Author: Andreas Wasita

Domain Architect

Automate your Cloud Operations Part 2: AWS CloudFormation

Stacking the AWS CloudFormation Automate your Cloud Operations blog post Part 1 have given us the basic understanding on how to automate the AWS stack using CloudFormation. This post will help the reader on how to layer the stack on top of the existing AWS CloudFormation stack using AWS CloudFormation instead of modifying the base template. AWS resources … Continue reading Automate your Cloud Operations Part 2: AWS CloudFormation →

Automate your Cloud Operations Part 1: AWS CloudFormation

Operations What is Operations? In the IT world, Operations refers to a team or department within IT which is responsible for the running of a business' IT systems and infrastructure. So what kind of activities this team perform on day to day basis? Building, modifying, provisioning, updating systems, software and infrastructure to keep them available, … Continue reading Automate your Cloud Operations Part 1: AWS CloudFormation →

Offensive Security on AWS Part 1

The cyber crime has taken a new landscape to the cloud. Many businesses have not taken notice the shared responsibility model when they start migrating their production and critical workloads to the cloud. I wrote a blog regarding this on Kloud blog. 2014 data breach has reached the highest point all time. Because of the public availability … Continue reading Offensive Security on AWS Part 1 →

Azure Sydney User Group February 2015: Azure Eye for the AWS Guy

Azure Sydney User Group for First 2015 Edition kicked-off with great start. Simon Waight, Andreas Wasita (me) and Scott Scovell was presenting at 11th Feb 2015. Simon and me had extensive experience with AWS especially on Enterprise space, Scott Scovell is master of integration with more than 5 years experience in Azure with AWS skills … Continue reading Azure Sydney User Group February 2015: Azure Eye for the AWS Guy →

Secure Azure Virtual Network and create DMZ on Azure VNET using Network Security Groups (NSG)

At TechEd Europe 2014, Microsoft announced the General Availability of Network Security Groups (NSGs) which add security feature to Azure’s Virtual Networking capability. Network Security Groups provides Access Control on Azure Virtual Network and the feature that is very compelling from security point of view. NSG is one of the feature Enterprise customers have been waiting for. What … Continue reading Secure Azure Virtual Network and create DMZ on Azure VNET using Network Security Groups (NSG) →

Secure Azure Virtual Network (VNET) and Create DMZ on Azure using Network Security Groups (NSG) – Azure Security Part II

At TechEd Europe 2014, Microsoft announced the General Availability of Network Security Groups (NSG) which add security feature on Azure Virtual  Network (VNET). The feature is very compelling from security point of view. NSG is one of the Azure security feature I always use everytime I design solution using Azure. I have blogged this last … Continue reading Secure Azure Virtual Network (VNET) and Create DMZ on Azure using Network Security Groups (NSG) – Azure Security Part II →

Secure Azure VM from day Zero with Azure Security Extension – Azure Security Part 1

Public Cloud is all about trust which security is key pillar to keep the customer trust. There is a misconception about Cloud Security. This post will be part of my Azure Security blog post series. In this series we will dispell some of the myths and discuss how to mitigate the risks. Based on Gartner 2014 survey, … Continue reading Secure Azure VM from day Zero with Azure Security Extension – Azure Security Part 1 →

Migrate AD FS 2 to AD FS 3 and How to update Office365 Federation

It's been a while since the last post. Currently, the writer is involved in multi-national Cloud projects. My colleague Marc Terblanche posted an awesome blog post on how to deploy AD FS 3.0 and WAP highly available using only PowerShell under 10 minutes. After we have AD FS 3 and WAP running in new environment. … Continue reading Migrate AD FS 2 to AD FS 3 and How to update Office365 Federation →

Windows Azure Online Backup Step By Step

Before We discuss any further, You need to have Windows Azure account and enable Windows Azure Preview features. You need a x.509 v3 certificate to register your servers with backup vaults. The certificate must have 2048 key length , have valid Client Authentication EKU, validity period is no more than 3 years and reside at certificate … Continue reading Windows Azure Online Backup Step By Step →