Build your Cloud Operating Model on Azure from zero to hero
summary
A six-person core team builds a platform product on Azure using GitHub + Azure Pipelines as single source of truth to provision management groups, subscriptions and role/policy JSONs; they treat subscription as unit of scale, apply policies in audit then deny mode, use Azure Blueprints, Resource Graph (KQL), Security Center, Log Analytics and Service Health for compliance and ops, automate domain join with Activity Log alerts → Logic Apps → hybrid runbooks, test infra with Pester, and enforce just-in-time access via Privileged Identity Management.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 2:51About me
- 4:38What is Cloud Operating Model
- 6:00Will Microsoft help us
- 6:55Microsoft Cloud Adoption Framework
- 9:08Cloud Platform Team
- 10:16How does this team operate
- 20:46Demo
- 22:56Key Lessons
- 24:36Limiting Factors
- 26:09Toplevel Management
- 26:41Policies
- 29:30Privileges
- 30:45Blueprints
- 31:15What are blueprints
- 34:15Blueprint demo
- 36:24Subscriptions
- 37:22Compliance
- 40:21Health
- 42:15Resource Graph
- 45:06Continuous Improvement
- 52:20Questions
related talks
42mDesigning Enterprise Scale Cloud Platform on Azure
51mCloud-Native Platform Engineering on Azure
46mReal World DevOps
01h 04mPermit to Cloud - Land with confidence in Azure
54mBuilding a development environment out of your production deployment
26mTransition to the Cloud Return
25mEnterprise Deployment to Azure and AWS in Azure DevOps
37mModern Architecture in the Cloud of 2026