Content by abhilashasr (2)

abhilashasr proposes an Azure-native pattern for keeping Private Endpoint DNS records in centrally owned Private DNS zones when workloads span multiple Entra tenants. It combines Azure Policy (DeployIfNotExists) with Azure Lighthouse delegation, and outlines deployment phases, validation checks, and security guardrails.

abhilashasr outlines how “subscription vending” in Azure Landing Zone uses automation and Infrastructure as Code to create governed Azure subscriptions at scale, including management group placement, billing alignment, budgets, provider registration, and RBAC setup.