azure

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel AI Security Detection Engineering Microsoft Defender Threat Detection Entra ID Container Security Zero Trust DevSecOps Infrastructure as Code Agentic AI 3 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Identity Security

Just-In-Time Access for AI Agents: Building a ZSP Gateway in Azure

AI coding assistants may need scoped deployment permissions. Backup automation needs Key Vault secrets at 2 AM. Security scanners need Reader access on a schedule. The easy answer is standing permissions—give each service principal what it needs and …

21 min read Read more →
Infrastructure as Code

Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State

If you’ve worked with Terraform and secrets, you’ve probably wondered: “Wait, is my password actually in that state file?” The answer has historically been: yes. The sensitive = true flag does a great job hiding values from CLI output, but the state …

9 min read Read more →
AI Security

Securing the Agentic Workforce: Microsoft's Zero Trust for AI Agents

Status update — August 13, 2026: Microsoft Agent 365 is generally available for commercial customers, effective May 1, 2026, and the Microsoft Entra Agent ID platform reached GA in April 2026. The Ignite 2025 rollout history below remains useful …

8 min read Read more →