-nsg” …
Using a Terraform Azure Load Balancer Module as a Clean Baseline This article shows how to use a Terraform Azure Load Balancer module to define an explicit traffic contract between the public edge and independently managed backend virtual machines. Azure Load Balancer is often introduced too late in the infrastructure …
Azure Managed Disks Terraform allow you to design Virtual Machine persistence explicitly, using independent data disks, predictable LUN mapping, and clean lifecycle separation. When you deploy a single Azure Virtual Machine with one disk, storage feels trivial. The moment you attach a second disk, Azure stops being “just a VM” …
Azure Blob Private Endpoint Terraform is often treated as a public service by default. 🔵 Terraform Azure Private Endpoint Example (Module-Based) This is a minimal working example of Azure Blob Storage exposed via a Private Endpoint using FoggyKitchen Terraform modules: – Private Endpoint for Blob (module-based) – Private DNS integration …
In this post, we configure Azure VMSS autoscaling Terraform to scale private compute without exposing VMs to the internet. Running workloads on individual Azure VMs is straightforward — but production teams rarely stop there.Once your application grows, you need more than one VM, and you need them to scale without …
Running Azure private VM Terraform looks simple — until you need to make them reachable for users without exposing public IPs. In this post, we build a production-ready foundation using a Load Balancer for application traffic and Bastion for secure SSH access. The first decisions around networking and access control …
AKS Log Analytics Terraform is one of the cleanest ways to enable Azure Monitor and Container Insights for your Kubernetes clusters. In this article, I’ll show how the FoggyKitchen AKS module automatically creates a Log Analytics Workspace and connects it to your cluster without any manual steps. Monitoring is one …
In this guide, you will learn how Azure Container Registry Terraform works with AKS when deploying workloads with Terraform — a crucial workflow for any real-world Kubernetes project. When you start automating workloads on Azure Kubernetes Service (AKS), the first real challenge is not the cluster itself — it’s your …
In this post, we’ll explore how to deploy Azure PostgreSQL Terraform, using Private DNS, subnet delegation, and full lifecycle control. Databases are the heart of every cloud deployment. While compute instances can spin up and down in seconds, your data layer demands stability, privacy, and precision. In Azure, that’s where …










