Private workloads still need the internet.Not for exposure — but for controlled, auditable outbound traffic. In Azure, outbound connectivity is often treated as an afterthought — yet Azure NAT Gateway Terraform provides a clean, architecture-grade way to design outbound identity for private subnets. In production platforms, the real architectural question …
Azure NSG design patterns are not about opening ports — they are about defining security boundaries in your network architecture. 🔵 Azure NSG vs Firewall — What’s the Difference? (Terraform Example) module “compute” { source = “github.com/foggykitchen/terraform-az-fk-compute” attach_nsg_to_nic = true nsg_id = module.nsg.id } module “private_subnet_nsg” { source = “github.com/foggykitchen/terraform-az-fk-nsg” …
In this post, we configure Azure VMSS autoscaling Terraform to scale private compute without exposing VMs to the internet. Running workloads on individual Azure VMs is straightforward — but production teams rarely stop there.Once your application grows, you need more than one VM, and you need them to scale without …
VNet, ACR, Private DNS, and Intent-Driven Networking with Terraform AKS ACR Private Endpoint Terraform is a common requirement when securing container image. Designing an Azure Virtual Network is rarely just about “connecting things together”.Once you introduce AKS, Azure Container Registry, and Private Endpoints, networking becomes a first-class architectural concern — …
Azure VNet Terraform Module – Explained An Azure VNet Terraform module is the foundation of every scalable Azure network architecture. Yet in many projects, virtual networks are still designed ad-hoc — without clear intent, subnet boundaries, or future workloads in mind. In this article, I’ll show how to design Azure …
In this guide, you will learn how Azure Container Registry Terraform works with AKS when deploying workloads with Terraform — a crucial workflow for any real-world Kubernetes project. When you start automating workloads on Azure Kubernetes Service (AKS), the first real challenge is not the cluster itself — it’s your …
In this post, we’ll explore how to deploy Azure PostgreSQL Terraform, using Private DNS, subnet delegation, and full lifecycle control. Databases are the heart of every cloud deployment. While compute instances can spin up and down in seconds, your data layer demands stability, privacy, and precision. In Azure, that’s where …
Building cloud infrastructure once meant endless clicking through consoles and wizards. Today, engineers use Infrastructure as Code Terraform to describe and automate their environments — reproducible, version-controlled, and fully auditable. Infrastructure as Code (IaC) changed the way we think about deploying systems. Instead of manually creating VMs, networks, and storage, …
OCI Azure Interconnect Terraform – when you’ve finished the Azure side setup (Part 1), the next challenge begins on the Oracle Cloud Infrastructure side — building the FastConnect + DRG layer that makes both clouds truly talk to each other. In this post, I’ll show you the essence of the …
The FoggyKitchen Manifesto 2025 – Why It Still Matters in the AI Era FoggyKitchen Manifesto 2025 is our renewed declaration of how we approach cloud automation in the AI era. In 2018, we published the original FoggyKitchen Manifesto — our declaration that Infrastructure as Code should be crafted like recipes: …










