The latest articles on DEV Community by Gísli Guðmundsson (@gisli78). https://dev.to/gisli78 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4179915%2Fd97be367-06f1-4466-8d86-9748a0b7270e.png https://dev.to/gisli78 en Gísli Guðmundsson Mon, 12 Oct 2026 16:41:51 +0000 https://dev.to/gisli78/a-secure-azure-landing-zone-for-ai-workloads-195c https://dev.to/gisli78/a-secure-azure-landing-zone-for-ai-workloads-195c <p>Before the first model call, I lock down the platform: Azure AI Foundry (AIServices) behind a private endpoint with the three required private DNS zones, local auth disabled in favour of managed identity, and Azure API Management as the AI gateway using <code>llm-token-limit</code> and <code>llm-emit-token-metric</code>. Everything is in Bicep with automated tests.</p> <p>👉 Read the full article on Substack: <a href="https://gisli78.substack.com/p/a-secure-azure-landing-zone-for-ai" rel="noopener noreferrer">https://gisli78.substack.com/p/a-secure-azure-landing-zone-for-ai</a></p> <p>💻 Code: <a href="https://github.com/gislig/azure-ai-landing-zone" rel="noopener noreferrer">https://github.com/gislig/azure-ai-landing-zone</a></p> <p>Tags: #mvpbuzz #azure #azug #microsoft</p> azure ai bicep cloud