azure

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel Microsoft Defender AI Security Detection Engineering Threat Detection Container Security Entra ID Zero Trust DevSecOps Infrastructure as Code Agentic AI 3 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Identity Security

Just-In-Time Access for AI Agents: Building a ZSP Gateway in Azure

Review update (September 25, 2026): The merged September 25 source rejects ambiguous/dot-segment scopes and mismatched ARM response identities, uses explicit managed identity with closed SDK clients, and moves synchronous operations off the async …

23 min read Read more →
Infrastructure as Code

Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State

Review update (September 25, 2026): The reviewed provider pins are historical evidence, not an evergreen supported toolchain. Before a new deployment, review Key Vault API retirement and AzureRM major-version migration notes. Keep state protections …

10 min read Read more →
AI Security

Securing the Agentic Workforce: Microsoft's Zero Trust for AI Agents

Status update, August 13, 2026: Microsoft Agent 365 is generally available for commercial customers, effective May 1, 2026, and the Microsoft Entra Agent ID platform reached GA in April 2026. The Ignite 2025 rollout history below remains useful …

9 min read Read more →