Cloud Architecture Episodes

What happens when your cloud strategy cannot live entirely in the public cloud? Organizations are modernizing infrastructure with Azure, platform services, Infrastructure as Code, automated deployment pipelines, and Azure Landing Zones. At the same time, some workloads still need to remain close to factories, offices, regulated environments, existing infrastructure, or latency-sensitive systems. In this episode of M365 FM, Mirko Peters talks with Microsoft MVP Christoffer Klarskov Jakobsen about...

Microsoft 365 Copilot is moving far beyond prompt engineering. As organizations adopt AI more seriously, the challenge becomes connecting Copilot and AI agents to business applications, Microsoft Graph, organizational knowledge, APIs, workflows, and enterprise data while maintaining security and governance. In this episode of the M365 FM Podcast, Mirko Peters talks with Microsoft MVP and AI Tech Lead Yves Habersaat about Microsoft 365 Copilot extensibility, Copilot Studio, Microsoft Foundry, Mod...

Enterprise integration is everywhere, yet most people only notice it when something stops working. Applications need to communicate, APIs need to exchange information, ERP systems need to connect with business processes, and data needs to move reliably across organizational boundaries. For decades, integration has largely followed a deterministic model: when this happens, do that. Developers and architects define triggers, conditions, transformations, retries, exceptions, and destinations in adv...

Most developers think of a database as the place where an application stores information. Tables, transactions, indexes, stored procedures, reporting, backups, and reliable data storage are the traditional responsibilities we associate with SQL. But what happens when the database itself becomes an active participant in the application architecture? In this episode of M365 FM, Mirko Peters talks with Dirceu Resende about how Azure SQL Database is evolving beyond traditional data storage. The conv...

Microsoft 365 can begin like a garage band. A few people collaborate, everybody knows what the others are doing, Teams are created when needed, SharePoint sites appear naturally, and external guests are invited without requiring complicated processes. But as the organization grows, more musicians join the band. Teams multiply, SharePoint sites accumulate, guests remain after projects end, naming conventions become inconsistent, ownership becomes unclear, and manual administration can no longer k...

Microsoft Entra Cloud Sync provides organizations with a cloud-managed way to synchronize identities from on-premises Active Directory into Microsoft Entra ID. But how is it different from Microsoft Entra Connect, why would an organization choose it, and what has changed in 2026? In this episode of Microsoft Knowledge Nuggets on M365 FM, we break down Entra Cloud Sync from the basic identity problem through architecture, high availability, scoping, security, hybrid environments, and the decision...

Microsoft Entra ID is built for modern cloud identity—but what happens when an older application moves to Azure and still expects a traditional Windows domain?In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Microsoft Entra Domain Services and the specific problem it solves. We look at why moving a legacy application into Azure doesn't automatically remove its dependency on LDAP, Kerberos, NTLM, domain join, DNS, and Group Policy—and how Microsoft provides these capabilities...

Microsoft Cloud PKI brings certificate-based authentication into the cloud—but what exactly does that mean, why would you need certificates, and can it really replace traditional on-premises PKI infrastructure?In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Microsoft Cloud PKI in plain English. We explore certificates, certificate authorities, Intune, SCEP, device authentication, secure Wi-Fi, VPN access, certificate renewal and revocation, and where Cloud PKI fits into a m...

Building a successful Azure workload involves much more than selecting the right cloud services. Reliability problems, security gaps, unexpected costs, weak operational processes, and poor performance often come from the architectural decisions surrounding those services.In this episode of M365 FM, we explain the Azure Well-Architected Framework in clear, practical language. You will learn how its five pillars help teams design, operate, and continuously improve Azure workloads while balancing b...

Quick Answer: Microsoft Purview Data Loss Prevention helps organizations detect sensitive information and apply policy-based controls across Microsoft 365. It can warn users, block risky sharing, and provide visibility for security and compliance teams, helping protect data while allowing approved business work to continue. In today's digital landscape, protecting sensitive information is crucial. Data breaches can have devastating financial impacts, with the average cost of a breach reaching $...

Quick Answer: Microsoft Entra Private Access is an important Microsoft topic for teams that need clearer technical decisions, safer implementation, and practical operational value. This episode explains what it does, where it fits in the Microsoft ecosystem, and the key considerations for administrators, architects, and business stakeholders. In today’s digital landscape, securing access to private applications is crucial. Microsoft Entra Private Access offers a modern solution that enhances se...

Quick Answer: Microsoft Graph Delta Queries is an important Microsoft topic for teams that need clearer technical decisions, safer implementation, and practical operational value. This episode explains what it does, where it fits in the Microsoft ecosystem, and the key considerations for administrators, architects, and business stakeholders. Microsoft Graph Delta Queries revolutionize how you synchronize data within Microsoft 365 applications. Instead of downloading entire datasets, you can eff...

Quick Answer: Microsoft Graph Webhooks is an important Microsoft topic for teams that need clearer technical decisions, safer implementation, and practical operational value. This episode explains what it does, where it fits in the Microsoft ecosystem, and the key considerations for administrators, architects, and business stakeholders. Microsoft Graph Webhooks serve as a powerful tool for developers. They enable you to receive notifications in real-time about changes in Microsoft Graph resourc...

Quick Answer: Microsoft Graph Change Notifications is an important Microsoft topic for teams that need clearer technical decisions, safer implementation, and practical operational value. This episode explains what it does, where it fits in the Microsoft ecosystem, and the key considerations for administrators, architects, and business stakeholders. Microsoft Graph Change Notifications play a crucial role in real-time data management. They allow your applications to respond instantly to changes ...

Microsoft Entra External ID is Microsoft's identity and access management solution for people outside your organization. It enables secure authentication and authorization for business partners, guest users, customers, and consumer applications while supporting modern identity experiences, strong security, and seamless collaboration. Whether you're building customer-facing applications or enabling secure B2B collaboration, External ID provides a scalable platform for managing external identities. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Microsoft Entra External ID in simple terms and shows how it helps organizations securely manage external users. You'll learn the difference between B2B collaboration and Customer Identity and Access Management (CIAM), how external tenants work, and how users can sign in using Microsoft accounts, social identities like Google or Facebook, email one-time passcodes, or other supported identity providers. The episode als…

Microsoft Graph Connectors extend the Microsoft Graph by bringing data from external systems into Microsoft 365, making it searchable and accessible through Microsoft Search, Microsoft Copilot, and other Microsoft 365 experiences. Instead of limiting users to data stored in Microsoft 365, Graph Connectors allow organizations to securely index information from third-party platforms such as Salesforce, ServiceNow, Confluence, Jira, file shares, websites, databases, and custom business applications. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Microsoft Graph Connectors in simple terms and shows how they help unify knowledge across your organization. You'll learn how Graph Connectors crawl external data sources, create searchable indexes, apply security trimming, and surface relevant content directly in Microsoft Search and Microsoft Copilot. The episode also explains the architecture behind connectors, indexing pipelines, permissions, and how external content…

Azure Advisor is Microsoft's personalized cloud optimization service that continuously analyzes your Azure environment and provides actionable recommendations to improve reliability, security, performance, operational excellence, and cost efficiency. By identifying best practice improvements, Azure Advisor helps organizations optimize workloads, reduce unnecessary spending, and strengthen their cloud infrastructure with minimal effort. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Azure Advisor in simple terms and shows how it helps administrators make smarter decisions across their Azure subscriptions. You'll learn how Azure Advisor evaluates your resources, prioritizes recommendations, and categorizes them into key areas such as cost optimization, security, reliability, operational excellence, and performance. You'll also discover how to review recommendations, implement suggested changes, and measure the impact on your environment. The episode covers c…

Azure Cost Management is Microsoft's built-in FinOps solution for monitoring, analyzing, and optimizing cloud spending across Azure and other Microsoft cloud services. It provides visibility into where your money is being spent, helps identify cost-saving opportunities, and enables organizations to control budgets before unexpected expenses occur. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Azure Cost Management in simple terms and shows how to take control of your Azure costs. You'll learn how Cost Analysis helps you break down spending by subscription, resource group, service, or tag, how budgets and alerts notify you before costs exceed expectations, and how forecasting predicts future cloud expenses based on current usage trends. The episode also explores practical cost optimization strategies, including Azure Advisor recommendations, Reserved Instances, Savings Plans, Azure Hybrid Benefit, rightsizing resources, tagging for cost allocation, and ide…

Azure Automation is a cloud-based service that helps organizations automate repetitive, time-consuming, and error-prone operational tasks across Azure, on-premises environments, and even other cloud platforms. Instead of performing manual administration, IT teams can create automated workflows that improve consistency, reduce operational costs, and free up time for more valuable work. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Azure Automation in simple terms and demonstrates how it can simplify day-to-day cloud management. You'll learn how Automation Accounts provide a central place for managing automation, how PowerShell, Python, and graphical runbooks execute administrative tasks, and how schedules and webhooks enable fully automated or event-driven workflows. The episode also explores Hybrid Runbook Workers, allowing automations to run on on-premises servers or machines outside Azure. It covers common real-world scenarios such as starting and stopp…

Azure Managed Disks are Microsoft's fully managed block storage solution for Azure Virtual Machines, removing the complexity of managing storage infrastructure while delivering reliable, scalable, and high-performance storage. Instead of manually creating and maintaining storage accounts, Azure automatically handles provisioning, availability, redundancy, and lifecycle management, allowing administrators to focus on their workloads rather than storage operations. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Azure Managed Disks in simple terms and shows how they simplify virtual machine storage in Azure. You'll learn the difference between OS disks and data disks, discover the available disk types—including Standard HDD, Standard SSD, Premium SSD, Premium SSD v2, and Ultra Disks—and understand how to choose the right option based on performance, latency, and cost. The episode also covers snapshots, backups, encryption, availability zones, redundancy optio…

Azure Disk Storage provides the persistent block storage used by Azure Virtual Machines. Unlike Azure Blob Storage, which stores files and objects, Azure Disks act like the physical hard drives in a traditional server. Every Azure VM relies on managed disks for its operating system, applications, and data, while Microsoft handles availability, durability, redundancy, and infrastructure management behind the scenes. Azure offers multiple disk types—including Standard HDD, Standard SSD, Premium SSD, Premium SSD v2, and Ultra Disks—so you can balance cost and performance based on your workload. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Azure Disk Storage in simple terms and shows how managed disks power Azure Virtual Machines. You'll learn the difference between OS disks, data disks, and temporary disks, when to use each disk type, and how disk performance is measured through IOPS and throughput. The episode also covers snapshots, backups, encryption, redun…

Azure Blob Storage is Microsoft's scalable object storage service designed to store massive amounts of unstructured data such as images, videos, documents, backups, logs, and application files. Instead of using a traditional file system, data is stored as objects called blobs inside containers, making it highly durable, cost-effective, and accessible from anywhere via REST APIs or Azure SDKs. In this episode of Microsoft Knowledge Nuggets, Mirko Peters explains Azure Blob Storage in simple terms and shows why it is one of the most fundamental services in Azure. You'll learn how storage accounts, containers, and blobs work together, the differences between Hot, Cool, Cold, and Archive access tiers, and how redundancy options protect your data against failures. The episode also covers security features such as Microsoft Entra ID integration, Shared Access Signatures (SAS), encryption, private endpoints, and lifecycle management to automatically optimize storage costs. You'll also …

CI/CD pipelines are designed to accelerate software delivery, but as organizations grow, speed alone is no longer enough. Without governance, automated pipelines can spread security risks, configuration drift, compliance violations, and inconsistent deployment practices faster than ever before. In this episode, you'll learn why governance is a fundamental part of modern CI/CD rather than an afterthought. We explore how policies, security controls, and quality gates should be embedded directly into the software delivery process so every deployment follows the same trusted standards automatically. The episode explains key concepts such as Policy as Code, Infrastructure as Code, automated testing, security scanning, compliance validation, approval workflows, and continuous monitoring. Instead of relying on manual reviews, successful organizations build pipelines that enforce governance consistently across every environment. You'll also discover how platform engineering and stand…

Choosing between a monorepo and multiple repositories may look like a technical decision about Git performance, build times, or repository size. In reality, it is an organizational decision that determines how teams communicate, coordinate changes, and deliver software. In this episode, we challenge the belief that either monorepos or multirepos are automatically the better architecture. A monorepo brings applications, services, libraries, infrastructure code, and shared components together in one place. This enables unified tooling, consistent standards, atomic changes, easier refactoring, and complete visibility across dependencies. However, as more teams become involved, approvals, builds, reviews, and release planning can become increasingly complex. A multirepo model gives teams clearer ownership, independent deployments, smaller codebases, and more flexible release cycles. But the coordination work does not disappear. It moves into APIs, versioning, documentation, contract…