https://daniyalahmed.dev/tags/%23gsa/Recent content in #GSA on Daniyal Ahmed | Red Team & Cloud SecurityHugo -- gohugo.ioen-usdaniyal.ahmed@microtechx.com (Daniyal Ahmed)daniyal.ahmed@microtechx.com (Daniyal Ahmed)Sun, 12 Jul 2026 00:00:00 +0000https://daniyalahmed.dev/posts/building-an-enterprisegrade-zero-trust-azure-landing-zone-2026-standards/Sun, 12 Jul 2026 00:00:00 +0000daniyal.ahmed@microtechx.com (Daniyal Ahmed)https://daniyalahmed.dev/posts/building-an-enterprisegrade-zero-trust-azure-landing-zone-2026-standards/If you’ve built Azure infrastructure before, you already know what the default posture looks like public IPs everywhere, storage accounts quietly exposed to the internet, NSGs that “allow all” because someone needed to test something and never reverted it. This blog tears all of that down and rebuilds it correctly: a five-phase Zero Trust landing zone designed specifically to frustrate lateral movement, eliminate data exfiltration paths, and force every workload through a central inspection chokepoint.