Cloud Architecture Episodes

AI agents are often managed like traditional service accounts—but that mindset creates serious security and governance risks. This episode explains why AI agents should be treated as autonomous digital identities with their own lifecycle, permissions, and accountability instead of static technical accounts. The discussion highlights that agents don't just authenticate to services—they make decisions, access business data, trigger workflows, and interact with multiple systems. Because of this, identity becomes the primary security boundary. Organizations should assign every agent its own identity, apply least-privilege access, enforce Zero Trust principles, and continuously monitor behavior rather than relying on broad, long-lived permissions. The episode also covers the importance of lifecycle management for non-human identities. Just like employees, AI agents require onboarding, role assignments, permission reviews, auditing, and secure decommissioning. Without proper governanc…

Building AI agents is no longer just a development challenge—it’s an operational one. In this episode of the M365 FM Podcast, we explore the concept of the Synthetic Platform Team and how organizations can successfully operationalize Azure Copilot Agents at enterprise scale. Rather than treating AI agents as isolated applications, the discussion introduces a platform engineering approach where reusable infrastructure, governance, observability, and automation become the foundation for every agent. The episode explains how platform teams can standardize identity, security, model access, prompt management, deployment pipelines, monitoring, and cost optimization while giving development teams the freedom to build innovative AI solutions. Topics include Azure AI Foundry, Azure OpenAI, Copilot technologies, Infrastructure as Code, CI/CD, telemetry, policy enforcement, and lifecycle management for AI agents. Listeners will learn why successful enterprise AI depends less on individual …

In this episode of the M365.fm Podcast, Mirko Peters explores whether custom APIs are becoming obsolete and how Microsoft’s new Rayfin platform could fundamentally change the way enterprise applications are built. Traditionally, developers have spent countless hours creating backend services, authentication layers, databases, APIs, and infrastructure before delivering actual business value. Rayfin introduces a different approach by offering a Backend-as-a-Service (BaaS) model that automates much of this complexity. The episode examines how Rayfin enables developers to define data models, business logic, security policies, and APIs directly in code while Microsoft Fabric automatically provisions and manages the backend infrastructure. Instead of building and maintaining custom APIs from scratch, organizations can focus on application functionality while inheriting enterprise-grade governance, security, compliance, and scalability from the Fabric platform. Mirko discusses the broa…

Hybrid work has fundamentally changed how organizations connect employees, but creating engaging virtual events remains a major challenge. In this episode of the M365 FM Podcast, we explore what it really takes to engineer successful high-stakes hybrid events using Microsoft Teams Immersive Spaces and Microsoft Mesh. Rather than focusing on product marketing, the discussion examines the technical realities that determine whether an immersive event succeeds or fails. A key concept introduced is the “Ghost Town Effect” — when participants abandon virtual experiences due to poor performance, lagging avatars, broken spatial audio, synchronization issues, and low engagement. Even the most visually impressive virtual environments can quickly become ineffective if the user experience suffers. The episode explores the evolution of Microsoft Mesh and Teams Immersive Spaces, highlighting how organizations can move beyond traditional video meetings to create more interactive and collaborat…

In this episode of M365 FM, Mirko Peters sits down with Microsoft MVP Jonathan Hope to explore why identity has become the most critical security boundary in modern cloud environments. As organizations move deeper into Microsoft 365, Azure, and cloud-native architectures, traditional network-based security models are no longer enough. Jonathan explains how Microsoft Entra ID acts as the control plane for security and why mismanaged identities, excessive permissions, and poorly maintained Conditional Access policies create significant risk. The conversation dives into the concept of “identity debt” — the gradual accumulation of exceptions, legacy configurations, guest accounts, workload identities, and hybrid synchronization issues that weaken an organization’s security posture over time. The episode covers practical strategies for implementing Zero Trust principles, designing effective Conditional Access policies, enforcing least-privilege access, and protecting privileged accou…

AI agents are only as valuable as the systems they can access. While much of the industry focuses on models, prompts, and reasoning capabilities, the real challenge in enterprise AI is connectivity. In this episode, we take a deep architectural dive into the Model Context Protocol (MCP), the emerging standard that is rapidly becoming the integration layer for Microsoft Copilot, custom AI agents, Dynamics 365, Azure services, and enterprise applications. The discussion explores why traditional APIs were designed for developers and applications, not autonomous AI agents that need to dynamically discover capabilities, understand available tools, and execute actions across business systems. As organizations deploy more AI solutions, integration has become one of the biggest bottlenecks to scaling enterprise AI. MCP addresses this challenge by providing a standardized protocol that allows agents to interact with tools, resources, and external systems in a more intelligent and flexible w…

The rise of enterprise AI has created a fundamental challenge: how can organizations leverage powerful language models without exposing their most valuable proprietary data? In this episode of M365.fm, we explore the growing adoption of Private LoRA (Low-Rank Adaptation) as a practical architecture for secure AI systems built on sensitive enterprise information. Rather than sending confidential documents, intellectual property, customer records, or internal knowledge to public AI services, Private LoRA enables organizations to adapt and customize foundation models while keeping their data within controlled environments. The discussion explains why traditional fine-tuning approaches are often expensive, difficult to govern, and introduce significant security and compliance concerns. The episode breaks down how LoRA works by modifying only a small subset of model parameters, allowing organizations to create specialized AI capabilities without retraining entire large language model…

Manual tagging is dead—and it’s quietly undermining your Microsoft 365 governance strategy. In this episode, we explore why traditional metadata management based on dropdown menus, user-selected labels, and manual classification no longer works in modern organizations. The volume of content generated across SharePoint, Teams, OneDrive, Copilot, and Microsoft 365 has grown beyond what humans can reliably classify. The problem isn’t that users are unwilling to tag content—it’s that manual tagging is inconsistent, incomplete, and impossible to scale. When metadata quality declines, governance suffers. Search results become unreliable, retention policies lose effectiveness, compliance controls weaken, and AI tools like Microsoft Copilot struggle to understand and protect organizational data. The episode examines how Microsoft Purview and AI-powered classification are changing the game. Instead of relying on users to choose the correct label, modern governance systems can analyze …

As quantum computing moves from theory toward reality, many organizations are focusing on replacing RSA and ECC with post-quantum cryptography. But in this episode of M365.fm, Mirko Peters argues that simply choosing a new algorithm is not enough. The real challenge is cryptographic agility: the ability to rapidly adapt, replace, and evolve cryptographic systems as threats, standards, and technologies change. The discussion explores why most enterprise environments are deeply dependent on cryptography in ways many organizations don't fully understand. Certificates, identity systems, VPNs, TLS connections, APIs, cloud workloads, IoT devices, and long-lived data all rely on cryptographic foundations that may become vulnerable in a post-quantum world. The biggest risk is not that quantum computers arrive tomorrow—it is that organizations cannot adapt quickly when change becomes necessary. The episode examines how crypto-agility shifts the conversation from algorithm selection to ar…

Cloud strategies often focus on scalability, cost optimization, and centralized services, but many organizations overlook one critical factor: latency. In this episode of M365 FM, Mirko Peters explores why network latency can become a major barrier to application performance and user experience, especially as businesses increasingly rely on cloud-based services. The discussion examines the concept of the “latency wall” and explains why simply moving workloads to the cloud does not automatically guarantee better performance. For applications that require real-time processing, industrial automation, IoT, AI inference, or low-latency user interactions, the physical distance between users, devices, and cloud datacenters can create significant challenges. The episode highlights how edge computing is emerging as a solution by bringing compute and data processing closer to where data is generated. Rather than sending every request to a centralized cloud region, organizations can levera…

What does the future of Azure look like, and how are Infrastructure as Code and DevOps transforming the way organizations build and manage cloud solutions? In this episode of M365 FM, host Mirko Peters is joined by Microsoft Azure MVP Maik van der Gaag for an in-depth discussion about modern cloud engineering, automation, and the evolving Azure ecosystem. Maik shares insights from his extensive experience helping organizations adopt cloud technologies and modern development practices. The conversation explores why Infrastructure as Code (IaC) has become a critical foundation for scalable and reliable cloud environments. Maik explains how tools such as Terraform and Bicep enable teams to automate deployments, improve consistency, reduce configuration drift, and accelerate delivery across Azure environments. Beyond the technology, the episode highlights the cultural side of DevOps. Successful cloud transformation is not only about tools and automation but also about collaborati…

Learn how to build low-cost AI agents in Microsoft Cloud with Azure OpenAI, Copilot Studio, Power Platform, and practical cost controls.

The explosion of AI-powered applications has created a new challenge: how do you efficiently search through billions of vector embeddings without exploding infrastructure costs? In this episode, we explore the “billion-vector problem” and compare two leading vector search algorithms available in Azure AI Search: HNSW (Hierarchical Navigable Small World) and DiskANN. While HNSW has become the industry standard thanks to its fast in-memory performance and high recall, it requires significant RAM as datasets grow. DiskANN, originally developed by Microsoft Research, takes a different approach by leveraging SSD storage to dramatically reduce memory requirements while maintaining excellent search accuracy at massive scale. We break down how each algorithm works, where they shine, and the trade-offs architects need to consider when designing Retrieval-Augmented Generation (RAG), semantic search, and AI agent solutions. The discussion covers performance, scalability, operational costs, up…

In this episode, Mirko Peters explores why successful Microsoft 365 strategy should be approached like building a synthetic market rather than deploying technology in isolation. The core idea is that Microsoft 365 creates an internal economy where information, collaboration, automation, governance, and AI capabilities continuously interact. Organizations that focus only on individual tools such as Teams, SharePoint, Power Platform, or Copilot often miss the larger system dynamics that drive long-term value. The discussion highlights that every platform decision creates incentives and behaviors. Poor governance can encourage content sprawl, uncontrolled workspace growth, and fragmented knowledge, while well-designed governance creates trust, discoverability, and sustainable adoption. The episode argues that strategy is not about maximizing feature usage but about shaping the conditions that allow productive behaviors to emerge naturally across the organization. A key theme is tha…

This episode of The Pro Code Edge explores how developers can extend Microsoft 365 Copilot with custom plugins powered by Azure Functions. The discussion focuses on moving beyond out-of-the-box capabilities to create tailored enterprise solutions that connect Copilot with business systems, APIs, and proprietary data. Azure Functions are presented as an ideal platform for Copilot extensibility due to their serverless nature, scalability, and cost efficiency. By exposing business logic through secure APIs, developers can enable Copilot to retrieve information, execute processes, and interact with external applications using natural language. The hosts emphasize that successful Copilot plugins require strong architectural foundations. Key considerations include authentication with Microsoft Entra ID, authorization, security, monitoring, error handling, and governance. Enterprise-grade solutions must be designed with reliability, maintainability, and compliance in mind from the begi…

Enterprise search is no longer limited by storage capacity or indexing speed. The real challenge is the growing gap between when information is created and when it becomes discoverable. This article explores how Microsoft Graph API Discovery is changing enterprise search by shifting from traditional crawl-and-index models to a relationship-driven, real-time discovery architecture. Traditional enterprise search relies on scheduled indexing, which often creates delays, stale results, and fragmented knowledge across systems. As organizations generate data across Teams, SharePoint, Outlook, OneDrive, and other Microsoft 365 services, keeping search indexes current becomes increasingly difficult. Microsoft Graph approaches the problem differently. Instead of focusing solely on where information is stored, it understands how content, people, conversations, meetings, permissions, and business processes are connected. This graph-based model enables search experiences that are contextual…

Microsoft 365’s built-in redundancy keeps services running, but it does not guarantee business recovery after ransomware, insider threats, or accidental deletion. This article explains why many organizations wrongly assume synchronization equals protection, when in reality corrupted or deleted data can spread instantly across the environment. The core argument is that traditional backup strategies are no longer enough in modern cloud environments. Businesses need an isolated vault architecture — a logically separated and immutable recovery layer that cannot be compromised by the same identities, permissions, or attack paths affecting production systems. The article highlights how attackers increasingly target backup systems first, making “connected backups” a major weakness. A secure recovery strategy therefore requires isolation, immutability, strict access separation, and clean recovery points that survive tenant-wide compromise. It also emphasizes that resilience is not ju…

In this episode of the m365.fm podcast, host Mirko Peters speaks with cybersecurity expert Viktor Hedberg about the importance of securing enterprise environments through Active Directory (AD) tiering and privileged access management. The discussion explores how attackers commonly target privileged accounts to move laterally through corporate networks and why traditional “flat” admin models are no longer sufficient. Viktor explains the concept of AD tiering, where administrative privileges are separated into security tiers to reduce the blast radius of compromised credentials. He also highlights the role of privileged access workstations (PAWs), just-in-time administration, and strong identity protection practices. The episode covers real-world attack scenarios, lessons learned from incident response engagements, and practical recommendations for organizations running hybrid Microsoft environments. Key themes include reducing standing privileges, enforcing multi-factor authentic…

In this episode of the M365 FM Podcast, host Mirko Peters speaks with Microsoft AI MVP and CTO Karthikeyan VK about the biggest problem in today’s AI landscape: organizations are relying too heavily on Large Language Models (LLMs) while ignoring the engineering foundations needed for reliable enterprise AI systems. Karthikeyan explains that many companies try to make AI agents handle everything directly through prompts and LLMs, instead of combining them with deterministic engineering practices such as orchestration, validation, governance, retries, observability, and state management. He argues that LLMs should act as reasoning engines, while structured workflows and business logic remain controlled through traditional engineering systems. The discussion highlights the difference between probabilistic AI systems and deterministic enterprise processes like finance, compliance, ERP integrations, and security workflows. According to Karthikeyan, enterprise trust breaks down when A…

What does it really take to build modern AI applications at scale? In this episode, we take a deep dive into Microsoft Foundry and explore how it is shaping the next generation of AI-powered apps and services. We unpack the vision behind Foundry, the developer experience it enables, and how Microsoft is bringing together AI models, orchestration, security, and enterprise-grade infrastructure into a unified platform. From rapid prototyping to production-ready deployments, Foundry is designed to help developers and organizations move faster while maintaining governance and control. The conversation covers the evolving AI stack, practical use cases, and how developers can integrate tools like copilots, agents, retrieval-augmented generation (RAG), and model customization into real-world business applications. We also discuss the growing importance of observability, responsible AI, and hybrid architectures as enterprises adopt generative AI at scale. Whether you are a developer, …

This episode of M365.fm explores why traditional Microsoft 365 governance approaches fail at enterprise scale and how organizations can move from manual oversight to automated, enforceable governance models. The discussion explains the difference between governance documentation and true operational governance, highlighting why policies alone are not enough in modern cloud environments. The episode introduces the concept of control planes versus data planes and explains how scalable governance depends on automation, identity management, lifecycle controls, telemetry, and policy enforcement rather than human-driven approval processes. It also covers common governance failures such as stale policies, overprivileged automation, unmanaged AI identities, and lack of monitoring. Additional topics include governance strategies for Copilot, AI agents, and Power Platform environments, along with practical ways organizations can reduce governance friction while maintaining security, compl…

“Automating Azure Securely” explores how organizations can modernize Azure automation without creating hidden security risks. The core message is that automation is no longer optional in large Microsoft cloud environments, but poorly designed automation can quickly become a major attack surface. The episode explains that many companies still rely on outdated service accounts, excessive permissions, hardcoded credentials, and unmanaged scripts that silently weaken their Azure security posture. The discussion highlights how secure automation should be built around Zero Trust principles, least privilege access, identity governance, and modern authentication methods such as managed identities and Microsoft Graph integrations. Instead of giving automation tools broad tenant-wide permissions, organizations should isolate workloads, scope permissions tightly, and continuously monitor automated actions. A major focus is the transition away from legacy AzureAD and MSOnline modules toward…

PowerShell is far more than just a scripting language for administrators. It is a powerful automation platform that can simplify repetitive tasks, connect services, and save countless hours across many different environments. From Microsoft 365 and Azure automation to local system management, reporting, APIs, and DevOps workflows, PowerShell provides flexible tools for almost every scenario. This session explores practical automation examples from multiple areas, showing how PowerShell can be used to streamline daily operations, improve consistency, and reduce manual work. We will look at real-world use cases including Microsoft 365 management, file and data processing, REST API integrations, scheduled automation, and cross-platform scripting. Whether you are just getting started with PowerShell or already writing scripts regularly, this session demonstrates how small automations can create significant improvements in productivity and reliability. Expect live demos, useful tips,…

Your Microsoft 365 automation environment is probably running on borrowed identity. In this episode of the M365FM Podcast, we expose one of the biggest hidden risks inside modern cloud architecture: enterprise workflows tethered to personal user accounts. It starts innocently enough. An engineer builds a Power Automate flow, connects a Logic App, configures a Power BI refresh, or deploys a SharePoint integration using their own credentials because it is fast and convenient. But the moment that p...