#01 — The day job
Architecture
Cloud strategy, solution architecture, enterprise architecture, across oil & gas, banking, maritime shipping, a bit of pharma, utilities, and public sector.
20
Posts
6
Industries
2018
First post
-
Cloud Strategy, podcast with Gregor Hohpe
Gregor Hohpe on Software Engineering Radio: a decision-driven approach to successful cloud migration, framing cloud strategy as a series of well-scoped architectural choices rather than a single big project.
-
Digital transformation with Gregor Hohpe
Gregor Hohpe on digital transformation: what the term actually means, why most transformations stall, and how architects can push beyond IT modernization into genuine business change.
-
Securing Azure Web Apps – Part III VNET Integration
In previous articles I described how an Azure web application can be secured and isolated from Internet traffic using Private Endpoints. If the security requirements are not draconian, a simpler…
-
ADR – Architecture Decision Record
In an Agile work environment, architecture decisions are made incrementally rather than all upfront. Architecture Decision Records are a lightweight way to capture the reasoning behind each significant choice.
-
Using OAuth 2.0 to protect APIs published on Azure APIM (API Management Gateway)
How to protect APIs published on Azure APIM with OAuth 2.0 authorization tokens: configuration walkthrough and policy example.
-
Securing Azure Web Apps – Private Endpoint Part II
When you have custom DNS servers for an Azure VNET, private endpoints for web applications work differently. Notes on the DNS configuration required for name resolution to work correctly.
-
IT architecture: Cutting costs and complexity
Reducing IT infrastructure and application costs through architectural choices: consolidation, retirement, and moving commodity components to managed services.
-
Why Do Computers Stop and What Can Be Done About It?
A pointer to Jim Gray’s 1985 Tandem paper on why computers stop, the failure taxonomy behind fault-tolerant systems, and what modern architects still borrow from it.
-
Securing Azure Web Apps – Private Endpoint
All Azure Web Apps are directly available over the public Internet. To isolate them, Private Endpoints combined with a Web Application Firewall provide access control at the network layer. Setup…
-
Run Less
Running less software (through SaaS or PaaS) sometimes buys you more than building or hosting it yourself. Notes on the tradeoffs.
-
How to modernise Microsoft .NET applications – part II
Part II of the .NET modernization series: selecting a modernization approach (lift-and-shift, replatform, rearchitect, rebuild) and choosing an architectural pattern based on MASA, with lessons from breaking a monolith into…
-
How to modernise Microsoft .NET applications – part I
Part I of the .NET modernization series: in a Microsoft-shop landscape running .NET Framework 2.0 through 4.5 alongside SharePoint, Dynamics, and Office 365, this is how I inventoried the applications…
-
Integrating Azure API Gateway (Azure APIM) with Application Gateway and multiple custom domains
Exposing Azure APIM over the Internet in a controlled way by placing an Application Gateway in front and mapping multiple custom domains to different API sets.
-
Web developer roadmap 2019
A visual roadmap of the technologies web developers should know in 2019, covering frontend, backend, and DevOps learning paths.
-
Amazon AWS Solution Architect – Associate Exam Resources
A curated list of resources (whitepapers, FAQs, practice tests, video courses) that helped me pass the AWS Certified Solutions Architect – Associate exam.
-
An IT architect perspective on GDPR – part II
Part II of the GDPR series: mapping specific GDPR requirements (right to be forgotten, right of access, data portability, consent management) to concrete IT architecture implications.
-
An IT architect perspective on GDPR – part I
Being the architect who drew the short straw and got assigned to the GDPR project, I collected some thoughts from large-enterprise practice: what the regulation means in day-to-day work with…
-
Can Apple read your iMessages?
About a year ago Matthew Green wrote a short post urging Apple to publish the technical details of iMessage encryption. Notes on what’s public, what’s inferred, and where the trust…
-
Beyond TOGAF certification
Achieving the TOGAF certification is a milestone, but it’s only the start. Notes on what enterprise architects actually need beyond the framework itself.
-
The Kubernetes Book
A short review and recommendation of Nigel Poulton’s The Kubernetes Book: a practical, hands-on introduction to Kubernetes concepts and cluster operations.