Ideas for your next move.

Azure Files SMB Access: Check RBAC and Windows ACLs

Diagnose Azure Files SMB access denied after identity authentication by checking the share-level Azure role, the actual signed-in identity and Windows directory permissions.

Azure Bastion Native Client: Check the Full Contract — conceptual 3D-style vector showing Local CLI, Bastion access, Tunneling, Private VM, Guest sign-in.

Azure Bastion Native Client: Check the Full Contract

Resolve Azure Bastion native client failures by checking the supported SKU, tunneling feature, local CLI environment, Azure permissions and the target VM sign-in method.

Azure DNS Private Resolver: Trace a Forwarding Loop — conceptual 3D-style vector showing Corporate DNS, Inbound endpoint, Private zone, Outbound rules, Spoke VNet, Corporate zone.

Azure DNS Private Resolver: Trace a Forwarding Loop

Trace hybrid DNS queries through Azure DNS Private Resolver by separating inbound endpoints, outbound rules and VNet links, with specific checks for forwarding loops.

Azure NAT Gateway: Plan Shared Connection Capacity — conceptual 3D-style vector showing Worker subnet, API subnet, Shared NAT ports, Public addresses, Main partner, Other APIs.

Azure NAT Gateway: Plan Shared Connection Capacity

Size Azure NAT Gateway egress around shared subnet demand, repeated connections to the same destination and public address allowlists, then verify the real outbound path.

Azure Load Balancer SNAT: Find the Busy Backend — conceptual 3D-style vector showing Backend A, Backend B, Port allocation, Frontend IP, Partner API.

Azure Load Balancer SNAT: Find the Busy Backend

Investigate outbound failures on individual Azure Load Balancer backends by comparing allocated and used SNAT ports, connection churn and the outbound rule configuration.

Azure Zonal VM Allocation: Separate Quota from Capacity — conceptual 3D-style vector showing Deployment request, Zone constraint, VM size, Disk constraints, Capacity pool, Approved alternative.

Azure Zonal VM Allocation: Separate Quota from Capacity

Diagnose Azure zonal VM allocation failures by separating subscription quota, supported SKU locations and the combined placement constraints that restrict available capacity.

VM Scale Set Upgrades: Diagnose a Health Pause — conceptual 3D-style vector showing Upgrade batch, Local health endpoint, Health extension, Upgrade gate, Next batch.

VM Scale Set Upgrades: Diagnose a Health Pause

Investigate a paused VM Scale Set rolling upgrade by checking instance health, the Application Health extension, initialization behavior and the batch health thresholds.

Azure Blob Immutability: Explain a Blocked Delete — conceptual 3D-style vector showing Delete request, Blob version, Time retention, Legal hold, Disposal review.

Azure Blob Immutability: Explain a Blocked Delete

Identify the effective Azure Blob retention policy or legal hold behind a blocked deletion, document its scope and plan disposal around the permitted retention boundary.

Azure Blob Recovery: Promote the Intended Version — conceptual 3D-style vector showing Incident record, Deleted versions, Undelete, Chosen version, Current blob, Validation.

Azure Blob Recovery: Promote the Intended Version

Recover an overwritten or deleted Azure blob by distinguishing undelete from version promotion, preserving evidence and validating the restored file before application reuse.

Azure Blob Lifecycle: Explain Objects That Remain — conceptual 3D-style vector showing Policy filter, Current blob, Prior versions, Snapshots, Soft delete.

Azure Blob Lifecycle: Explain Objects That Remain

Investigate why an Azure Blob lifecycle rule leaves data behind by checking object versions, snapshots, filters, retention windows and the timing of policy evaluation.

ACM DNS validation: check the public CNAME path — conceptual 3D-style vector showing Certificate request, Validation CNAME, Public DNS zone, Issuance checks, Certificate association, Public TLS endpoint.

AWS Operations

ACM DNS validation: check the public CNAME path

Trace ACM certificate validation through public authoritative DNS, exact CNAME names, CAA policy and certificate deployment identity.

CloudFormation change sets: review replacement and execution — conceptual 3D-style vector showing Proposed template, Change set preview, Stateful replacement, Execution approval, Stack events, Business validation.

AWS Operations

CloudFormation change sets: review replacement and execution

Review adds, replacements and deletions in a CloudFormation change set, then validate runtime dependencies and recovery before executing the selected change.