Azure Networking Unlocked: Secure Azure Functions, Virtual Network Manager & Infrastructure as Code with Rex de Koning [MVP-MCT]

Cloud adoption has accelerated at an incredible pace, but modern cloud infrastructure is no longer just about deploying virtual machines or Azure services. Networking has become the backbone of every successful Azure environment, connecting applications, securing workloads, automating deployments, and ensuring resilience across regions. In this episode of the M365 FM Podcast, host Mirko Peters welcomes Microsoft MVP and Microsoft Certified Trainer Rex de Koning to explore the world of Azure Networking, Infrastructure as Code, Azure Virtual Network Manager, secure Azure Functions, and modern cloud architecture. Drawing on nearly thirty years of IT experience—from software development and system engineering to Azure networking and automation—Rex explains why networking remains one of the most misunderstood aspects of Microsoft Azure. While many organizations assume Microsoft manages networking entirely in the cloud, the reality is that designing secure, scalable, and automated network architectures is still one of the most important responsibilities for every cloud architect and infrastructure engineer. 

WHY AZURE NETWORKING MATTERS
Azure networking is fundamentally different from traditional on-premises infrastructure. Rather than simply recreating physical networks in the cloud, organizations must rethink how virtual networks, routing, security, and connectivity work together inside Microsoft's global cloud platform. Rex explains why understanding concepts like Virtual Networks, Network Security Groups, routing, virtual appliances, and cloud-native networking is essential for building reliable Azure environments that scale securely. The episode also explores common misconceptions that often lead to security risks, unnecessary complexity, and expensive cloud architectures.

AZURE VIRTUAL NETWORK MANAGER EXPLAINED
One of the major topics of the conversation is Azure Virtual Network Manager, one of Microsoft's most powerful—but often overlooked—network management services. Rex explains how organizations can centrally manage hundreds of virtual networks while automating routing, connectivity, IP address management, and security administration across multiple subscriptions and regions. Topics include:

• Azure Virtual Network Manager
• IP Address Management (IPAM)
• Connectivity configurations
• Mesh networking
• Hub and Spoke architecture
• Security Admin Rules
• Route management
• Centralized network governance

You'll learn why Virtual Network Manager dramatically simplifies enterprise networking and reduces operational complexity through centralized automation.

HUB & SPOKE VS. VIRTUAL WAN
Many Azure architects eventually face an important design decision: Should you build a traditional Hub & Spoke architecture or adopt Azure Virtual WAN? Rex compares both approaches, discussing their strengths, weaknesses, operational complexity, scalability, routing behavior, and real-world deployment scenarios. He also explains why there is no universal answer and why architecture decisions should always be based on business requirements rather than industry trends.

INFRASTRUCTURE AS CODE IS NO LONGER OPTIONAL 
Infrastructure as Code has evolved from a DevOps best practice into a fundamental requirement for modern cloud operations. Throughout the discussion, Rex explains why every Azure deployment should be fully automated using repeatable, version-controlled code. The episode covers:

• Bicep
• ARM Templates
• Terraform
• Azure Verified Modules
• Azure DevOps
• GitHub
• CI/CD Pipelines
• What-If Deployments
• Parameterized deployments
• Infrastructure testing

Whether you're deploying a single Virtual Network or hundreds of landing zones across multiple environments, Infrastructure as Code ensures consistency, repeatability, and security.

BUILDING SECURE AZURE FUNCTIONS
Serverless computing is incredibly powerful—but it also introduces new security challenges. Rex demonstrates why Azure Functions should never simply be exposed to the public internet without proper protection. The conversation explores:

• Private Endpoints
• Virtual Network Integration
• NAT Gateway
• Azure Firewall
• Outbound traffic control
• Managed Identity
• Authentication
• Application security
• Network isolation

You'll discover practical techniques for reducing attack surfaces while maintaining the flexibility and scalability of serverless applications.

ZERO TRUST NETWORKING
Security is no longer just about firewalls. Modern Azure environments require Zero Trust principles at every layer. Rex explains how Network Security Groups, Azure Firewall, Managed Identities, Private Endpoints, and least-privilege access work together to create secure cloud-native architectures that minimize lateral movement and reduce attack surfaces. The discussion also highlights why automation and security must be integrated from the very beginning instead of being added later as an afterthought.

WHO SHOULD LISTEN?
This episode is perfect for:

• Azure Architects
• Cloud Engineers
• Infrastructure Engineers
• Network Engineers
• DevOps Engineers
• Platform Engineers
• Microsoft MVPs
• Security Architects
• IT Consultants
• Azure Administrators
• Anyone building enterprise Azure environments

Whether you're deploying Azure Landing Zones, modernizing on-premises infrastructure, designing enterprise networking, implementing Infrastructure as Code, or securing Azure Functions, this episode delivers practical guidance from years of real-world Azure experience. If you want to build cloud environments that are scalable, secure, automated, and maintainable, this conversation provides an excellent roadmap for mastering one of Microsoft's most critical technologies—Azure Networking.

Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-a-microsoft-mvp-podcast-by-mirko-peters--6704921/support.