Back
Azure NAT Gateway Terraform – private subnet outbound architecture
13Feb, 2026

Azure NAT Gateway with Terraform: Designing Outbound Access for Private Subnets

Private workloads still need the internet.Not for exposure — but for controlled, auditable outbound traffic. In Azure, outbound connectivity is often treated as an afterthought — yet Azure NAT Gateway Terraform provides a clean, architecture-grade way to design outbound identity for private subnets. In production platforms, the real architectural question …

Azure NSG design patterns – NIC-level security boundary architecture
06Feb, 2026

Azure NSG is not a firewall: Designing security boundaries with Terraform (NIC vs Subnet)

Azure NSG design patterns are not about opening ports — they are about defining security boundaries in your network architecture. 🔵 Azure NSG vs Firewall — What’s the Difference? (Terraform Example) module “compute” { source = “github.com/foggykitchen/terraform-az-fk-compute” attach_nsg_to_nic = true nsg_id = module.nsg.id } module “private_subnet_nsg” { source = “github.com/foggykitchen/terraform-az-fk-nsg” …

azure vmss autoscaling terraform architecture with private vms
29Dec, 2025

Azure Virtual Machine Scale Sets with Load Balancer, Bastion and Terraform/OpenTofu (2026 Edition)

In this post, we configure Azure VMSS autoscaling Terraform to scale private compute without exposing VMs to the internet. Running workloads on individual Azure VMs is straightforward — but production teams rarely stop there.Once your application grows, you need more than one VM, and you need them to scale without …

AKS pulling images from Azure Container Registry using Private Endpoint and Private DNS with Terraform
19Dec, 2025

Securing AKS Image Pulls with Azure Private Endpoints (using Terraform/OpenTofu)

VNet, ACR, Private DNS, and Intent-Driven Networking with Terraform AKS ACR Private Endpoint Terraform is a common requirement when securing container image. Designing an Azure Virtual Network is rarely just about “connecting things together”.Once you introduce AKS, Azure Container Registry, and Private Endpoints, networking becomes a first-class architectural concern — …

Azure VNet Terraform module with purpose-driven subnets
18Dec, 2025

Designing Azure VNets with Purpose-Driven Subnets (using Terraform Module)

Azure VNet Terraform Module – Explained An Azure VNet Terraform module is the foundation of every scalable Azure network architecture. Yet in many projects, virtual networks are still designed ad-hoc — without clear intent, subnet boundaries, or future workloads in mind. In this article, I’ll show how to design Azure …

azure container registry terraform diagram
21Nov, 2025

Deploying Container Images to AKS Using Azure Container Registry: Why It Matters

In this guide, you will learn how Azure Container Registry Terraform works with AKS when deploying workloads with Terraform — a crucial workflow for any real-world Kubernetes project. When you start automating workloads on Azure Kubernetes Service (AKS), the first real challenge is not the cluster itself — it’s your …

Architecture diagram of Azure PostgreSQL Flexible Server deployed with Terraform/OpenTofu using Private DNS and delegated subnet.
27Oct, 2025

Deploying Azure PostgreSQL Flexible Server with Terraform/OpenTofu — Private DNS, Subnet Delegation, and Lifecycle Control

In this post, we’ll explore how to deploy Azure PostgreSQL Terraform, using Private DNS, subnet delegation, and full lifecycle control. Databases are the heart of every cloud deployment. While compute instances can spin up and down in seconds, your data layer demands stability, privacy, and precision. In Azure, that’s where …

infrastructure as code terraform triangulation diagram showing desired state, current state, and state file relationships
25Oct, 2025

đź§± What Is Infrastructure as Code (IaC)? A Practical Look with Terraform

Building cloud infrastructure once meant endless clicking through consoles and wizards. Today, engineers use Infrastructure as Code Terraform to describe and automate their environments — reproducible, version-controlled, and fully auditable. Infrastructure as Code (IaC) changed the way we think about deploying systems. Instead of manually creating VMs, networks, and storage, …

OCI Azure Interconnect Terraform
23Oct, 2025

OCI–Azure Interconnect with Terraform (Part 2): FastConnect + DRG on the OCI Side

OCI Azure Interconnect Terraform – when you’ve finished the Azure side setup (Part 1), the next challenge begins on the Oracle Cloud Infrastructure side — building the FastConnect + DRG layer that makes both clouds truly talk to each other. In this post, I’ll show you the essence of the …

FoggyKitchen Manifesto 2025 – Cloud automation with your own brain, not someone else’s prompt.
19Oct, 2025

đź§­ FoggyKitchen Manifesto 2025 – Built by Humans. Enhanced by AI. Guided by Understanding.

The FoggyKitchen Manifesto 2025 – Why It Still Matters in the AI Era FoggyKitchen Manifesto 2025 is our renewed declaration of how we approach cloud automation in the AI era. In 2018, we published the original FoggyKitchen Manifesto — our declaration that Infrastructure as Code should be crafted like recipes: …