Scratchpad of a Digital Technologist https://derekhans.github.io en-us Mon, 27 Apr 2026 22:44:27 GMT Derek Hanson Derek Hanson Custom Static Site Generator Copyright 2025 Derek Hanson 60 https://derekhans.github.io/managing-technical-risk/ https://derekhans.github.io/managing-technical-risk/ Sat, 18 Apr 2026 00:00:00 GMT Technical risk threatens project success. Architects must identify, assess, and mitigate risks before they become problems. Derek Hanson architecture risk leadership https://derekhans.github.io/cost-optimization-strategies-for-azure/ https://derekhans.github.io/cost-optimization-strategies-for-azure/ Fri, 20 Mar 2026 00:00:00 GMT Cloud costs can spiral quickly without proper governance. After reviewing dozens of Azure environments, I've identified patterns that consistently reduce spend by 30-40%. Derek Hanson azure finops cloud https://derekhans.github.io/capacity-planning-for-cloud-systems/ https://derekhans.github.io/capacity-planning-for-cloud-systems/ Wed, 11 Feb 2026 00:00:00 GMT Cloud elasticity doesn't eliminate capacity planning—it changes it. You still need to understand demand patterns and cost implications. Derek Hanson architecture operations cloud https://derekhans.github.io/migrating-to-azure-lessons-from-the-trenches/ https://derekhans.github.io/migrating-to-azure-lessons-from-the-trenches/ Fri, 23 Jan 2026 00:00:00 GMT Cloud migration is rarely as simple as "lift and shift." After leading multiple enterprise migrations, here are the lessons that matter. Derek Hanson azure migration architecture https://derekhans.github.io/building-developer-portals-with-backstage/ https://derekhans.github.io/building-developer-portals-with-backstage/ Mon, 22 Dec 2025 00:00:00 GMT Backstage, originally developed at Spotify, has become the de facto standard for building developer portals. It solves the discovery problem—how do developers find and understand services? Derek Hanson platform-engineering backstage developer-experience https://derekhans.github.io/azure-ad-conditional-access-patterns/ https://derekhans.github.io/azure-ad-conditional-access-patterns/ Wed, 12 Nov 2025 00:00:00 GMT Conditional Access is the policy engine at the heart of Azure AD security. It evaluates signals and enforces access decisions in real-time. Derek Hanson identity azure security https://derekhans.github.io/machine-learning-in-production-lessons-learned/ https://derekhans.github.io/machine-learning-in-production-lessons-learned/ Sun, 19 Oct 2025 00:00:00 GMT Training a model is the easy part. Putting it into production and keeping it there is where the real work begins. Derek Hanson ai machine-learning architecture https://derekhans.github.io/the-enterprise-architect-s-role-in-cloud-transformation/ https://derekhans.github.io/the-enterprise-architect-s-role-in-cloud-transformation/ Thu, 18 Sep 2025 00:00:00 GMT Enterprise architects are uniquely positioned to guide cloud transformation. We see across silos, understand business context, and can connect technology decisions to business outcomes. Derek Hanson architecture leadership cloud https://derekhans.github.io/securing-service-to-service-communication/ https://derekhans.github.io/securing-service-to-service-communication/ Mon, 11 Aug 2025 00:00:00 GMT Services talking to services need identity too. Managed identities and workload identity federation eliminate secrets for cloud-native authentication. Derek Hanson identity security architecture https://derekhans.github.io/cloud-security-posture-management/ https://derekhans.github.io/cloud-security-posture-management/ Wed, 09 Jul 2025 00:00:00 GMT CSPM tools continuously monitor cloud environments for misconfigurations and compliance violations. In a world where a single misconfigured storage account can expose millions of records, CSPM is essential. Derek Hanson security cloud governance https://derekhans.github.io/platform-engineering-beyond-devops/ https://derekhans.github.io/platform-engineering-beyond-devops/ Fri, 20 Jun 2025 00:00:00 GMT Platform engineering has emerged as the natural evolution of DevOps. Instead of expecting every team to build their own toolchains, we create internal developer platforms (IDPs). Derek Hanson platform-engineering devops developer-experience https://derekhans.github.io/kubernetes-on-azure-aks-deep-dive/ https://derekhans.github.io/kubernetes-on-azure-aks-deep-dive/ Fri, 09 May 2025 00:00:00 GMT Azure Kubernetes Service handles the control plane so you can focus on workloads. But running production Kubernetes still requires understanding the platform deeply. Derek Hanson azure kubernetes containers https://derekhans.github.io/privileged-identity-management-in-practice/ https://derekhans.github.io/privileged-identity-management-in-practice/ Tue, 08 Apr 2025 00:00:00 GMT Standing admin access is dangerous. Privileged Identity Management (PIM) enforces just-in-time access for administrative roles. Derek Hanson identity azure governance https://derekhans.github.io/evolutionary-architecture-principles/ https://derekhans.github.io/evolutionary-architecture-principles/ Sat, 15 Mar 2025 00:00:00 GMT Systems must evolve. Evolutionary architecture embraces change through fitness functions, incremental change, and appropriate coupling. Derek Hanson architecture practices design https://derekhans.github.io/building-a-technology-radar/ https://derekhans.github.io/building-a-technology-radar/ Tue, 11 Feb 2025 00:00:00 GMT A technology radar provides a structured way to evaluate and communicate technology choices. Inspired by ThoughtWorks, it helps organizations make consistent decisions. Derek Hanson architecture strategy practices https://derekhans.github.io/incident-response-in-cloud-environments/ https://derekhans.github.io/incident-response-in-cloud-environments/ Wed, 22 Jan 2025 00:00:00 GMT Cloud incidents require adapted response procedures. The shared responsibility model means coordinating with providers. The API-driven nature enables automated response. Derek Hanson security operations cloud https://derekhans.github.io/llmops-operationalizing-language-models/ https://derekhans.github.io/llmops-operationalizing-language-models/ Tue, 17 Dec 2024 00:00:00 GMT LLMOps extends MLOps for the unique challenges of large language models. Evaluation, monitoring, and cost management require specialized approaches. Derek Hanson ai operations mlops https://derekhans.github.io/designing-for-resilience/ https://derekhans.github.io/designing-for-resilience/ Sun, 24 Nov 2024 00:00:00 GMT Systems will fail. The question is whether failures cascade into outages or are contained and recovered automatically. Derek Hanson architecture reliability cloud https://derekhans.github.io/azure-functions-serverless-done-right/ https://derekhans.github.io/azure-functions-serverless-done-right/ Thu, 24 Oct 2024 00:00:00 GMT Serverless computing eliminates infrastructure management. Azure Functions takes this further with deep Azure integration and flexible hosting options. Derek Hanson azure serverless architecture https://derekhans.github.io/api-design-that-lasts/ https://derekhans.github.io/api-design-that-lasts/ Tue, 10 Sep 2024 00:00:00 GMT APIs are contracts. Once published, they're hard to change. Thoughtful design upfront prevents painful migrations later. Derek Hanson architecture api design