Systems & Linux
Users, groups, sudo and permissions on Linux
Manage Linux accounts (useradd, usermod, passwd, chage), groups, sudo and visudo, rwx and octal permissions, umask, SUID, SGID, sticky bit, ACLs and exten…
Guides & insights
A library for curious minds
Automation
Ansible: the inventory (static, dynamic, groups and variables)
Understand and master the Ansible inventory: INI and YAML files, groups, host and group variables, patterns, dynamic inventories and the ansible-inventory…
Observability
Dynatrace: managing permissions (IAM, groups, policies and boundaries)
Manage access in Dynatrace: the IAM model (users, groups, policies, boundaries), default policies, writing statements, API tokens and least-privilege best…
Cloud computing
Observability on Azure: Azure Monitor, Log Analytics, Application Insights, managed Prometheus and Grafana
A complete overview of observability on Azure: Azure Monitor (metrics, logs and Log Analytics, KQL), Application Insights, Azure Monitor Agent and data co…
Cloud computing
OVHcloud Public Cloud networking: private networks, vRack, Gateway, Floating IP and Load Balancer
Design networking on OVHcloud Public Cloud: public network and OpenStack private networks, vRack, subnets and DHCP, Gateway (NAT egress), Floating IP, sec…
Cloud computing
Compute on Google Cloud: Compute Engine, GKE, Cloud Run and Cloud Functions
Choose compute on Google Cloud: Compute Engine VMs and managed instance groups, Google Kubernetes Engine (Standard and Autopilot), Cloud Run for serverles…
Cloud computing
Google Cloud best practices: organization, security, reliability and costs
Best practices for operating Google Cloud: organization and folders, projects per environment, IAM through groups, keyless service accounts, private netwo…
Cloud computing
Understanding Azure: regions, resource hierarchy, tools and pricing
Microsoft Azure basics: geographies, regions, region pairs and availability zones, the hierarchy of management groups, subscriptions, resource groups and …
Cloud computing
Microsoft Entra ID, RBAC and Azure Policy: identities, permissions and governance
Manage identities and access on Azure: Microsoft Entra ID (users, groups, MFA, conditional access), managed identities for applications, RBAC access contr…
Cloud computing
Azure networking: VNet, NSG, peering, load balancing and hybrid connectivity
Design networking on Azure: virtual networks and subnets, network security groups (NSG), peering and hub-and-spoke topology, Azure Firewall, Private Endpo…
Cloud computing
Azure best practices: landing zone, security, reliability and costs
Best practices for running Azure in production: landing zone and management groups, identities and PIM, private networking, Key Vault and managed identiti…
Cloud computing
IAM: identities, roles and policies on AWS
Secure access to AWS with IAM: users, groups, roles and JSON policies, permission evaluation, MFA, IAM Identity Center for humans, roles for applications,…
Learning never stops