Azure Cloud Portfolio · AZ-900 · AZ-104

Gerard Ostebovik

Close to ten years solving Azure problems for Microsoft's customers. Now building, troubleshooting and documenting Azure myself — one real deployment at a time.

14 PROJECTS.
ONE SUBSCRIPTION.
ZERO SHORTCUTS.

Support taught me how Azure breaks. This portfolio is where I build it myself — no tutorials or sandboxes, only production-pattern deployments built from scratch using Azure CLI, Bicep, and GitHub Actions, with an honest record of what went wrong and how I found the cause.

Every project here reflects a real architectural decision: why this service over that one, what the tradeoffs are at scale, and what I would do differently next time. The lessons learned sections are honest.

Holds the AZ-900 Microsoft Certified: Azure Fundamentals and AZ-104 Microsoft Certified: Azure Administrator certifications, and is now working toward AI-103 (Microsoft Certified: Azure AI Apps and Agents Developer Associate) — with Security and Identity specializations planned next.

14
Projects deployed
6
Azure skill domains
40+
Resources deployed
3
Certifications earned

Skill Domains

IaaS · PaaS Foundation

Identity &
Governance

Role-based access control, Entra ID configuration, Azure Policy enforcement, and Management Group hierarchy — the security and compliance layer everything else runs on.

RBACEntra IDAzure PolicyZero TrustManagement Groups
View projects
IaaS

Networking

Hub-spoke VNet architecture, NSG design, load balancing, private endpoints, DNS, Application Gateway with WAF, and Bastion — production network topology built from scratch.

VNetNSGPrivate EndpointsApp GatewayWAFBastion
View projects
IaaS · PaaS

Compute &
Storage

Windows and Linux VMs, App Service, Container Registry and Container Apps, blob storage, backup, and site recovery — the full compute and data tier.

Virtual MachinesApp ServiceContainer AppsACRBlob Storage
View projects
IaC

Infrastructure
as Code

Modular Bicep deployments, Key Vault with managed identity for zero-credential architecture, CI/CD pipelines, and parameterized multi-environment deployments.

BicepKey VaultManaged IdentityCI/CDGitHub Actions
View projects
PaaS

Monitoring &
Security

Log Analytics workspaces, KQL queries, Application Insights, diagnostic settings, Microsoft Defender for Cloud, and alert rules — full observability across the stack.

Log AnalyticsKQLApp InsightsDefenderDCR
View projects
PaaS · AI · In progress

AI using
Azure AI Foundry

Document Intelligence System — Content Understanding extraction, RAG-grounded Q&A over a real vector index, and responsible-AI evaluation. AI-103 in progress: Phase 1 complete through the orchestrator agent; Phase 2 under way.

AI FoundryContent UnderstandingRAGAgent Service
View progress