Michał Machniak (MCT)

Automating Compliance and Configuration with #PowerShell #DSC and #Azure Guest Configuration

📅2026-03-12

🔗https://azureday.pl/?lang=en

#Microsoft #AzOps #devOps #IaaC #cloud #secuirty #AzureDayPoland #AzureDayPoland2026

🎉How to Use AzureDevOpsDscv3 in Azure DevOps Pipelines

Check out the full implementation here: 🔗
👉 lnkd.in/dsUyG6Mh

#AzureDevOps #DSCv3 #PowerShell #Automation #IaC #DevOpsPipelines #Microsoft #Azure #PlatformEngineering

🎯 I’m excited to share that I've added a new feature to my PowerShell module: New-AzResourceNameGeneratorGUI.
This function brings a visual interface to the Azure Resource Name Generator

GitHub: lnkd.in/dGtSXY6U

#Azure #PowerShell #CloudOps #Automation #AzOps

GitHub - mimachniak/AzureDevOpsDscv3: This is a refactored version of the AzureDevOpsDsc project, originally created by the DSC Community. This refactored project that support DSC v3. This is a refactored version of the AzureDevOpsDsc project, originally created by the DSC Community. This refactored project that support DSC v3. - mimachniak/AzureDevOpsDscv3

Bridging #AzureDevOps with #DSCv3 🚀
I’m excited to share my latest project: AzureDevOpsDscv3 - #PowerShell #DSC for AzureDevOps
#Microsoft #DSCv3 #GitOps #Automation #Azure
github.com/mimachniak/A...

Network foundation | DNS security policies now in #Azure
learn.microsoft.com/en-us/azure/...

#Microsoft #Network #Secuirty #AzOps

🚀 New update to AzureResourcesNameGenerator PowerShell module!

✨ Export naming definitions to Bicep
🔹 Dynamic export based on Azure resource schema
🔹 Static export using @export() decorator

📦 Module: www.powershellgallery.com/packages/Azu...

#PowerShell #Azure #Bicep #IaC #DevOps #Microsoft

AzureResourcesNameGenerator 1.0.2 PowerShell module generates Azure resource names based on a predefined naming convention schema and resource-specific rules.It ensures that the generated names comply with Azure naming restrictions an...

Just published my first PowerShell module! 🎉
👉 AzureResourcesNameGenerator: powershellgallery.com/packages/Azu...

It generates Azure resource names based on predefined conventions and ensures compliance with Azure naming rules & best practices.
#PowerShell #Azure #DevOps #AzOps

🔐 Managing hybrid servers with #AzureArc?
Stop giving full Contributor rights!
Check out this custom Azure Arc VM Operator role perfect for least-privilege access 👇
mmachniak.net/2025/09/22/A...

#Azure #HybridCloud #IAM #Security #AzOps #Microsoft #Arc #AzureArc #Windows

🚀 New in #Azure: Machine Configuration now supports custom security baselines for server OS settings!
✅ Customize #Windows/#Linux OS baselines
✅ Enforce via Azure Policy
✅ Monitor + auto-remediate drift
Big step for compliance & governance automation. 💪
#CloudSecurity

🚀 Master Azure Networking !
Learn how to build scalable, secure cloud infrastructure with hub-and-spoke design, solid IP planning, & key Azure security controls.
mmachniak.net/2025/10/20/M...

#Azure #CloudNetworking #AzureArchitecture #CloudSecurity #MicrosoftAzure #AzOps

GitHub - mimachniak/bicep-ext-PassWordGenerator Contribute to mimachniak/bicep-ext-PassWordGenerator development by creating an account on GitHub.

🌟 Excited to share a new open-source project!
I’ve just published bicep-ext-PassWordGenerator a small extension for Azure Bicep. here 👉 github.com/mimachniak/b...
#Azure #Bicep #InfrastructureAsCode #OpenSource #Cloud #AzOps #DevOps #IaaC #Microsoft #community #csharp #extension

Automate your open-source dependency scanning with Advanced Security - Azure DevOps Blog Learn how to configure dependency scanning, offered in GitHub Advanced Security and GitHub Code Security for Azure DevOps.

Automate your open-source dependency scanning with Advanced Security

devblogs.microsoft.com/devops/autom...

#Azure #DevOps #Secuirty #Microsoft #GitHub

🚀 Hi my new blog post include code example of bicep creation of security and roles assignment in Azure Landing Zone
🚀 Create Entra ID security groups
🛡️ Assign Azure roles directly to groups
👉 Link to blog mmachniak.net/2025/08/11/B...
#AzOps #IaaC #Bicep #Azure #EntraID #Secuirty #Microsoft #DevOps

🚀 Bicep Microsoft Entra (Graph) Extension is GA!
You can now deploy & manage Entra (Azure AD) resources natively in Bicep.
See my blog for details + example:
🔗 mmachniak.net/2025/08/01/B...

#Azure #Bicep #MicrosoftEntra #IaC #CloudAutomation #AzOps #PowerShell #Microsoft

Loging into a Linux Server Connected to Azure Arc Using Entra ID from the Portal & OpenSSH client
🔹 Azure Arc-connected Linux servers
🔹 Entra ID auth
🔹 Secure access via Portal & SSH
Read 👉 mmachniak.net/2025/07/30/A...
#AzureArc #Linux #EntraID #Azure #Security #AzOps #Microsoft

🚨 Azure Service Health Built-In Policy (Preview) – Now Available! | Microsoft Community Hub Resiliency is a key focus for Microsoft in making sure our customers experience minimal impact due to planned or unexpected outages that may occur. Up until...

🚨 #Azure Service Health Built-In Policy (Preview) – Now Available! | #Microsoft Community Hub #AzOps #Monitoring #AZL

techcommunity.microsoft.com/blog/azurego...

sysopslife-scripts/M365/M365-EntraID-Apps_and_properties.ps1 at master · mimachniak/sysopslife-scripts Contribute to mimachniak/sysopslife-scripts development by creating an account on GitHub.

Just dropped a new #PowerShell script to audit Microsoft Entra ID apps! 🚀

#AzureAD #MicrosoftGraph #IAM #CloudSecurity #AzOps

github.com/mimachniak/s...

#Azure Resource Manager allow to overview all resources and create k-ql query

#Microsoft #Azure #AzOps #kql #monitoring #logs

sysopslife-scripts/ADO/ADO-Inactive-User-report.ps1 at master · mimachniak/sysopslife-scripts Contribute to mimachniak/sysopslife-scripts development by creating an account on GitHub.

🚀 #PowerShell script to automate #Azure #DevOps user cleanup:
✅ Email inactive & never-logged-in users
📊 Console & email reports
📁 Logs to Table Storage
🗑️ Auto-remove
#Microsoft #AzOps #Cloud
github.com/mimachniak/s...

🎉 STAGED ROLLOUT OF CLOUD AUTHENTICATION 🎉

This feature allows you to test cloud authentication and migrate gradually from federated authentication to other. #Azure #M365 #AzOps #EntraID #Secuirty #Microsoft #Idenity

😮 By default, #Azure blocks outbound traffic on port 25 (SMTP) for new #VM
⁉️ PowerShell (Test-NetConnection), you will failed without any information
⁉️ Azure Network Watcher, your test may show error but in details all will be green ✅ in the Connection Troubleshoot tool
#Security #Microsoft #AzOps

Bookable time is available in #outlook in GA , wow, team members can come to the Bookings page and book time for a 1:1 meeting without any back-and-forth conversation #Microsoft #M365 #meeting

sysopslife-scripts/Azure/Azure-Cost-Export-API-v5.ps1 at master · mimachniak/sysopslife-scripts Contribute to mimachniak/sysopslife-scripts development by creating an account on GitHub.

🔧 Just released a handy #PowerShell script for generating #Azure #cost reports with aggregation!
It pulls cost data from Azure and lets you group and export it to #Excel
💡 Aggregations supported:
Subscription, RG, ResourceType, #Tags
⁉️It support: CSP
#Microsoft #AzOps
github.com/mimachniak/s...

Multi Workspace for Single tenant is now in Public Preview in Microsoft’s unified SecOps platform | Microsoft Community Hub We are excited to continue to expand the use cases addressed with our unified SecOps platform, which brings the capabilities of Microsoft Sentinel, Defender...

Enhanced Security through Unified Multi Workspaces of Microsoft #Sentinel, #Defender XDR, #Security #Copilot, Threat Intelligence #Microsoft #SecOps

techcommunity.microsoft.com/blog/microso...

Azure DevOps Basic usage included with GitHub Enterprise - Azure DevOps Blog Many customers want to use both GitHub and Azure DevOps together. Until now, unless you purchased Visual Studio subscriptions with GitHub Enterprise, you had to pay separately for both products. With ...

💰 #Azure #DevOps Basic usage included with #GitHub Enterprise

Finally price get lower, now we need AzureDevOps basic to allow use Github !!

devblogs.microsoft.com/devops/azure...

#AzOps #Microsoft #Azure #cost

👑Export to #bicep using #Azure Portal is live !!!

⬇️⬇️⬇️⬇️⬇️

We can now export from portal to bicep code existing resources !!!

#Microsoft #Azure #AzOps #DevOps #IaaC #automation

⚙️ AzureDay Poland 2025 ! Już się zbliża !!!

📅 Kiedy? 13 marca 2025
📍 Gdzie? Warszawa, Airport Hotel Okęcie

🗺️Link: azureday.pl

💰Promo code: AzureDay2025Speaker

#AzureDayPoland #MicrosoftAzure #Implementation #CloudSolutions #AzureDayPoland #AzureDay2025 #AzOps #Microsoft

Enhancing #Azure #DevOps Traceability: Tracking Pipeline-Driven Resource Changes ad tags to you deployment to get better traceability between pipeline executions and modifications

#Microsoft #security #AzOps #MCTbuzz #automation #AzureDevOps

github.com/jvargh/azure...

Configure security baselines for Windows Server 2025 Learn how to deploy security baselines using OSConfig to enforce granular security settings to better protect and harden your Windows Server 2025 environment.

Did you know that #Windows 2025 have built in OS security configuration base on #Microsoft Security baseline

#Ops #Security #AzOps

learn.microsoft.com/en-us/window...

🎉 Great News !!! 🎉
#PowerShell DSC v.3.0 is now on release cadidate
#Microsoft #Azure #AzOps #DevOps #dsc #cloud #atomation

github.com/PowerShell/D...