Azure FinOps for Enterprise Infrastructure

I'm an Azure Architect managing 31,000+ resources.
I write about the Azure problems Microsoft doesn't document.

  • Cost reporting that actually works
  • Governance at scale
  • Real KQL queries, not theory
Subscribe for FinOps Insights

Azure Admin Starter Kit (Free Download)

Get my KQL cheat sheet, 50 Windows + 50 Linux commands, and an Azure RACI template in one free bundle.

Download the Starter Kit
Browse all tags → Search
Building a Persistent Azure Operations Dashboard (AZQR + App Service + Storage)

Building a Persistent Azure Operations Dashboard (AZQR + App Service + Storage)

2025-12-17

Microsoft's Azure Quick Review (AZQR) consolidates Advisor, Defender for Cloud, Policy, and Cost Management into one dashboard - but only runs locally. Here's how to host it in Azure App Service for 24/7 team access, scheduled scans, and historical tracking. Complete with Dockerfile, deployment scripts, and Entra ID authentication. Part 3 of the Azure Operations Platform series.

Read →
Operational Intelligence: Using Azure Tags for Instant Answers (2025)

Operational Intelligence: Using Azure Tags for Instant Answers (2025)

2025-12-17

Azure tags evolved from preventing Azure Update Manager disasters to becoming our operational intelligence layer. The Type tag excludes appliances from automated patching while enabling instant answers to executive questions about on-prem footprint, vendor inventory, and migration progress. Policy enforcement in Deny mode, tag-based filtering workflows, and KQL queries that answer 'how many machines on-prem?' in 30 seconds instead of manual 3-day inventory projects.

Read →
Azure Migrate's 18-Month Data Deletion: The Enterprise Migration Timer Microsoft Calls 'Expected Behavior'

Azure Migrate's 18-Month Data Deletion: The Enterprise Migration Timer Microsoft Calls 'Expected Behavior'

2025-12-16

Azure Migrate appliances have an 18-month hard limit before mandatory re-registration that deletes all discovery data. Microsoft documents this as 'expected behavior' in the FAQ but provides no alerts, no data preservation, and no migration path. The certificate expires at 12 months with one 6-month extension available, then forces complete appliance reconfiguration with total data loss at month 18.

Read →