Tested, not paraphrased.
Hands-on writing on Azure sovereignty: Microsoft Sovereign Cloud, Azure Local, landing zones, and migrations — with the labs to prove it.
The Cyber Resilience Act's First Real Deadline Is 11 September — and It's Not the Law You Think It Is
EU Cyber Resilience Act reporting obligations go live on 11 September: 24-hour disclosure of actively exploited vulnerabilities and severe incidents. It's easy to confuse with NIS2 — it isn't the same law, and for anyone shipping Arc-connected or Azure Local appliances, it's closer than it looks.
Read article →Azure VM Image Builder Goes GA in Sovereign Clouds — But Not the Ones Europe Cares About
Microsoft just gave VM Image Builder parity across Azure Government, China North 3, and the Secret/Top Secret clouds. Here's what that tooling parity actually closes — and why it still leaves the EU Sovereign Cloud and Azure Local disconnected gaps untouched.
Read article →Azure Local 2608's Key Vault Split: A New BYOK Preview, and a KMS Warning Nobody's Enforcing
Multi-rack deployments can now supply their own key to encrypt secrets before Key Vault ever sees them. Meanwhile, AKS Arc keeps repeating a KMS v1 deprecation warning that hasn't changed since release 2510. Two very different stories, easy to conflate.
Read article →Azure Enclave: Microsoft's Prefab Answer to "Build Us a Sovereign Landing Zone"
A new public preview promises to cut the time to deploy an isolated, policy-governed cloud environment from months to days — and it ships pre-approved for Azure Government Secret and Top Secret. Here's what it actually is, and what's still unproven.
Read article →Rack-Aware Clustering: Azure Local's Answer to "We Can't Replicate Outside This Building"
Azure Local 2608 quietly shipped a second local availability zone architecture — two racks, one storage pool, no second site required. Here's what it actually requires, and the tradeoff nobody's flagging.
Read article →Azure Local 2608: The Portal Finally Manages the Fleet — But Not the Disconnected Half
August's release brings Arc Site Manager, portal-driven node scale-out, and GPU management from Azure. All three assume a live connection to Azure — which is exactly the half of this platform's sovereignty story they don't touch.
Read article →AVS License-Included Is Retiring: The VMware Decision Every Sovereign Cloud Customer Now Has a Deadline For
Microsoft just put a hard date on the last way to run VMware on Azure without buying Broadcom's full VCF bundle. Here's what that retirement actually forces, and why it puts Azure Local back on the table.
Read article →Running Mistral on Azure Local Disconnected: What It Actually Takes
Microsoft and Mistral just promised frontier AI in fully disconnected environments. Here's the architecture behind that promise — and the questions the press release doesn't answer.
Read article →Why I'm betting on Azure sovereignty
Europe's sovereignty conversation moved from policy papers to procurement. Here's why I'm focusing my practice on Microsoft Sovereign Cloud and Azure Local — and what this site will deliver.
Read article →