Erick Moore

I added them here, and am using the preview option to scope the roles to a management group: https://github.com/edm-ms/AzureLandingZone/tree/main/Identity It would be nice to have them as templates in this...

The way I handle this in customer environments is to modify the policy to deny creation of privatelink.* zones as you call out. The other thing we do is have...

The primary reason I do it this way is because we want to prevent any "privatelink.*" DNS zone from being created outside of the shared networking subscription(s). No one should...

Thinking more about this we don't need AIB. We can deploy any marketplace Windows VM, use the domain join extension, and then use a custom script extension to domain join...