Alex Thissen

Session Title	Abstract
Unlocking the potential of OpenAPI with .NET 10	In this session, learn how OpenAPI can transform h... In this session, learn how OpenAPI can transform how you describe, version, and distribute your .NET backend APIs. We'll dive into how to implement Web APIs in .NET 10 using a code-first approach while seamlessly generating OpenAPI definitions. Discover how to streamline your workflow, manage API versions effectively, and provide your consumers with robust clients and documentation, all powered by OpenAPI.
DevContainers Deep Dive: beyond the basics	You have discovered DevContainers as a great way t... You have discovered DevContainers as a great way to get a development environment set up in no time. You might be wondering what more there is to development containers. In this session we will have a deeper look at DevContainers and find out about reuse, automation and team work. You will learn how to create templates and features yourself and build these in CI/CD pipelines. Same thing for prebuilt images. We are going to look at more complex scenarios that involve container compositions and dependencies. For teams we will cover versioning strategies for the DevContainer definitions, as well as personalization of the developer experience. To top it of, some nice tips and tricks and inner workings of development containers.
Deep aspirations: a close and in-depth look at .NET Aspire	In this sessionwe will look at how you can build s... In this sessionwe will look at how you can build scalable, robust and observable cloud-native solutions built with .NET 8 and 9 using .NET Aspire. Microsoft has introduced .NET Aspire as an opinionated cloud-ready stack to create distributed application. It addresses cloud-native concerns such as observability, discoverability and composition. You will be introduced to the common concerns for distributed applications, such as observability, service discovery and configuration, and learn how .NET Aspire can help. You will see how you can build your applications with .NET Aspire, by making proper use of the orchestration, components and tooling it offers. We are also covering the .NET Aspire service discovery and connection management, discover the programming model, components and the developer workflow. Finally, we are going to dive into the inner workings of .NET Aspire and see what happens under the covers during development on your laptop and in production in the cloud. Whether you are maintaining an existing application on premise or are building brand new applications, this session will help you understand what .NET Aspire can bring to you and how you can apply it in your application context.
Building cloud-native microservices with Dapr	Modern distributed applications require much more ... Modern distributed applications require much more than just application logic. Features such as state management for services, communication using publish/subscribe messaging and event-driven binding to cloud resources might be needed. Dapr introduces a runtime to offer such building blocks, and is less invasive in your application, allowing you to pick and choose what you need. In this workshop, we will look at the approach that the Dapr runtime takes with a sidecar architecture, separating application logic from the Dapr runtime components. You learn to develop distributed applications in .NET using Dapr's features and, how to bind to messaging infrastructure and cloud resources.
Dapr on GitHub Codespaces workshop	Dapr is an open source, event-driven, portable run... Dapr is an open source, event-driven, portable runtime for building microservices. It provides powerful building blocks to make it easy for developers to build resilient microservice applications using a variety of languages and frameworks. In this workshop you will get an introduction of Dapr and the Dapr building blocks. After that, you will learn how to apply Dapr yourself in a sample application during the hands-on part of the workshop. The workshop features step-by-step instructions. During the workshop you will get hands-on experience with the following Dapr building blocks: service invocation, state management, pub/sub, bindings and secret management. You will also learn how to deploy Dapr to a Kubernetes (AKS) cluster and how to use Dapr to leverage several Azure services.
DevContainers: Development environments as code	Are you struggling to maintain your development en... Are you struggling to maintain your development environment setup? Does it take long? If so, come check out devcontainers: full-featured development containers for your dev environment. Get started with a new machine, codebase or project in minutes, not days. Clean up in seconds. In this session you will learn what devcontainers are, how they work and how to use and create them using clients such as the devcontainer CLI, Visual Studio Code and Rider or CodeSpaces. We will also cover the specification and how to make them reusable by packaging and publishing devcontainers as templates and features. Devcontainers are essential to a great developer experience and in this session you learn why and how.
Doing Kubernetes DevOps style with Codespaces	This training introduces you to Docker and contain... This training introduces you to Docker and container technology for DevOps teams. We will show you how to apply DevOps practices to cloud-based container solutions, complete with hands-on exercises using Kubernetes. The training uses Microsoft tooling and technology, but you can apply the skills you will learn in any technology stack. This workshop contains hands-on labs to help you gain practical experience with the following topics: - Getting started with containers and Docker - Working with Kubernetes - Canary releases and A/B testing using Istio service mesh - Becoming familiar with GitHub Codespaces during the Labs Objectives: - Get hands-on experience supporting DevOps practices with available tools. - Understand the implications for DevOps teams to build, deploy and run container-based solutions in a cloud environment. - Practice finding and fixing bugs without downtime. Target audience: This training is intended for developers and architects that want to learn about DevOps practices and tooling for a cloud-based Kubernetes solution. This workshop is divided into two parts with separate labs and allows you to start at any point given your experience. The first part introduces you to container technology and tooling with .NET and ASP.NET Core. The second part covers container clusters and service meshes using Kubernetes and Istio. Throughout the workshop you will gradually improve your DevOps skills for container based solutions. All courseware is on GitHub, so you can both prepare for the workshop ahead of time and finish the workshop from home if you are unable to finish the labs during the workshop. Labs can be executed your laptop, but we prefer using GitHub Codespaces. When using Codespaces, you will only need to bring a modern browser in order to perform the labs. We will provide you with proper access during the workshop.
Evolving your service landscape	Even now that applications are becoming more distr... Even now that applications are becoming more distributed and decoupled, you still need to make sure you do not break contracts between the various moving parts of your solutions as your landscape grows and matures. In this session we will have a look at how you can do versioning of contracts between clients and services, as well as between publishers and subscribers. Also, you are going to see what client contract testing is all about and how it can help you to get a grip on releasing new versions of your services. We will look at the concepts, approaches and strategies, but also get a practical view of applying these ideas into your software lifecycle using .NET based solutions and Pact for contract testing.
Go (con)figure - making sense of the .NET configuration system	By properly configuring your applications you can ... By properly configuring your applications you can make them behave in a flexible manner in different environments. This is an essential enabler to do proper CI/CD while adopting a DevOps way of working. .NET offers a hierarchical configuration system able to layer and structure multiple configuration value providers and dealing with changes during operations. Understanding the specifics of this system will allow you to get the most out of configuring your cloud-based solutions. In this session we will look at the details of the configuration system of .NET Core and beyond and how to incorporate it in various scenarios, such as container hosted .NET applications, from development to production environments. Also, you will learn how to keep your configuration values securely stored using key vaults, container clusters and in pipeline based deployments and releases.
Flagging your features - a DevOps approach to continuous release	Your DevOps team wants to deliver business value a... Your DevOps team wants to deliver business value as often and fast as possible. Ideally you want to release a new feature whenever it seems ready. With feature flags you can achieve this selective releasing, but how do you do this in a structure and maintainable way that fits well with DevOps practices? In this session we will look at the implementation of feature flags in cloud native applications, the platform needed to support it and some strategies and patterns related to feature flagging, such as rings and A/B testing. You will learn how to build and maintain this using the Microsoft platform with .NET applications, Azure and Azure DevOps. Also, we will cover how to get feedback from the feature flags and loop it back to the deployment and release pipelines and environments to achieve an automated and stable system during release. At the end of this session you know how to get started with feature flags for continuous release DevOps style.
Let’s get minimal: .NET 7 minimal APIs in ASP.NET Core	In .NET 7 there will be significant changes to the... In .NET 7 there will be significant changes to the way you bootstrap an ASP.NET Core web application or API. It uses a number of new features in C# 9, 10 and 11 and the .NET framework to drastically reduces the code you need to define and start your app. It has been named Minimal Web APIs, but there is much more to it than just that. Time for us to take a look and discover what it is all about. During this session you will see the new ASP.NET Core approach, and learn how you can leverage this in your new applications from .NET 6 onwards. You will learn how to use dependency injection, new attributes, custom binding and changes in integration testing. Join me in this session to maximize your knowledge on minimal APIs.
Living past version 1.0 of your restful services: Web API versioning for ASP.NET Core	You have just successfully released your first Web... You have just successfully released your first Web API built in ASP.NET Core. Other applications are consuming the Web API and all is good. Then a newer version of your APIs needs to be build and you find that you have to deal with both new and old consumers. Versioning and backward compatibility becomes necessary all of a sudden. This session will show you how to add versioning support to your ASP.NET Core Web APIs. We will look at implementing multiple versions, version routing, versioning strategies, version discovery and adding documentation from Swagger. You are going to learn what it takes to evolve your Web APIs from version 1.0 until deprecation, but also how clients can consume the right version of APIs. Short: Learn all about versioning your Web APIs in ASP.NET Core. You will see when multiple versions are necessary and how to take care of hosting different versions, routing requests and using conventions, documentation and properly use version formats for long-term support of your web-based API.
Building intuitive command-line interfaces in .NET	The cross-platform story for .NET continues. More ... The cross-platform story for .NET continues. More and more tooling uses a command-line interface to make it easy to execute complex tasks from a script or console. Microsoft has invested in this area for their own tooling, such as the dotnet CLI or project Tye. You can benefit from their efforts by using System.CommandLine to build your own CLI or parametrize your application startup with arguments and options. The Microsoft .NET libraries hold a number of great packages to create intuitive CLIs, with commands that have features such as suggestions with tab-completion and typocorrections. In this session you will learn how to implement commands, with arguments and options, and leverage the build-in functionality such as binding, validation, middle-ware, command-hierarchies, parsing and much more. We are going to cover practical examples and use-cases, plus tips and tricks for efficient development and debugging. After this session you can are ready to go and build CLIs for your own .NET applications and tooling with minimal effort.
Coding 4 Fun: 8-bit game emulation in .NET	Retro gaming is coming to .NET. Did you know that ... Retro gaming is coming to .NET. Did you know that it is really possible to emulate the game consoles from the eighties and nineties using the .NET Framework and cross-platform? You can use .NET Standard Libraries and MonoGame to develop an emulator to make your childhood computer games come to life on Windows 11, Linux and MacOS. This session will show you how game emulation works, how to program it in C# with Visual Studio 2022 or Visual Studio Code and create apps using MonoGame. With plenty of demos and nostalgia this session is a welcome break even if you do not intend to write an emulator of your own.
Dapr for building distributed .NET Core applications	Modern distributed applications require much more ... Modern distributed applications require much more than just application logic. Features such as state management for services, communication using publish/subscribe messaging and event driven binding to cloud resources might be needed. Dapr introduces a runtime to offer such building blocks, and is less invasive in your application, allowing you to pick-and-choose what you need. In this session we will look at the approach that the Dapr runtime takes with a sidecar architecture, separating application logic from the Dapr runtime components. You will also see what it takes to develop distributed applications in .NET Core using Dapr's features and how to bind to messaging infrastructure, cloud resources and use the actor programming model and client proxies. At the end you know what it takes to combine Dapr in your ASP.NET Core applications using routing, controllers or using gRPC clients.
Architecting .NET solutions in a Docker ecosystem	You must have noticed how Docker and containers is... You must have noticed how Docker and containers is playing a more and more important part in .NET development. Docker support is everywhere, so it should be easy to build solutions based on container technology, right? But, it takes a bit more to architect and create a .NET solution that use Docker at its core. Many questions arise: How do you design a solution architecture that fits well with containers? Would I use .NET or .NET Core? What is a proper way to migrate to such an architecture? What changes in the .NET implementation from pre-Docker solutions with micro-services? Where do container orchestrators fit in and how do I build and deploy my solutions on a Docker container cluster, such as Azure Kubernetes Service? These and many other questions will be answered in this session. You will learn how to design and architect your .NET solutions and get a flying start to create, build and run Docker-based containerized applications.
Building real world production-ready Web API's with .NET Core	You might have started building your microservices... You might have started building your microservices-based Web APIs using .NET Core. And you are ready to go into production. Did you think about hosting, scaling, monitoring, versioning, documentation, resiliency and logging? Because going into production with just your business logic is not enough. In this session you will learn how you have to build your evolving Web APIs using .NET Core and the Microsoft platform and run in a robust, hyper-scale production environment.
Server-less compute with .NET based Azure Functions	Azure Functions offer server-less cloud services a... Azure Functions offer server-less cloud services and are the next evolution in distributed computing and hosting after containers. Join this session to learn how to develop Azure Functions using C# and .NET, and how to test, build and deploy to Azure. We will cover .NET programming details, architecture, internals and hosting. Also, you will learn how to set up a local development environment to build and host locally. After this session you are ready to design and create state of the art Azure Functions using .NET
Logging, tracing and metrics: instrumentation in .NET and Azure	Ever had production problems and found that you ca... Ever had production problems and found that you cannot debug to find the problem? Or that you need to find out where potential issues are coming from in your Azure cloud solution and you have no idea what is happening? Your applications need to be instrumented with logging, tracing and metrics, so you can see what is going on where. In .NET logging and tracing are built into the framework. We will have a look at the differences between logging, tracing and instrumentation in general. You will learn how to use .NET to implement logging and tracing with best practices, do semantic logging, work with logging factories, trace providers. Also, you will learn how to instrument using Application Insights and add W3C compliant tracing for correlation across cloud resources in a distributed application. Finally, we will put everything together to see how your logs and traces can give a rich way to get insights into your applications and services running in the Azure cloud or container based solutions.
It depends: loving .NET Core dependency injection or not	.NET Core comes with its own dependency injection ... .NET Core comes with its own dependency injection system, that you probably know from ASP.NET Core. In this session we will have a detailed look at all of the specifics of Microsoft's default DI system for .NET Core applications. You will learn how to properly use the Inversion of Control features, such as registering services, scopes, lifetimes, and how to resolve instances. Armed with this DI knowledge, we will revisit ASP.NET Core and investigate bootstrapping and typical scenarios for middleware, background processes and resolving objects from MVC and Razor. At the end there will be a deep dive into topics with service descriptors, implementation factories, do's and don'ts and pitfalls to avoid memory leaks in your implementation.
I don't feel so well… Integrating health checks in your .NET solutions	Do you have any idea how your ASP.NET Web Apps and... Do you have any idea how your ASP.NET Web Apps and APIs are functioning? Are they behaving healthily or in a degraded state? You might be able to tell from log information and telemetry data, but why not have them tell you how healthy they are themselves? ASP.NET Core introduced health endpoints that let your apps and APIs do just that. In this session you will learn how to make health checks an integral part of your solution. We will cover various types of health checks ranging from internal status, such as memory thresholds, to health based on external dependencies, such as databases and HTTP endpoints. Finally, you are going to see how this all can be used in a container cluster to allow the orchestrator to check for liveliness and readiness based on your health endpoints.
From .NET to .NET Core for cloud solutions	This workshop will focus on migrating your .NET Fr... This workshop will focus on migrating your .NET Framework based solutions to .NET Core and designed to run in the cloud. During the workshop you are going to learn what: - .NET Core 3.0 platform is all about - Understand .NET Standard 1.0 to 2.1 - Changes required to migrate your .NET FX solution to .NET Core - Apply cloud patterns in ASP.NET Core 3.0 web applications and APIs for resiliency and - Apply container technology to implement cloud and container hosted .NET Core applications - Use tooling and patterns to develop containers for Azure cloud
Getting your head around .NET Standard 2.1	The .NET Standard introduced a new way of creating... The .NET Standard introduced a new way of creating highly portable .NET assemblies. The .NET Standard was mainly targeted at library developers. Now, .NET Standard 2.1 has much more impact on .NET developers of all platforms. And as it turns out, the .NET Standard is not trivial to understand. In this session you will learn what the .NET Standard is and how it is used to allow you to create cross-platform .NET applications. You are going to see how version 2.1 is a big step forwards for creating and migrating existing apps to new platforms such as .NET Core and the key differences with 2.0. You will get practical guidance to start migrating existing libraries and applications to .NET Standard 2.1, but also get to understand the internals. You are going to see how .NET Standard 2.1 works under the covers during build time and runtime, and how the standard is incorporated into the existing .NET platforms. At the end of the session, you've got your head around .NET Standard 2.1 and you are ready to use it in your .NET development with confidence and proper understanding.
Serverless .NET Solutions using Azure Functions	This workshop will start with the basics of server... This workshop will start with the basics of server-less architectures and explain how Azure Functions play a part in building server-less solutions. You will learn how to develop Azure Functions using .NET Core and Visual Studio 2019. Next, you are going to build and deploy these with Azure DevOps using CI/CD. Also covered is the lifecycle management and operations of server-less solutions, with proxies, monitoring and zero-downtime deployments. Among the topics we will cover: • Getting started with server-less event-driven architectures and Azure Functions • Anatomy of an Azure Function: creating and dissecting your first functions • Knowing your triggers and how to binding your inputs and outputs • Long-running flows with Durable Extensions Framework • Build and release of Azure Functions with Azure Pipelines • Securing your solutions • Automated provisioning of Azure Functions with Azure Resource Management templates • Going to production: proxies, deployment slots • Monitoring server-less solutions: Integrating Application Insights in Azure Functions and using Azure Monitor
Closing the loop: instrumenting your .NET applications with OpenTelemetry	You build it, run it and own it. Knowing how your ... You build it, run it and own it. Knowing how your application behaves is easy in your development environment, because you have better debugging capabilities there. It gets more complicated when you run in production. Getting feedback from your application and learning its behavior is essential to close the DevOps feedback loop. In this session, you will learn what it takes to instrument your .NET application to get rich feedback in every stage of the lifecycle. We start by looking at the various ways to add logging, tracing, and metrics using the built-in .NET libraries. We will consume the telemetry data from your development environment with OpenTelemetry; no cloud required. Next, we will cover the production scenario and see how you can leverage Azure with Application Insights and Azure Monitor. By the end of your session, you will have a good understanding how to add proper instrumentation with OpenTelemetry and to put it to good use during your entire development lifecycle.
Cloud aspirations: building cloud-native applications with .NET Aspire	In this workshop we will look at how you can build... In this workshop we will look at how you can build scalable, robust and observable cloud-native solutions built with .NET 8 and 9 using .NET Aspire. Microsoft has introduced .NET Aspire as an opinionated cloud-ready stack to create distributed application. It addresses cloud-native concerns such as observability, discoverability and composition. We will start by examining typical distributed applications and their common architecture styles in the cloud, leveraging PaaS services from cloud providers with their resilience and scalability characteristics. After this overview we will introduce the common concerns for distributed applications, such as observability, service discovery and configuration, and how .NET Aspire can help. You will see how you can build your applications with .NET Aspire, by making proper use of the orchestration, components and tooling it offers. We are also covering the .NET Aspire service discovery and connection management, discover the programming model and the developer workflow. In the hands-on labs you will experience and practice this yourself. You will enhance an existing application by composing it using the .NET Aspire primitives of projects, containers and cloud resources. With guided exercises you can explore how your application changes with .NET Aspire, the way of working as a developer and DevOps engineer. Finally, we are going to dive into the inner workings of .NET Aspire and see what happens under the covers during development and in production. Whether you are maintaining an existing application on premise or are building brand new applications, this workshop will help you understand what .NET aspire can bring to you and how you can apply it in your application context.

Allen Conway

Session Title	Abstract
Zero to Hero: Blazor Web Apps	Blazor (Browser + Razor) has redefined the current... Blazor (Browser + Razor) has redefined the current landscape for web developers, allowing C# and .NET back into the modern web development picture. Leveraging a mix of WebAssembly and .NET allows running C# code in the browser, on the server or both, resulting in a productive use of the same language throughout the stack to build our modern web applications. At the core of Blazor is the ability to compose our web application using reusable components just like the modern browser frameworks. In this session, you'll learn the fundamental concepts about Blazor, compare it to the existing web framework options, and see how to create a basic modern web application leveraging C# and .NET.
TypeScript: Work Smarter Not Harder with JavaScript	As a modern web developer, it is almost impossible... As a modern web developer, it is almost impossible to create a successful application without JavaScript. In fact you might be venturing into the world of JavaScript apps already and have it as your primary language across layers. JavaScript being a dynamic language is at many times challenging to write and work with. Enter TypeScript. This typed superset of JavaScript has filled in the gaps where developing JavaScript natively suffers the most. In this session you will see how working with TypeScript allows us to leverage familiar skills and have a similar experience as when working with managed languages to make writing JavaScript much easier.
TypeScript: Moving Beyond the Basics	So you have the basics down in TypeScript fundamen... So you have the basics down in TypeScript fundamentals and have even begun creating applications using this wonderful language. However being stuck with just the basics does not allow you to unlock the full power that TypeScript has to offer. With a dizzying array of new features constantly being released from the TypeScript team, there is always something new to help with your app development. In this session, we will go beyond the basic language features and dig into new territory like advanced types, decorators, mixins, symbols, generics, iterators, and declaration merging to further your understanding of the wide variety of TypeScript features.
Navigating Your Career as a Software Engineer	Whether you are just getting started in your engin... Whether you are just getting started in your engineering career, have a few years under your belt, or have significant tenure and wondering about your next move, there are many decisions to make as a software engineer. Evaluating when to make your 1st move, technology focus, consulting vs. corporate app dev, moving to leadership or management vs. coding are all choices a software engineer will have to make. In this session we'll discuss the array of selections we might confront and how to evaluate these decisions targeted to software engineers at all stages in your career coming from someone with over 20 years of industry experience.
Migrating from AngularJS to Angular + TypeScript	AngularJS is legacy at this point and applications... AngularJS is legacy at this point and applications need to be migrated to Angular due to security issues and discontinuation of support. You may have already invested a lot of time and effort into building an AngularJS 1.x app, and haven't cut your teeth into migrating to Angular and TypeScript. With the Angular Upgrade library, we can bootstrap our Angular app as an Angular + AngularJS Hybrid app, and allow ourselves to migrate over time fully to Angular. The advantage of migrating is once converted to Angular + TypeScript, you will more easily be able to consume newer versions of Angular and TypeScript on regular intervals as well as take advantage of the newest framework and language benefits. In this session we will take a look at an AngularJS application and see the steps involved and how to break down migrating our application to the current version of TypeScript using Angular.
Getting Up and Running with Modern Angular	Angular is a full-featured and tenured client-side... Angular is a full-featured and tenured client-side framework for creating robust web applications. With its original inception over a decade ago, the ecosystem and adoption is extensive, however you may not have journeyed down the Angular path to this point. With concepts rooted in MVC development, bridging the gap with similar experience will help you become accustomed to this familiar paradigm of code implementation and flow. We'll look at the basics of creating a project, building components for the view, routing for navigation, and services to interact with our server data, in just a short amount of time. The framework is flexible yet powerful and you'll see how easy it is to get started. In this session learn why Angular is such a powerful framework to subsidize the existing landscape of your back-end services and code to create a rich, responsive front-end application.
Fast Focus: JavaScript Framework/Library Showdown	When creating modern web client applications in Ja... When creating modern web client applications in JavaScript, you will be presented with a major fork in the road on which framework or libraries you choose to use. This can have a major impact on the long-term development of your company or project, so knowing how to make an informed decision on which path to choose is important. In this Fast Focus session, we will discuss the three main players in this space with Angular, React, and Vue along with how WebAssembly and Blazor fits in the picture to help compare and contrast each helping you make the best decision for your web client development projects.
Fast Focus: Hybrid Web Frameworks	Hybrid Web Frameworks give developers an option to... Hybrid Web Frameworks give developers an option to create cross-platform applications using common web technologies. By working with a single codebase consisting of JavaScript, HTML, and CSS to reach both Android and iOS, your team can cut down development time and reach beyond browser-based web only applications. In this session we’ll discuss some of the mainstream frameworks like Ionic Capacitor to see how they can be leveraged to build hybrid web applications. We’ll also look briefly at the differences between Hybrid Web Frameworks vs other mobile implementations and the pros and cons of each.
Fast Focus: Deploying Web Apps to Azure using CI/CD in ADO	A key factor in any new DevOps journey is the abil... A key factor in any new DevOps journey is the ability to have repeatable, idempotent delivery to the cloud upon building and integrating code to your repositories. Deploying your web applications to Azure in a scripted and repeatable manner may not be as difficult as perceived if you've not already ventured into modern cloud delivery practices. In this session we'll take a quick look at how we can script out our build and release pipelines for Azure DevOps, along with the provisioning of our Azure cloud resources for a web app to see how easy it is to get started.
Building a Progressive Web App (PWA) using Angular	With the advancements in the modern browsers, Prog... With the advancements in the modern browsers, Progressive Web Apps (PWAs) have become a viable option for creating installable responsive web applications that are accessible from the home screen of native devices without the need of an app store. Leveraging the power of service workers provides many new benefits including the ability to work in the background not requiring browser user interaction, as well as the ability to work offline. With wide browser support for the service worker and PWAs, it's time to evaluate the option of leveraging one for implementing a native app as a more efficient model, while continuing to capitalize on our existing web development skills in the process. In this session we'll look at the benefits of using a PWA, and build a basic PWA using Angular, TypeScript, and Ionic.

Andreas Laeubli

Session Title	Abstract
Ask Your Data: Understanding and Using Microsoft Fabric Data Agents	Imagine your users could simply talk to your data—... Imagine your users could simply talk to your data—no SQL, no Power BI skills required. With Data Agents in Microsoft Fabric, this becomes reality. In this session, you'll learn how Data Agents connect natural language queries to your data models using Azure OpenAI and Microsoft Fabric. We’ll walk through the setup of a Data Agent, connect it to Lakehouses, Warehouses, or Power BI datasets, and demonstrate how to use it in AI Foundry and Copilot in Power BI. The goal: democratize data access and enable true self-service analytics—secure, scalable, and AI-powered.
Frag deine Daten: Microsoft Fabric Data Agents verstehen und nutzen	Stellen Sie sich vor, Ihre Nutzer:innen könnten mi... Stellen Sie sich vor, Ihre Nutzer:innen könnten mit Ihren Daten sprechen – ganz ohne SQL oder Power BI-Kenntnisse. Mit Data Agents in Microsoft Fabric wird genau das möglich. In dieser Session zeige ich, wie Data Agents mithilfe von Azure OpenAI und Microsoft Fabric eine Brücke zwischen natürlicher Sprache und komplexen Datenmodellen schlagen. Wir gehen durch die Einrichtung eines Data Agents, binden Lakehouses, Warehouses oder Power BI-Modelle an und demonstrieren, wie diese Agenten in AI Foundry oder Copilot in Power BI eingebunden werden können. Ziel ist es, Datenzugang zu demokratisieren und echte Self-Service-Analytics zu ermöglichen – sicher, skalierbar und KI-gestützt.
From Chaos to Clarity: Deliver Clean Data with Microsoft Fabric, Materialized Lake Views & GraphQL	In today’s world of composable architectures and r... In today’s world of composable architectures and real-time data demands, Microsoft Fabric offers a unified platform that transforms how we work with data. This session explores how Materialized Lake Views and the newly introduced GraphQL API empower teams to deliver clean, trusted, and production-ready data directly to external applications. We’ll walk through the Medallion architecture (Bronze, Silver, Gold), demonstrate how to build declarative pipelines using SQL, and show how Fabric handles orchestration, governance, and performance behind the scenes. The highlight: exposing Gold-layer views via GraphQL — enabling frontend developers, partners, and internal tools to access curated data with precision and ease. Whether you're building internal dashboards, customer-facing apps, or integrating with third-party services, this session will show you how to go from raw data to actionable insights — all within a single, scalable platform.
From Chaos to Clarity: Deliver Clean Data with Microsoft Fabric, Materialized Lake Views & GraphQL	In einer Welt voller composable Architekturen und ... In einer Welt voller composable Architekturen und Echtzeit-Datenanforderungen bietet Microsoft Fabric eine einheitliche Plattform, die den Umgang mit Daten grundlegend verändert. Diese Session zeigt, wie Materialized Lake Views und die neue GraphQL API Teams dabei unterstützen, saubere, vertrauenswürdige und produktionsreife Daten direkt für externe Anwendungen bereitzustellen. Wir führen durch die Medallion-Architektur (Bronze, Silver, Gold), demonstrieren den Aufbau deklarativer Pipelines mit SQL und zeigen, wie Fabric Orchestrierung, Governance und Performance im Hintergrund übernimmt. Das Highlight: Die Gold-Schicht kann direkt über GraphQL bereitgestellt werden – ideal für Frontend-Entwicklung, Partnerintegration und interne Tools. Ob interne Dashboards, Kundenportale oder Drittanbieter-Integrationen – diese Session zeigt den Weg von Rohdaten zu verwertbaren Insights auf einer einzigen, skalierbaren Plattform.
"Bronze, Silver, and Gold" - Get started with the medallion architecture in Microsoft Fabric	Microsoft Fabric is an all-in-one analytics soluti... Microsoft Fabric is an all-in-one analytics solution that covers everything from data movement to data science, Real-Time Analytics, and business intelligence. The medallion architecture design is the recommended approach for logically organizing data in a lakehouse. It comprises three distinct layers, each indicating the quality of data stored in the lakehouse, with higher levels representing higher quality. By using this design pattern, you can prepare data that is optimized for efficient analytics. In this session, you will learn how to use the medallion architecture design to organize and transform your data across bronze, silver, and gold layers of a Lakehouse for optimized analytics. Connect and work with the SQL Endpoints from a Lakehouse. And how to visualize your Lakehouse data in Power BI. By the end of this session, you will have a solid understanding of the benefits and best practices of using the medallion architecture in Microsoft Fabric Lakehouse.
Microsoft Fabric Data Activator: Real-Time Automation Made Simple	In today’s data-driven world, speed is key. The Mi... In today’s data-driven world, speed is key. The Microsoft Fabric Data Activator transforms how businesses respond to data by enabling rule-based, real-time automation. With its low-code platform, users can define triggers that act on data changes instantly, initiating alerts, workflows, or system updates. This session explores how the Data Activator seamlessly integrates with Fabric services like Synapse, Power BI, and Event Hubs, empowering organizations to build automated processes. Real-world examples, such as supply chain optimization or anomaly detection, will demonstrate how to configure actionable alerts and triggers. Discover how the Data Activator helps businesses react faster, adapt smarter, and operate more efficiently.
Unleashing AI Insights: From Data Agents to Custom RAG Solutions in Microsoft Fabric	Unlock the future of data access directly within M... Unlock the future of data access directly within Microsoft Fabric. This session delivers two high-impact, actionable strategies for leveraging AI with your enterprise data: Forget complex queries! We start by configuring a Fabric Data Agent to connect effortlessly to your existing Lakehouses, Warehouses, or Power BI semantic models. Learn how to define clear data source instructions and leverage the Agent directly within AI Foundry or Copilot Studio, instantly enabling natural language querying over your structured data. Next, we expand your knowledge base. We will demonstrate how to build a complete Retrieval-Augmented Generation (RAG) solution in Fabric to search and gain insights from unstructured documents. This step is crucial for extending corporate knowledge and building truly comprehensive AI-powered applications. Transform your data strategy by implementing both structured and unstructured data querying, empowering every user with scalable, secure, AI-powered self-service analytics.

Bas van de Sande

Session Title	Abstract
OMG! I built a neural network from scratch in C# and this is what I learned.	Almost everybody these days is talking AI. Every d... Almost everybody these days is talking AI. Every day you see exciting new tools and demos showing its potential. Many people use the technology without knowing at a fundamental level how it works (just like driving a car... yup you start it and drive away). A couple of years ago a very wise man told me, that I had to go back to the roots in order to see what is happening at the core of techologies that I'm using. An advise that I'm still grateful for. In order to understand what AI is, I had to study its roots. In this session, I'll show what I learned from building a neural network from scratch in C#. The network is capable of recognizing handwritten numbers, but it could be trained for recognizing other things as well.
Get out of your comfort zone! Embrace change...	I've been working in IT for over 25 years and over... I've been working in IT for over 25 years and over the years I stumbled, faced barriers and had big fears to change habits. This is a personal story on continuous self improvement: Changing habits, conquering big hairy audicious goals, getting naked, stepping out of your comfort zone, never ending learning, facing your biggest fears and going from a passive to an active mode. The intention of the session is to inspire people to take an active role their personal (and career) development.

Duncan Roosma

Session Title

Abstract

Unlocking the Power of Your Data with Large Language Models

In an age where data is abundant and Large Languag... In an age where data is abundant and Large Language Models (LLMs) like GPT-4 are transforming the way we interact with information, how can you leverage your own organizational data to unlock new insights and capabilities? This session explores the combination of unique technologies including Azure OpenAI, Azure ML Prompt Flow, and Azure Cognitive Search to overcome three key challenges: 1. Navigating the knowledge cutoff of LLMs 2. Integrating LLMs with your internal data 3. Understanding the sources LLMs draw upon Designed for introductory and intermediate learners, this session will guide you through the fascinating process of discovering the value of your data in conjunction with LLMs. You will learn how to craft effective prompts to guide LLMs, the vital role vector databases play, and the practical techniques needed to integrate LLMs with your unique data environment. You will learn: - How to synergize your data with Large Language Models for deeper insights - Techniques for crafting prompts that lead LLMs through your data - The application of vector databases in managing and exploring information - How to start asking insightful questions about your data in just 5 minutes! What sets this session apart: Through engaging demonstrations, you'll gain the tools to dive into this innovative field right away. Whether you're exploring new ways to utilize your internal data or looking to augment the capabilities of LLMs, this session offers a fast-track route to understanding and implementing these powerful technologies.

Erwin Staal

Session Title	Abstract
Smooth Sailing to Azure: Streamlining Datacenter Workload Migration	In today's rapidly evolving technological landscap... In today's rapidly evolving technological landscape, the allure of cloud-native deployments is undeniable. However, the reality of migrating existing resources to the cloud often presents significant challenges and complexities. Transitioning existing resources to the cloud can be challenging due to factors like unsupported Commercial Off-The-Shelf (COTS) products, outdated networking setups, and complex database dependencies. In this session, we'll explore the latest best practices to ease this process, even for the most traditional organizations. Attendees will gain insights into common obstacles hindering successful cloud migrations and learn strategies to overcome them. We'll also cover techniques for evaluating and prioritizing cloud migration needs, along with assessing various lift-and-shift patterns to identify the most suitable approach for specific workloads and organizational goals. Join us to equip yourself with the knowledge and strategies needed to successfully migrate to the cloud and unlock its full potential for your organization.
Efficient and Secure Software Delivery with Azure Deployment Environments and Dev Box	DevOps has accelerated software development, but o... DevOps has accelerated software development, but organizations still struggle to provide secure, compliant, and agile infrastructure. Azure Deployment Environments offers a solution by enabling quick setup of app environments with built-in security, compliance, and cost controls, aligning with the self-service platform engineering trend. Platform engineers can define environment types, simplifying deployments for developers. The service integrates seamlessly with CI/CD pipelines, ensuring smooth transitions to production. Additionally, Azure Dev Box streamlines development by providing pre-configured environments, ensuring consistency and fast onboarding. This session will demonstrate Azure Deployment Environments, its integration with Dev Box, and CI/CD pipelines to enhance software delivery efficiency and security.
Infrastructure as Code on Azure: Bicep vs Terraform vs Pulumi	On Azure, three of the most obvious choices for In... On Azure, three of the most obvious choices for Infrastructure as Code are Bicep, Terraform, and Pulumi. Bicep is Microsofts own domain-specific language, whereas Terraform is the open-source tool being cloud agnostic. Where Bicep and Terraform both have their own language, Pulumi allows you to write your Infrastructure as Code using your favorite language like C#, Python, or Go. In this session, we will discover where they are similar and where they are not and see their pros and cons. We will look at the ecosystems for these tools to see how well they integrate with other tools like security scanners and CI/CD pipelines. At the end of this talk, you can make a well-founded decision on which tool to use in your next project!
Landscaping your infrastructure garden: Terraform 101	Landscaping is the art and craft of growing plants... Landscaping is the art and craft of growing plants to create beauty within your garden. Don't worry; you won't get your hands dirty during this talk! However, we will discover how Terraform can help you create a perfectly crafted infrastructure landscape. We will cover the basics of Terraform, look at the language specifics, and cover what Terraform state is and how to store that securely. We will review the typical developer workflow, see the plan and apply commands in action. A pipeline will be put in place to automatically deploy infrastructure changes to your environments and ensure they are repeatable, reliable, and traceable. While most other Infrastructure as Code tools focus on a single cloud vendor, Terraform allows you to configure many more systems. You will see how Terraform can be used beyond cloud providers by, for example, also configuring your DNS provider or on-call system.
Govern your Azure environment through Azure Policy	When your Azure environment is relatively small, i... When your Azure environment is relatively small, it is straightforward to keep track of what resources you have running in Azure and make sure that your solution is secure, compliant, and cost-effective. When your cloud workload gets bigger, and you have a lot of subscriptions and multiple management groups, that is much harder to do. Luckily, Azure has a built-in feature called Azure Policy that can help you govern your Azure resources. But how do we implement policies, guarantee compliance and security, without decreasing developer agility? This session will teach you how to deploy policies using Infrastructure as Code. You will see how to use the built-in policies and how to create your own. We will look at all the different effects that a policy can have and which should be used when. You will learn how to assign policies on different scopes and finally how to review the compliance status. All with the goal to enforce security, being compliant, monitoring that continuously, and keep costs at bay.
Take your network security to the next level on Azure PaaS	Ever used SQL-server in Azure? If you did, you pro... Ever used SQL-server in Azure? If you did, you probably added your IP address to the firewall whitelist to be able to access it from your dev machine. You checked the ‘allow azure services checkbox’ which allows a web app, for example, to access your database. I believe in the layered security model, where we add different layers on top of each other to strengthen our security. By enabling that ‘allow...’ checkbox we just peeled off one important layer of security. All a hacker needs to get your data is a service on Azure and a leaked password. In this session, I will show you how to add additional security layers using virtual networks, Azure Private Endpoints, Service endpoints, VPN connections, and more. I will tell you how to get started and what limitations you can expect for all of these services. You see me build a demo in which we lock down a database and API and let a front-end application securely access that.
Building a solid foundation on Azure: Landing Zones best-practices	What is the main purpose of DevOps teams? Deliveri... What is the main purpose of DevOps teams? Delivering value for the business! That means these DevOps teams should not worry about the most basic infrastructure they need to run their workloads in Azure. In this technical deep dive, we explore the core elements of designing a robust foundation on Azure. We'll start by demystifying the Cloud Adoption Framework and will dig into one of its area's in which we find the Azure Landing Zones. We will discuss their role as the foundation for secure and compliant cloud adoption and learn all best practices based on experience in the field. We will cover resource organisation, networking, security, role based access control, different operating models and more! By the end of this session, attendees will be equipped with the knowledge and insights needed to craft efficient network architectures and leverage Landing Zones to build a solid foundation in Azure.
Azure Networking Essentials: A foundation for Cloud Success	As organizations migrate their infrastructure to t... As organizations migrate their infrastructure to the cloud, understanding the fundamentals of networking in Azure is crucial for architects, developers, and IT professionals. The ones who grasp the fundamentals of networking in Azure are better equipped to create high-performing, secure, and scalable applications while reducing operational risks and costs. This knowledge is invaluable in the cloud-centric era, where networking is vital to the success of applications and services. This session comprehensively explores Azure's essential networking concepts and tools, catering to beginners and those looking to deepen their knowledge. Participants will embark on a journey that starts with an introduction to Azure's global network infrastructure, regions, and availability zones, ensuring a foundational understanding of high availability and redundancy. The session covers key components, such as Virtual Networks, Private Endpoints, and routing. Participants will also gain insights into load balancing techniques, hybrid networking solutions using Azure Virtual WAN, and securing networks using the Azure Firewall. Since there is truth in the infamous meme “It’s always DNS.”, we need to talk about DNS management. This talk will empower participants to design, deploy, and manage robust Azure network architectures effectively.
Infrastructure from Code: The Next Generation of Cloud Management	While Infrastructure as Code (IaC) has become the ... While Infrastructure as Code (IaC) has become the standard for managing cloud resources using tools like Terraform or Bicep, writing templates can still be a time-consuming and complex task. But what if infrastructure could be automatically inferred from your application code? In this session, we’ll explore the emerging concept of "Infrastructure from Code". We will take a tour of different tools like Radius, Pulumi, Nitric and more and evaluate their maturity. Are these tools ready to replace traditional IaC? Join me to find out if it’s time to make the leap to a more seamless infrastructure experience.
Digital Sovereignty on the Azure Cloud	For organizations in the EU, moving to the cloud r... For organizations in the EU, moving to the cloud raises important questions about control, data protection, and compliance with European laws like the GDPR. In this session, we’ll explore what digital sovereignty means in the context of Microsoft Azure. We’ll look at how to keep control over your data by classifying it based on sensitivity and securing it with tools like Azure Information Protection and Managed HSM. We’ll also cover how Azure supports compliance through data residency guarantees, policies, confidential compute, and the EU Data Boundary. Finally, we’ll examine Azure Local to check if it can help us in this context? We will learn if all that is enough to ensure that personal data stays within Europe.

Harald Binkle

Session Title	Abstract
Bootcamp - Testautomatisierung mit Playwright	Der Workshop "Testautomatisierung mit Playwright" ... Der Workshop "Testautomatisierung mit Playwright" bietet eine umfassende Einführung in die Verwendung des Playwright-Frameworks zur Testautomatisierung. Playwright ist ein leistungsstarkes Open-Source-Tool, das die Entwicklung zuverlässiger und skalierbarer Testskripte für Webanwendungen ermöglicht. In diesem Workshop lernen die Teilnehmer Playwright zu installieren, zu konfigurieren und Testskripte zu schreiben und auszuführen. Außerdem werden Best Practices für die Organisation und Pflege von Testfällen diskutiert. Der Workshop richtet sich an Entwickler, Tester und QA-Teams, die ihre Fähigkeiten im Bereich der Testautomatisierung erweitern möchten. Vorkenntnisse in der Webentwicklung und Grundkenntnisse in der Testautomatisierung sind von Vorteil, aber nicht zwingend erforderlich. Am Ende des Workshops werden die Teilnehmer in der Lage sein, Playwright effektiv einzusetzen, um automatisierte Tests für Webanwendungen zu erstellen und die Qualität ihrer Software zu verbessern.
Präsentationen von Entwicklern für Entwickler mit slidev	Entwickler stehen beim Erstellen von Präsentatione... Entwickler stehen beim Erstellen von Präsentationen immer wieder vor Herausforderungen. Wie bekomme ich den Quellcode mit Syntaxhighlighting auf die Folien? Mein Quellcode passt gerade so nicht auf eine Folie, kleiner machen, oder aufteilen? Ich habe schon Diagramme zu mein meinem Projekt, Screenshots/Bilder davon auf Folien zu bringen ist blöd, geht das anders? Diese und mehr Fragen werden in dem Vortrag beantwortet. Es wird eine Lösung zum erstellen von Präsentationen von Entwicklern, für Entwickler vorgestellt, deren Erweiterbarkeit und Individualisierungsmöglichkeiten gezeigt.
Die Leistungsfähigkeit von Visual Studio Code entfesseln	Visual Studio Code ist eine äußerst leistungsfähig... Visual Studio Code ist eine äußerst leistungsfähige integrierte Entwicklungsumgebung (IDE), aber nutzen Sie dessen Funktionen und Erweiterungen voll aus, um Ihre tägliche Produktivität zu steigern? Nutzen Sie Erweiterungen, die eine verbesserte Übersicht bieten und helfen, Fehler zu minimieren? In diesem Vortrag werde ich außergewöhnlichen Funktionen von Visual Studio Code demonstrieren und wesentliche Erweiterungen für die Full-Stack-Entwicklung mit Web-Frontends (z. B. React), C#-Backends und CI/CD-Umgebungen wie Azure DevOps oder GitHub empfehlen. Durch die Umsetzung dieser Empfehlungen können Sie Ihre Effizienz bei der Arbeit mit Visual Studio Code erheblich verbessern.
Workshop: Moderne Web-Applikationen mit React 19 und Material-UI 6 in TypeScript	In diesem Workshop geht es um die Erstellung von B... In diesem Workshop geht es um die Erstellung von Browser-Applikationen mit TypeScript, React und Material-UI. Sie lernen, welche Technologien in solch einer modernen Anwendung drin stecken, den Umgangen mit diesen Technologien und wie man heutzutage eine Web-Anwendung aufbaut, um Testbarkeit, Wartbarkeit und Skabarkeit zu gewährleisten. Es werden gängige Fallstricke und Besonderheiten aufgezeigt genauso, wie wichtige Unterschiede zwischen Web-Seiten-Entwicklung und Web-App-Entwicklung. Vor allem für Entwickler, die aus der Desktopentwicklung kommen, werden viele Parallelen für den leichten Einstieg gezeigt, u.a. wie Sie nerviges CSS größtenteils vermeiden können. Themen, die angesprochen werden: - Einrichtung von Visual-Studio-Code für Web-App-Entwicklung - Extensions - Debugging - Einführung in Typescript als Superset von Javascript (Generics, Types, Interfaces) - React mit funktionaler Entwicklung - Component Lifecycle Methods - State-Handling mit React-Context - React-Hooks - Material-UI als UI-Framework (Komponenten, Layouting, Styling) - Data-Fetching - Browser fetch-API - REST-Client-Generierung mit AutoRest - Performace Optimierungen und Do’s und Dont’s - Umgang mit NodeJS - Bundler (webpack oder vite) - optional: Testing (Unit-/Component-Tests, Integration-Tests mit Playwright) - optional: App-Konfiguration
Auf welche Web-UI Technologie setzt Microsoft? Ist das React?	Egal ob Sharepoint, Power-Platform oder neue Offic... Egal ob Sharepoint, Power-Platform oder neue Office365 Anwendung (Teams, Outlook etc.). Für neue Web- oder Hybrid-Anwendungen verwendet Microsoft React. Also warum nicht auf das gleiche Pferd, setzen? Bei der Modernisierung einer Legacy-Windows-Desktopanwendung sehen sich Entwickler mit einer Vielzahl von Web-Technologien und unterschiedlichen Programmierparadigmen für das Front-End konfrontiert. Durch die Auswahl der geeigneten Web-Technologien und Frameworks können Windows-Entwickler die Notwendigkeit vermeiden, anspruchsvolle Technologien wie CSS beherrschen zu müssen. Dieser Vortrag bietet einen kurzen Überblick und praktische Anleitungen zu dem Wissen, das Windows-Entwickler leicht übertragen können, sowie den Hauptunterschieden bei der Entwicklung eines Frontends für das Web. Unter Verwendung von React- und dem Material-UI-Framework werden den Teilnehmern die wesentlichen Unterschiede aufgezeigt und wie sie lästige Themen, wie CSS größtenteils vermeiden können. Am Ende dieser Sitzung werden ehemalige Windows-Entwickler Wissen über einen grundlegenden Satz von Technologien zur Hand haben, um mit dem Aufbau eines Web-Frontends beginnen zu können.
It's all greek to me! - Lokalisierung in Web-Apps elegant und einfach	Eine Web-App zu lokalisieren ist heute dank i18n u... Eine Web-App zu lokalisieren ist heute dank i18n und der Gleichen nicht schwer. Aber gerade bei großen oder vielen Web-Apps in einem Unternehmen ist deren Lokalisierung skalierbar zu bewältigen eine Herausforderung. Aber was genau ist zu beachten? Welche Tools können helfen? Was ist, wenn die Web-App groß wird? Geht es noch besser oder schöner als nur mit den i18n Paketen? Der Vortrag wird diese Fragen beantworten und am Beispiel einer Implementierung in einer React-Web-App zeigen wie schön und einfach Lokalisierungen realisiert und gepflegt werden können.
Testautomatisierung für WebApps mit Playwright	Testautomatisierung ist ein wichtiger Baustein von... Testautomatisierung ist ein wichtiger Baustein von Software-Entwicklungsprojekten. Das Fundament bilden dabei Unit Tests. Nicht alles lässt sich aber mit Unit Test Frameworks adäquat testen, sodass noch immer spezifische UI Tests zur Ergänzung zum Einsatz kommen. Im WebApp Bereich ist der Platzhirsch hier Selenium. In der jüngeren Vergangenheit sind neue Alternativen zu Selenium entstanden. Der neuste und vielversprechendste ist dabei das Open Source Framework Playwright von Microsoft. Playwright Tests lassen sich dabei flexibel in unterschiedlichen Sprachen wie C# oder JavaScript erstellen, unterstützen auch unterschiedliche Browser sowie Betriebssysteme. Im Vortrag sollen die Konzepte, Vorteile, Nachteile und Unterscheide im Vergleich zu Selenium gezeigt werden. An Live-Demos wird es ebenfalls nicht fehlen, sodass ein besseres Gefühl für Playwright vermittelt wird.
Nutze das volle Potenzial von Dev-Containern u.a. in Webentwicklungs-Workflows	Durch die Nutzung containerisierter Entwicklungsum... Durch die Nutzung containerisierter Entwicklungsumgebungen erreichst du Konsistenz, Isolation und Portabilität und transformierst so, wie du Code schreibst, testest und bereitstellst. - Nicht nur bei Webentwicklungs-Workflows, sondern auch im DevOps-Bereich oder anderen Entwicklungsumgebungen. Es kann sogar Performancevorteile geben Dev-Container zu nutzen. Begleite uns, wenn wir in die praktischen Vorteile von Dev-Containern eintauchen und erkunden, sie konfigurieren und wie sie deinen Entwicklungsprozess revolutionieren können, indem sie ihn effizienter, sicherer, angenehmer und schneller machen. Bist du bereit, deinen Workflow zu verbessern?
GitHub Copilot mit Nachbrenner: Erweiterungen & Power-User Funktionen für smarteres Coden	Visual Studio Code hat sich als eines der beliebte... Visual Studio Code hat sich als eines der beliebtesten und leistungsstärksten Entwickler-Tools etabliert. Ein entscheidender Erfolgsfaktor war dabei die umfangreiche Auswahl an verfügbaren Erweiterungen und Anpassungsmöglichkeiten. In unserem Vortrag zeigen wir, wie der Copilot in Visual Studio Code durch gezielte Erweiterungen, individuelle Konfigurationen und effektive "Power-User"-Prompt-Befehle optimiert werden kann. Zu Beginn des Vortrages zeigen wir wie durch bereits verfügbare Funktionen (Slash Commands, Chat Participants und -Variables, etc.) oder Anpassung der Konfiguration bereits bessere Ergebnisse erzielt werden können. Den Abschluss bildet die Erweiterung von Copilot über GitHub Copilot- und Visual Studio Code APIs. Als praktisches Beispiel nutzen hierfür wir unser Open-Source-Projekt VOCE, das Azure DevOps-Daten in Copilot integriert.
Gib der KI ein Gesicht. Vom einfachen LLM Chat zum sprechenden Avatar.	In diesem Vortrag wird gezeigt, wie man aus einem ... In diesem Vortrag wird gezeigt, wie man aus einem einfachen, textbasierten LLM-Chat einen eigenen virtuellen Assistenten erstellt, mit dem man sich von Angesicht zu Angesicht unterhalten kann. Wir vereinen die Dienste von Azure OpenAI und Azure Speech Services, sodass die KI Sprache versteht und spricht. Zudem verleihen wir der KI ein Gesicht. Anhand der Avatare von Azure Speech Services oder eigener Modelle wird veranschaulicht, worauf es bei der Erstellung eines solchen virtuellen Assistenten ankommt.
GitHub Copilot für Delphi: Geht nicht? Geht doch!	Die Delphi IDE mag ihn nicht direkt unterstützen, ... Die Delphi IDE mag ihn nicht direkt unterstützen, aber in diesem Vortrag lüfte ich das Geheimnis, wie Sie GitHub Copilot dennoch für Ihre Delphi-Projekte nutzen können – mit einem cleveren Spagat über VS-Code. Erleben Sie, wie kontextbezogene Code-Completions und der revolutionäre Agent Mode weit über das bloße Einfügen von Quelltext hinausgehen: Copilot versteht Ihre Absicht, schlägt passenden Code vor und löst sogar mehrschrittige Aufgaben. Sparen Sie Zeit, reduzieren Sie Fehler und heben Sie Ihre Delphi-Produktivität auf ein völlig neues Level – ein Blick in die Zukunft der Entwicklung, den Sie nicht verpassen sollten!
Workshop: GitHub Copilot von A bis Z	Angefangen von mit den Grundlagen von GitHub Copil... Angefangen von mit den Grundlagen von GitHub Copilot über täglich Nutzung bis hinzu Poweruser Funktionen werden wird GH Copilot in diesem Workshop durchleuchtet und seine momentanen Grenzen aufgezeigt. Wir schauen uns an welche verschiedenen Möglichkeiten es gibt Copilot in Visual Studio Code einzusetzen und werden dies mit zahlreichen Übungen gleich austesten. Am Ende des Workshops wird jeder Teilnehmer verstehen wie GH Copilot funktioniert, wie man Ihn effizient einsetzen kann und wie man seine Möglichkeiten erweitern kann.

Jesse Wellenberg

Session Title	Abstract
Prompting your platform: Building AI Powered infrastructure templates	More organizations are adopting infrastructure tem... More organizations are adopting infrastructure templates to streamline the creation of secure, compliant applications. In this session, you’ll discover how to build MCP (model context protocol) servers and design AI agents that interact with these templates, helping your developer teams with picking the right infrastructure components. See how GitHub and Kubernetes MCP servers can work together to drive GitOps-powered automation in Azure. This talk is for platform engineers and developers building cloud infrastructure. Expect hands-on demos to help you use AI to automate.
Building Cloud Native Applications with WebAssembly System Interface	The WebAssembly System Interface (WASI) is revolut... The WebAssembly System Interface (WASI) is revolutionizing the world of cloud computing as we know it. You might have heard that it has the potential to replace containers, but how does it work? How do you get started? And how do you build a real application with WASI? In this talk, we will dive into what WebAssembly and WASI are and how to develop applications that use this new technology. Additionally, you will learn about several projects in the WASI ecosystem that can help accelerate your WASI development journey. By the end of this talk, you will not only have a strong understanding of WASI and its capabilities, but also the knowledge and tools to begin solving real-world problems with this cutting-edge technology. If you are curious about WASI and what it can do for your applications, this is the talk for you!
Abstraction, Complexity, and the Art of Overengineering	Ever worked on a fancy system that looked perfect ... Ever worked on a fancy system that looked perfect but fell apart when things changed? We've all been there. Sometimes, we create these big, complicated solutions that only make sense to the person who built them. I've done it too. Figuring out how much complexity is acceptable for a given problem can be tricky. So, how do we get it right? In this session, we'll talk about how to solve programming problems in general. We'll look at how using abstract ideas can make projects complicated over time. Plus, we'll discuss two simple strategies to figure out the right level of complexity for your projects. If you've ever felt stuck dealing with a super complicated system, this session is for you! Let's make things simpler and better together.
GitOps in Action: Managing Azure Infrastructure with ArgoCD & Azure Service Operator	In this session, explore the world of GitOps and l... In this session, explore the world of GitOps and learn how to automate and manage your Azure infrastructure using kubernetes, ArgoCD, and the Azure Service Operator. We'll walk you through syncing your cloud resources directly from declarative configuration stored in a Git repository, combining the power of infrastructure-as-code with the simplicity and familiarity of Git workflows. This talk is perfect for developers, DevOps engineers, and platform engineers looking to expand their horizons past ci/cd pipelines. Expect hands-on demos and practical guidance to get started with deploying and managing Azure infrastructure like a pro.

Jesse Houwing

Session Title	Abstract
Mastering GitHub Projects	GitHub has a very flexible and powerful system to ... GitHub has a very flexible and powerful system to plan, visualize and manage your work. So flexible that most people have no clue where to start. Contrary to many other tools, GitHub Projects isn't prescriptive. When you start a new project it can be as simple as a list of items and a very simple "todo/doing/done" board. From there you have to build out the views that support how you work. While this is VERY powerful, most people seem to struggle. So let Jesse organize your thoughts and piece together the required steps to then organize your work.
Building a GitHub Copilot prompt library	It's been a long requested feature for GitHub Copi... It's been a long requested feature for GitHub Copilot. The ability to store and share prompts for easy reuse and to help you get things done. And now you can! In this session Jesse walks through GitHub Custom Instructions and the prompt library features to help you build your own library, share it with colleagues and use them to tame Copilot for all the members of your project.
10 secrets about Github Actions unveiled	GitHub actions is the most universal workflow, con... GitHub actions is the most universal workflow, continuous integration and continuous delivery workflow engine available for GitHub. Its simple to get started, but has many secret tweaks and toggles you just have to know to take advantage of them. In this session Jesse Houwing will walk through 10 each covering different topics: performance, security and usability.
Agile is dood! Lange leve Agile!	Je moet deze berichtjes wel langs hebben zien kome... Je moet deze berichtjes wel langs hebben zien komen op social media: - Agile is dood! - Waarom wij gestopt zijn met Scrum - Service Reliability Engineering is het nieuwe DevOps. De Full Stack Engineer is de nieuwe ontwikkelaar! - Agile is niet voor: gereguleerde omgevingen/financiele instellingen/gezondheidszorg Deze berichten hebben allemaal iets gemeen: De mensen die deze klacht delen hebben nooit echt Agile meegemaakt. Laten we de onderdelen van Agile die vaak overgeslagen worden onderzoeken en kijken of we onze projecten en wellicht de hele organisatie kunnen genezen van Agilitis-Opsfluenza.
10 dingen die je moet weten over GitHub Actions	GitHub Actions is het meest universele workflow, c... GitHub Actions is het meest universele workflow, continuous integration en continuous delivery gereedschap voor GitHub in onze koffer tegenwoordig. Het is vrij gemakkelijk om je eerste workflow te maken, maar er zijn veel kleine aanpassingen die je kan doen om je workflows beter te maken. Je moet alleen wel weten waar die zijn verborgen. In deze sessie neemt Jesse Houwing je mee in de wereld van GitHub Actions en laat hij je zien hoe jij je workflows sneller, veiliger en makkelijker bruikbaar kan maken.
Bouw je eigen GitHub Copilot prompt bibliotheek	De mogelijkheid om je eigen prompts op te slaan in... De mogelijkheid om je eigen prompts op te slaan in GitHub Copilot werd de afgelopen jaren veel gevraagd. En je kon natuurlijk een berg txt bestanden in je repo zetten, maar erg gebruikersvriendelijk was dat niet. Recent is Visual Studio Code uitgebreid met de mogelijkheid om prompt files en custom instructions te maken! In deze sessie neemt Jesse je mee langs de verschillende opties om custom instructions en prompts op te slaan in je eigen prompt bibliotheek en hoe je prompts kan delen met andere gebruikers van dezelfde repositories.
Speeding up AI with better CI and CD using GitHub Copilot Coding Agent and Actions	Agentic AI is now able to work while you are doing... Agentic AI is now able to work while you are doing other things. CI and CD then help you verify and ship your code to production safely. Stable and fast CI/CD was already important with human engineers, but with AI creating more changes, faster and in desperate need for quality feedbacn, it's becoming maybe even more important. The session uses GitHub Actions to explain what you can do to get better feedback faster from your CI/CD workflows and how Copilot Agent benefits from these changes.
Agile is dead! Long live Agile!	You must have seen these items flow through your t... You must have seen these items flow through your timeline: - Agile is dead! - Why we stopped doing Scrum - SRE is the new DevOps is the new Full Stack Engineer is the new Developer - Agile is not for: regulated industries, financials, healthcare... Most of these carry a common theme... The people making these complaints never did or experience Agile in the first place. Lets look at the elements of Agile that are often skipped and ignored and let's see if we can revive the projects and organizations that suffer from Agilitis-Opsfluenza!
Ohh Sh*t Git!	Git is the most popular source control mechanism f... Git is the most popular source control mechanism for new projects, the standard in open source. It’s very powerful and allows you to do things you may not even aware of. Unfortunately, it’s also quite easy to put yourself into a situation where you’ll exclaim: “Ohh sh*t! Git!”. Let’s look at some common mistakes you may make and how to fix them.
When Scrum goes bad	Scrum is simple. It has 11 elements. 5 Events, 3 R... Scrum is simple. It has 11 elements. 5 Events, 3 Roles and 3 Artifacts. But even though Scrum is simple, it is hard. Hard to do right. Daily Scrum's only on Tuesdays? A Sprint Demo? The team asking for approval from their Product Owner at Sprint Review... These are only a few of the ways scrum can get corrupted. Let's scan out collective Scrum hard dive and run checkdisk /f on it to get rid of some of the bad sectors, rebuild some of the indexes and resolve the lost files.
Upgrading to GitHub Enterprise	For years GitHub has been the home of all my small... For years GitHub has been the home of all my small Open Source projects. And you get almost all Enterprise features for free. Companies can subscribe to GitHub's enterprise plan to get the same benefits for all their public and private repositories. Recently Xebia went through this "upgrade" and we're in the process of enabling all enterprise features on all Xebia's organizations. Now you might think the process for this is covered in a simple wizard you next-next-pay-finish through, but it's not that simple. In this talk Jesse will take you along the journey of taking 38 GitHub organizations, grouping them together using GitHub Enterprise and going through the process of enabling the Enterprise features on them and the creative workarounds to make this happen as smoothly as possible.
Properly secure your GitHub Actions	The GitHub marketplace contains 21500 Actions at t... The GitHub marketplace contains 21500 Actions at the time I write this. Tomorrow it will probably be at least one more. Creating and publishing an action is a very simple process, which must have helped with the success of the platform, however, properly securing the repository against attacks isn't as easy as it seems and the first Action worm proof-of-concepts have already been demonstrated. Do you own a GitHub Action? Do you use GitHub Actions? In that case, knowing how to properly secure your GitHub Actions environment is super important. This session quickly covers GitHub Actions in general before exploring all the features GitHub offers to protect your actions from attack.

Jesse Swart

Session Title	Abstract
Bringing Animatronics to Life with Large Language Models and Azure AI	Discover how to combine Azure's AI technologies, i... Discover how to combine Azure's AI technologies, including Azure OpenAI and AI Speech, with Arduino to create interactive animatronics. This session offers a straightforward look at using advanced AI to animate robots, making them more responsive and engaging. Perfect for AI enthusiasts and software developers, we will demonstrate a real animatronic that listens, speaks, and interacts, showing the practical use of AI in robotics. Learn how these technologies can be used together to bring animatronics to life in a clear and accessible way.
How We Built A Generative Trading Card Game With Stable Diffusion & Semantic Kernel	Explore the exciting world of generative AI-powere... Explore the exciting world of generative AI-powered trading card games in this session! Learn how to transform real-time camera input into unique cartoon characters using Stable Diffusion on the edge. Discover the magic of creating a one-of-a-kind trading card game by integrating Azure AI Services and leveraging the power of Semantic Kernel with LLMs in C#. We'll walk you through the process of combining AI and traditional programming to build an innovative collectible card game. This session is ideal for developers, AI enthusiasts, and card game aficionados. Expect to leave with the know-how to run Stable Diffusion locally and start creating your own unique images.
From Muffins to Models: Building Custom Classifiers in Azure	In this session, we’ll explore how Azure’s Custom ... In this session, we’ll explore how Azure’s Custom Vision service can help us move beyond out-of-the-box models to build our own tailored image classifiers. We'll learn how easy it is to create and train a custom model by uploading and tagging your own images, take advantage of auto-tagging as the model improves, and integrate the classifier into an application using the SDK

Josh Garverick

Session Title	Abstract
Cloud Infrastructure for Developers	Developing applications can be challenging enough—... Developing applications can be challenging enough—and now you have to worry about where it gets deployed as well? In this session, we will cover some basics of cloud infrastructure, how to test against local and cloud based resources, and how to figure out what services will work best for your application. Using a code first approach, you’ll learn how to codify those services and tie it all together with build and release scripts.
Overcoming Technology Indecision	There are a wide variety of different technology p... There are a wide variety of different technology patterns, development languages, hardware configurations, cloud services, data models...phew! Understanding them all is a challenge unto itself, but finding what fits best for your project or organization can be a separate challenge altogether. In this talk, I illustrate common-sense methodologies for choosing programming languages, design patterns, implementation patterns, as well as how to get started with selecting appropriate cloud services to get the job done.
Fault Driven Development	Failure IS an option! Developing cloud-first appli... Failure IS an option! Developing cloud-first applications can be fundamentally different than building traditional on-prem applications. As a cloud app developer, you need to be prepared for and expect failures in your code as well as in your app environment. This session will arm you with tools to be proactive with fault tolerance and reactive with fault handling.
Core Azure Solutions: Governance and Administration	Azure asset and subscription maintenance can be ov... Azure asset and subscription maintenance can be overwhelming. Attend this session to gain insight into how to create policies, implement role-based access control, and produce reports to keep the auditors happy.
Core Azure Solutions: Automation (Ops)	Automation accounts are just the beginning. This s... Automation accounts are just the beginning. This session will cover creating automation jobs using Azure Automation Runbooks, Logic Apps, Functions, and PowerBI to make mundane tasks less of a chore.
Core Azure Solutions: Automation (Dev)	Delivering value is all that matters at the end of... Delivering value is all that matters at the end of the day. This session will show you how to shift left and deliver value by automating development environments and components using local and cloud resources.
Azure DevOps vs. DevOps on Azure	Unfamiliar with Azure DevOps Services? Not sure of... Unfamiliar with Azure DevOps Services? Not sure of where to start with DevOps for the Azure cloud platform? This session will summarize the different verticals within Azure DevOps Services, covering the basics along with new features and functionality, and will also cover the wider topic of DevOps on Azure. Toolchains and programming languages do not need to be replaced with Microsoft-specific products. Many integration scenarios exist with popular non-Microsoft toolsets, including: - Jenkins - TeamCity - Bamboo - Bitbucket - GitLab - Octopus Deploy This session moves at a brisk pace and assumes general knowledge of development concepts such as source control management, continuous integration, continuous delivery/deployment, and distributed systems.
Clown Migration Plan	This session is geared toward addressing the bigge... This session is geared toward addressing the biggest challenge faced when attempting to successfully cultivate a DevOps culture and undergo a digital transformation: people. From inconsistent communication to lack of vision, from saboteurs to resume builders, we will cover several types of personas who you most likely will run into during the course of your transformation. Identifying common pitfalls (and not-so-common ones too), we will inspect what to look for and how to get all teams working together toward a common goal.
From Migration to Innovation: Capitalizing on the Cloud	Join your peers for a special breakfast event faci... Join your peers for a special breakfast event facilitated by Azure expert Josh Garverick, author of Migrating to Azure: Transforming Legacy Applications into Scalable Cloud-First Solutions, Microsoft MVP, and 10th Magnitude Cloud Solution Architect. From Migration to Innovation: Capitalizing on the Cloud is an event designed especially for technical decision makers and enterprise architects who are responsible for keeping legacy applications relevant in today’s cloud-first world. With an emphasis on Azure cloud migration and innovation enablement, this event is focused on how to plan for a successful Azure migration that positions your organization to capitalize on the cloud through organizational transformation, optimization, and ultimately innovation. Assess Your Legacy: Understanding the entire application portfolio, including dependencies and risks, will set the stage for migration candidate selection. Discuss how to ensure you’re examining all angles to capture the complete estate. Plan for Your Future: Sound architectural plans and capital investments require careful consideration. Explore where to consider nurturing and supporting workloads in preparation for the cloud. Capitalize on the Cloud: Whether making a greenfield or brownfield move, a well-planned approach is critical to the success of your migration – and to your ability to make the most out of your cloud investment.
Practical Dev Containers (and Codespaces)	Simplify how your teams work! Using shared configu... Simplify how your teams work! Using shared configurations and underlying tools makes onboarding new developers easier and removes friction from the development process. In this talk, we examine using GitHub Codespaces for capturing base development environment requirements, integrating tools such as precommit and checkov, integrated custom CodeSpaces image management, OS edge cases, and isolated/confidential uses.
Confessions of a Lazy Engineer	Go ahead, be lazy...within reason. In this talk, I... Go ahead, be lazy...within reason. In this talk, I walk through methodologies, tooling, and real-world examples to illustrate how you can do more with less and still have time to decompress at the end of the day. The ultimate goal is to remove friction from your day-to-day so you can focus on solving the important problems.
FinOps: Cost Management in Azure	Using cloud services can be cheaper than tradition... Using cloud services can be cheaper than traditional on-premises datacenters, but it can be much more expensive if you're not careful. Learn more about the fundamentals of cost management in Azure, techniques for promoting visibility of cloud costs, and changes to processes to promote financially responsible usage of cloud services. Having a line of sight into consumption as well as a set of guardrails to help keep costs rational will go a long way to affording your engineers more innovation time.

Kristof Riebbels

Session Title	Abstract
Mock your OpenID Connect Provider	This session delves into the importance of OpenID ... This session delves into the importance of OpenID Connect in ensuring robust authentication and authorization for APIs. Join us for an informative session where we explore the integration of OpenID Connect within the development lifecycle. Gain insights on how OpenID Connect is configured, how you can mock it to seamlessly integrate OpenID Connect within your CI Pipeline and even test your scopes and policies, without changing your configuration.
OIDC: Mocking You	“OIDC: Mocking You” presents an approach to mockin... “OIDC: Mocking You” presents an approach to mocking out OIDC Flows like the authorization code for testing without a live OIDC server. By using the analogies of going to a concert and some hands-on demos, we'll simplify OIDC concepts, making them accessible and understandable. Discover the power of Playwright to simulate user interactions, testing not only accesstokens and your endpoints, but your idtokens and webapplications as well Key Lessons: 1. Simplified Understanding: Creative explanations make complex authorization principles easy to grasp. 2. Enhanced Testing: Mocking debunks the myth that thorough testing isn’t possible without a live OIDC server: ClientCredential flow and authorization code flow 3. Optimized CI: Integrate mock OIDC setups into your CI workflow for robust, efficient testing. Looking forward having you
OpenAI Whispering with Whatsapp Groups and Summarize	In this session, I share my journey of creating a ... In this session, I share my journey of creating a solution to manage communication overload from WhatsApp groups. Using a combination of technologies, I aim to condense group messages and deliver a summary to my email by the end of each day. The solution employs OpenAI's Whisper model to transcribe audio messages to text. This transcribed text, along with text messages from the WhatsApp groups, is summarized to highlight key points and important social information. Technically, the solution leverages dotnet to interface with OpenAI. Docker is used to authenticate and interact with WhatsApp via Puppeteer. This method ensures that all data is captured and processed in a streamlined and efficient manner. The motivation behind this project is personal convenience. I want to stay informed without being constantly interrupted by notifications. It's a hobby project, born out of a desire to balance social connectivity with peace of mind. Come and learn how this proje
Reuse the power of code flexibility used in the WebApplicationFactory	In this session, I welcome you to the world of Web... In this session, I welcome you to the world of WebApplicationFactory within the .NET ecosystem. We'll explore how this technology records methods without immediate execution, offering remarkable flexibility. I will study and explain the mechanism of WebApplicationFactory through demos and explanations. This approach allows functional code to be dynamically loaded, added, and removed, such as from the IServiceCollection. We'll examine whether this opens up possibilities for delayed execution and sophisticated service orchestration in .NET applications, or if it is best suited for testing environments. My motivation for this session stems from a genuine curiosity and passion for understanding technologies. Join me to gain deeper insights into functional code execution and the nuances of .NET development.
Let us Playwright in a real-world application	Explore practical insights into integrating Playwr... Explore practical insights into integrating Playwright for authentication and REST API testing within a live CI/CD pipeline. Learn how to tackle authentication challenges effectively, ensuring secure user flow testing. Discover strategies for handling REST API calls seamlessly, enhancing backend interaction validation. Gain actionable tips from my lessons learned. Whether you're a Backend expert or a Frontend developer, this session provides valuable takeaways to optimize your testing practices and elevate your CI/CD workflows.

Marcel de Vries

Session Title	Abstract
Integrating AI into your existing applications using semantic kernel & C#	Semantic Kernel is an open-source SDK by Microsoft... Semantic Kernel is an open-source SDK by Microsoft that helps you build AI-infused applications and agents. It enables developers to seamlessly integrate existing code with AI models from OpenAI, Azure OpenAI, and Hugging Face. In this session, we explore how Semantic Kernel can help you in AI orchestration and give you the capabilities to create copilot-like experiences in your application. We will go through some of the fundamental concepts needed to understand how to use Semantic Kernel and where it helps you with the automation of complex tasks by combining AI-generated responses with diverse programming languages. With Semantic Kernel, you can even allow an LLM to create a complex plan that can be executed locally, going far beyond what you might think LLMs can do. The talk also highlights Semantic Kernel's extensibility, allowing the integration of memories, AI models, and plugins, making it a key player in the landscape of AI development.
Cloud aspirations: building cloud-native applications with .NET Aspire	In this workshop we will look at how you can build... In this workshop we will look at how you can build scalable, robust and observable cloud-native solutions built with .NET 8 and 9 using .NET Aspire. Microsoft has introduced .NET Aspire as an opinionated cloud-ready stack to create distributed application. It addresses cloud-native concerns such as observability, discoverability and composition. We will start by examining typical distributed applications and their common architecture styles in the cloud, leveraging PaaS services from cloud providers with their resilience and scalability characteristics. After this overview we will introduce the common concerns for distributed applications, such as observability, service discovery and configuration, and how .NET Aspire can help. You will see how you can build your applications with .NET Aspire, by making proper use of the orchestration, components and tooling it offers. We are also covering the .NET Aspire service discovery and connection management, discover the programming model and the developer workflow. In the hands-on labs you will experience and practice this yourself. You will enhance an existing application by composing it using the .NET Aspire primitives of projects, containers and cloud resources. With guided exercises you can explore how your application changes with .NET Aspire, the way of working as a developer and DevOps engineer. Finally, we are going to dive into the inner workings of .NET Aspire and see what happens under the covers during development and in production. Whether you are maintaining an existing application on premise or are building brand new applications, this workshop will help you understand what .NET aspire can bring to you and how you can apply it in your application context.
Building cloud-native microservices with Dapr	Modern distributed applications require much more ... Modern distributed applications require much more than just application logic. Features such as state management for services, communication using publish/subscribe messaging and event-driven binding to cloud resources might be needed. Dapr introduces a runtime to offer such building blocks, and is less invasive in your application, allowing you to pick and choose what you need. In this workshop, we will look at the approach that the Dapr runtime takes with a sidecar architecture, separating application logic from the Dapr runtime components. You learn to develop distributed applications in .NET using Dapr's features and, how to bind to messaging infrastructure and cloud resources.
Simplify Microservices development with Dapr	Dapr is a vendor and language-neutral Distributed ... Dapr is a vendor and language-neutral Distributed Application Runtime build in open source, supported by the CNCF, that you can use to build Microservices solutions. In this session, I will show you what Dapr is, How it works, and how you can use it to build your microservices that are completely agnostic of vendor implementations for state management, pub/sub communication, secret management, observability, and secure and resilient communications.
Workshop: Build the Distributed Apps of the Future Using Dapr	Building distributed application is hard… As devel... Building distributed application is hard… As developers, we want to focus on delivering business value with new features but there are so much things to also take care of on the side, especially in a distributed environment. Things as pub/sub, state management, bindings & triggers, service discovery, distributed tracing etc. Dapr tries to solve this problem by providing all of this to you so you can mix and match what pieces you want to use and also pick between many implementations of for example state management like cosmosDB, redis or dynamoDB. In this workshop, you'll get hands on experience in building your own microservice based application using Dapr. You'll learn the following features of Dapr: State management Service discovery Pub/sub Distributed Tracing We'll be building the application using ASP.NET Core, C#, Docker & Kubernetes. Basic knowledge of C#, Docker & Kubernetes is advised to get the most out of this workshop.
Legacy Lift-off: Bringing your legacy .NET application into the modern cloud and AI age	In today's fast-paced digital landscape, legacy so... In today's fast-paced digital landscape, legacy software can be a bottleneck to innovation and growth. Yet, a green field rebuild is hardly ever your best way to success. There is so much value in your existing system that can be salvaged and modernized. Join us for a hands-on exploration as we delve into modernizing a legacy .NET Framework 4.8 / WinForms application for the cloud and AI age. Through a series of interactive modules, participants will learn essential skills such as deciphering legacy code using AI, transitioning to modern technology stacks, and implementing best practices for refactoring, performance, security, and quality assurance. To finish it off, we will infuse the application with some AI to make it smart and ready for the new era. By the end of the workshop, we will have transitioned from a legacy .NET / WinForms application to a cloud-ready, AI infused web application with Blazor.
Hands-On Lab: Code to Cloud with GitHub	Join us for a full-day hands-on workshop exploring... Join us for a full-day hands-on workshop exploring the exciting world of GitHub and Azure. This day will cover DevOps Engineering, Site Reliability Engineering, and Platform Engineering. During this day, we will mix a lot of hands-on with the practical, theoretical background and real-life anecdotes we encounter as consultants every day when empowering DevOps teams. In Module 1, participants will learn how to ensure a fast first-time commit by introducing themselves through a markdown file in their own GitHub repo. They will also experience the automation process that generates prerequisites for each attendee, including a GitHub Pages website, Azure resource group, web apps, an app service plan, and a repository with issues. Module 2 focuses on getting up to speed with legacy code using CodeSpaces and Co-Pilot. Participants will familiarize themselves with a provided microservices e-commerce website and set up their IDEs to make changes to the code. In Module 3, we dive into fearless refactoring, discussing the benefits of breaking up applications into a microservices architecture. Participants will build two features with the help of Co-Pilot and run the application locally in their CodeSpaces. Module 4 delves into securing legacy code, covering secure development practices and introducing GitHub Advanced Security (GHAS). Participants will learn how to visualize, stop leaks, and fix vulnerabilities using branch protection, secret protection, CodeQL, and automated workflows. In Module 5, we take the application to the cloud and beyond. Participants will deploy the application to an Azure resource group, incorporating OpenID Connect, secrets in GitHub Actions and creating a continuous deployment workflow. We will also explore observability, load testing, and deployment strategies for zero-downtime deployments. Join us for this immersive workshop to enhance your coding skills and learn how to integrate GitHub and Azure for efficient code-to-cloud workflows seamlessly.
Deploying ASP.NET Core applications to Kubernetes in the real world	You build an ASP.NET core application, and it work... You build an ASP.NET core application, and it works great on your machine. Now you want to deploy this to a kubernetes cluster; now what? In this session, I will show you how you can take an existing application that uses ASP.NET core, multiple other Rest services, and a SQL server and move that to a kubernetes cluster. I will not only cover the basics but also how you can improve your application to be more observable, support zero downtime deployments, and secure it using SSL, and I will share tips on how to harden your cluster so you can actually run it in production.
Github Actions in Action	So, you know the basics of GitHub actions, but how... So, you know the basics of GitHub actions, but how do I organize the Action Workflows so they are maintainable, use as few minutes as possible, save cost, and match the GitFlow branching strategy? This session will answer all these questions by showing a full end-to-end solution with multiple microservices in a mono repo while deploying individual services to a kubernetes cluster. We will go through cost and performance optimizations and ways to separate Continuous Integration from Deployments and Deployments from releases. This way, you will be able to release any moment of the day without interrupting your users.
Hands-On Lab: Secure and Compliant Cloud Delivery Embracing DevOps	In this Hands-on Lab we will teach you how to use ... In this Hands-on Lab we will teach you how to use all the great features GitHub has to offer. We will start with an overview of how to come from Idea to Code by using GitHub Discussions, Issues, Pages and Wiki. Next, we will move the ideas to code and start using the Git features. From here, we dive into the use of Branch Protection Rules, Code Owners, Actions for CI, CD, and Deployments to the Azure Cloud. We will also have a look at how GitHub can help you in your Secure Development Lifecycle with Credential scanning, Package Vulnerability Scanning, and Code Scanning to expose programming mistakes that might lead to vulnerabilities in the future. After this hands-on workshop, you know what GitHub offers you and your organization to easily implement Secure and Compliant DevOps.
Hands-on workshop GitHub Code to Cloud	In this Hands-on workshop we will teach you how to... In this Hands-on workshop we will teach you how to use all the great features GitHub has to offer. We will start with an overview how to come from Idea to Code by using GitHub Discussions, Issues, Pages and Wiki. Next we will move the idea's to code and start using the Git features. From here we dive in to the use of Branch Protection Rules, Code Owners, Actions for CI, CD and Deployments to the Azure Cloud. We will also have a look at how GitHub can help you in your Secure Development Lifecycle with Credential scanning, Package Vulnerability Scanning and Code Scanning to expose programming mistakes that might lead to vulnerabilities in the future. After this Hands-on workshop, you know what GitHub has to offer to you and your organization to implement Secure and Compliant DevOps with ease.
Microservices made easy with DAPR	In this session you’ll learn why you want to use t... In this session you’ll learn why you want to use the Dapr to simplify the development of a microservices application. I will discuss common challenges when building microservices and how Dapr can simplify many of these challenges by providing building blocks that implement industry best practices to the problems without any hassle and how dapr makes this all possible. After this session, you’ll have the knowledge to decide if you want to use dapr to build your next microservices application, and how dapr works. You can then use this to incorporate dapr into an existing microservices application, or to use it for a brand new solution.
Workshop: Dapr for Building Distributed .NET Applications	Modern distributed applications require much more ... Modern distributed applications require much more than just application logic. Features such as state management for services, communication using publish/subscribe messaging and event-driven binding to cloud resources might be needed. Dapr introduces a runtime to offer such building blocks, and is less invasive in your application, allowing you to pick and choose what you need. In this workshop, we will look at the approach that the Dapr runtime takes with a sidecar architecture, separating application logic from the Dapr runtime components. You learn to develop distributed applications in .NET using Dapr's features and, how to bind to messaging infrastructure and cloud resources.
CodeToCloud with GitHub and Azure DevOps Hands-on Workshop	This workshop focuses on the Code to Cloud journey... This workshop focuses on the Code to Cloud journey. The journey includes the integration with Azure Boards, working with GitHub Codespaces, the GitHub Flow, and the GitHub Container Registry. Students will learn to use docker and docker-compose and deploy their solution to an Azure Web App using GitHub Actions, and Azure DevOps pipelines. To make it challenging for the students, the workshop contains challenges that can also be done individually. To make sure students do not get stuck, there are scripts available with instructions to "automatically" fix a challenge, so students can continue. The workshop also contains extensive Step-By-Step videos and written instructions. There are also videos that explain the concepts that are used in the exercises. We will cover the following modules: Module 1: improving the Developer Workflow Learning Objectives In this module your students will learn to: • Create a backlog of work with Azure Boards and relate that to your code • Use Docker to containerize your code, to enable a consistent environment • Use the GitHub workflow to work together on the same codebase • Use Pull Requests to improve the quality of your code • Set up a Continuous Integration build to quickly get feedback • Use GitHub Security scanning tools to shift left security issues • Use Docker Compose to create an environment that consists of multiple components Module 2 - Moving to the Cloud Learning Objectives In this module your students will learn to: • Use Infrastructure as Code to set up idempotent infrastructure in the cloud • Set up a resource group in Azure and assign permissions • Set up a CosmosDB via automation scripts • Set up an Azure Web App that runs a multi-container application via automation scripts • Set up a pipeline that deploys the infrastructure on demand Module 3 - Closing the Feedback Loop Learning Objectives In this module your students will learn to: • Implement Application Insights in the application • Monitor the containers and the platform • Implement Continuous Delivery in GitHub Actions • Set up a CI/CD pipeline with Azure DevOps to automatically deploy containers • Set up a manual and automatic approval gate in the release pipeline, to control the release of new versions
DAPR the big picture	You might have heard of DAPR a microservices appli... You might have heard of DAPR a microservices application framework. In this session, I will give you insights into what DAPR is, why you would like to use it and why it is smart to keep an eye on this technology and start applying it in your solutions now.
Design, Build and Deliver a Microservices solution the cloud native way	In this workshop, we will take you from start to f... In this workshop, we will take you from start to finish if it comes to building a Software As A Service solution based on a microservices architecture in a cloud-native way. In this workshop we start with the foundation for success and that is designing the microservices architecture. How do you define service boundaries, what are smells of wrong boundaries and how do you replicate data in a system that is inherently eventually consistent? Next, we show you how you can translate a microservices design into actual services that you then can run in the Azure Cloud. We will go through the creation of the services, the containerization of these services and the trade-offs when to use containerization or e.g. an alternative delivery using serverless infrastructure like azure functions. Once we have our initial set of microservices up and running, the next step is to deliver new features in a cloud-native way. This means we run a 24x7 operation and we take a DevOps and SRE approach to the delivery of the software to production. We then look at the development process, how we automate everything and how we are able to deploy new features also when they involve database schema changes. At the end of this workshop, you have combined many things that you could see in individual sessions throughout the conference, but here we combine them all and make all pieces of the puzzle fit into place. You now know how to build and deliver a world-class SaaS solution on the Azure Cloud. What you will learn: Microservices design Implementing microservices with ASP.NET core and DAPR Containerization of the solution and deployment to Azure Kubernetes services Continuous Delivery of a SaaS solution in a cloud-native way SRE practices to ensure we meet our SLO’s
The Future of IT	Marc Andreessen described in his article in The Wa... Marc Andreessen described in his article in The Wall Street Journal in 2011: “Software is eating the world”. We have witnessed how software has become a core element that drives our economy and even our daily lives! Seeing that change, What is the future of IT? That is a fascinating question to ask but extremely hard to answer. Confucius said, “You need to study the past to define the future.” So, let's ask ourselves the following question: What has changed our society and industry in the past decades? Let us take some historical events that changed our society and industry in ways we would never have expected. If you look at the waves of change, what can we learn from them, and what are the implications for the way we can expect the future to unfold? How do these things impact us as human beings, and how do we deal with this constant rate of innovation and change? By looking at all these changes and how we dealt with them, we might be able to see what is ahead of us. Interestingly enough, patterns can be discovered that tap into human and organizational behavior, from which we can derive what, for example, the new wave of AI might bring us. In this session, I will share the patterns you can see when a new change surfaces and how we adopt this in our work. If there is one thing you will learn from this session, the future is nearer to your heart than you think.
The knight of NIH ... a developer tale	Once upon a time, our industry was based upon inno... Once upon a time, our industry was based upon innovation and renewal. Where brave developer knights built upon the ideas and dreams of others. But as it goes in every tale, we were struck by a curse. The curse of stubbornness... in this session, I will take a look at the history of our industry and how we have evolved in the field of software development. I show based on historic examples where we as an industry could have been and where we have chosen to be the knights of Not Invented Here making us build software over and over again while we could have advanced instead. This lightweight talk gives a perspective on our profession and hopefully will make you think twice next time when you think you need to build something yourself instead of looking at what is already out there and build on the shoulder of giants instead.
Patterns and Tools for Parallel Programming in C#	Are you ready to unlock the full potential of your... Are you ready to unlock the full potential of your CPU by harnessing the power of parallel programming in C#? This session delves into the world of parallel programming, focusing specifically on the Task Parallel Library (TPL) and various patterns designed to optimize performance and maximize your CPU utilization. Join this session and learn how to push the boundaries of what's possible with C# and parallel programming!
Secure and Compliant cloud delivery embracing DevOps	One of the most common challenges, when organizati... One of the most common challenges, when organizations move to the cloud, is getting an answer on how to do this in a secure and compliant way. This involves ensuring you set up your azure landing zones in such a way that you enable teams to deliver their solutions secure and compliant by default. The cloud requires a completely different security model than what we are used to in the on-prem world. One important concept here is ensuring we build our cloud using a zero-trust model. If it comes to compliance, there are many things to discuss. What does it mean to be compliant? In my work as a CTO, this is often covered by smoke curtains and vague use of terminology. But what are the fundamental concepts behind compliance and how do you achieve this in such a way you can still ensure maximum performance of your teams in delivery? This involved a high degree of automation and empowerment of your teams. I will share what we learned over the years ensuring secure and compliant delivery for our customers. Many of those customers work in highly regulated environments like government, banks, and pharma.
Implementing Zero Downtime Application Deployments on Azure PaaS	How can I deploy my applications to Azure PaaS lik... How can I deploy my applications to Azure PaaS like Azure Web Apps and AKS without having any downtime? How can I automate this and how can I ensure my customers won't notice changes are happening, even when you need to update your database schema? In this session I will show you how to use Azure DevOps Build and Deployment pipelines to deliver your application to production many times a day while not interrupting your users.
From one release per quarter to 30 times a day	In this session I will take you along a journey wh... In this session I will take you along a journey where we have an existing legacy application that we will enable to be released multiple times a day. I will teach you how to apply modern release techniques that enable you to move from long and tiresome release cycles to releasing multiple times a day. I will cover the fundamental concepts of DevOps that will enable multiple releases a day. think of concepts like: Feature Toggles, Red/Green Deployments, Telemetry, Cloud technologies, deployment automation, etc. This session will learn you how to release quality software any moment you want.
Writing Maintainable Test Automation	How well do you test your application or Web site?... How well do you test your application or Web site? Are you still testing your applications or sites manually and does that take a lot of time? Do you find it hard to create and maintain automated tests for your applications? Have you created automated tests but do you find them hard to maintain? This session will teach you how to build maintainable automated test suites using various technologies like Selenium or Appium and integrate it with Microsoft Azure DevOps to give you a holistic view of your current sprint in terms of test completion and coverage. In this session you'll learn to build test suites in such a way that they are maintainable by default. This session will introduce the concepts like: Page Objects, DRY and DAMP tests.
An Introduction to Service Meshes on Kubernetes	A service mesh is an infrastructure layer that all... A service mesh is an infrastructure layer that allows you to manage communication between your application's micro services. As more developers work with micro services, service meshes have evolved to make that work easier and more effective by consolidating common management and administrative tasks in a distributed setup. In this session I will show you how you can set up a Service Mesh on Kubernetes and run a Micro Services application written in .NET and C#. You will discover how we can utilize the service mesh to have different deployment strategies and ways to secure your communication between micro services.
Maintainable and scalable Test Automation With Playwright Cloud Services	Do you find it hard to create and maintain automat... Do you find it hard to create and maintain automated tests for your applications? Have you created automated tests but find them hard to maintain? Are you looking for ways to speed up and scale your test runs so you have faster results? This session will teach you how to build maintainable automated test suites using Microsoft Playwright services on Azure integrated into your CI/CD workflows on Azure DevOps or GitHub. In this session, you'll learn to build maintainable test suites by default. It will introduce concepts like Page Objects, DRY, and DAMP tests. You will also learn how to apply these patterns to Playwright and use cloud services to scale up and speed up your tests.
Unlock the Potential of AI in Your Applications with Semantic Kernel	Semantic Kernel is an open-source SDK by Microsoft... Semantic Kernel is an open-source SDK by Microsoft that helps you build AI-infused applications and agents in C#. It enables developers to seamlessly integrate existing code and applications with AI models from OpenAI, Azure OpenAI, and Hugging Face. Enterprises use Semantic Kernel for its flexibility, modularity, and observability. It offers security features like telemetry support, hooks, and filters, ensuring responsible AI at scale. Designed to be future-proof, it allows easy integration with the latest AI models without rewriting the entire codebase when new models emerge. In this workshop, you will explore how the Semantic Kernel can help you integrate AI capabilities into your applications. The workshop also highlights Semantic Kernel's extensibility, allowing the integration of memories, AI models, and plugins, making it a key player in AI development. The workshop is created so you can start with no experience and end the day with all the knowledge you need to embrace LLMs in your applications and even build full-fledged Agents that help you change the way your customers and users have ever interacted with your systems before.

Matthijs van der Veer

Session Title	Abstract
Your RAG Bot Is Boring; Five More Exciting Ways to Use Generative AI!	Let's break free from the monotony of Retrieval Au... Let's break free from the monotony of Retrieval Augmented Generation chatbot development to explore exciting and innovative applications of generative AI. Find out how to use LLMs, image generation, and AI Speech across various scenarios and why creating your own quirky tools and discover how creating your own quirky tools and apps can be the ultimate way to learn new technologies. Expect to leave with both inspiration for your next project and practical ideas you can apply in real business contexts. This talk is tailor-made for developers tired of the same old solutions, as well as managers and product owners seeking fresh ideas. Join me in stepping out of the shadow of mediocrity and igniting your creativity!
Unmasking Model Bias - The Overlooked Metric In GenAI	Join us for a thought-provoking session that uncov... Join us for a thought-provoking session that uncovers the critical concept of model bias in generative AI - a metric often overlooked in model selection. We will explore why model bias is not the same as model performance, its significance in model selection, and how it impacts your projects, whether you're developing niche applications or seeking broader solutions. You'll walk away with the knowledge to incorporate model bias into your selection criteria and strategies to navigate the complexities of generative AI models. This talk welcomes anyone interested in generative AI - whether you're a sceptic or a developer. Together, let's examine the hidden biases that shape the models we use and understand their implications for our work.
The One Developer Team: Building AI-Powered Apps Rapidly	Explore how AI is transforming the development of ... Explore how AI is transforming the development of content-generation apps. This session demonstrates how Azure AI Speech, DALL-E, Azure OpenAI, and GitHub Copilot streamline the development process, eliminating the need for visual designers, voice actors, and sound designers. The goal of this presentation is to inspire you to use AI for rapid prototyping and production. We will highlight two projects: generating daily meditation content for YouTube and transforming this concept into a market-ready mobile app. Join us to discover how AI can help you build apps faster and build advanced features, pushing the boundaries of app development. And yes, we'll discuss the ethical side as well.
Code-First LLMOps With Semantic Kernel & Prompty	In this session, you will learn the entire LLMOps ... In this session, you will learn the entire LLMOps journey, from selecting the right model to writing your first prompt, developing locally and deploying to production confidently. We will use Azure OpenAI, Semantic Kernel and Microsoft's new Prompty extension. This session is for anybody interested in developing with LLMs. Expect many demos!
Toxic Trust: The Psychology of Automation Bias in Generative AI	Explore the hidden dangers of automation bias in t... Explore the hidden dangers of automation bias in the realm of generative AI and automation—a cognitive trap where we too readily trust machine-generated content. We'll examine the psychological aspects of this bias and its impact on text, images, and code and provide actionable strategies for increasing awareness and reducing bias. We will close with a live demo showcasing practical examples and innovative approaches to transform your interaction with generative AI. This talk is ideal for anyone interested in generative AI and how we work with it. Come prepared to challenge your assumptions and change your relationship with AI.
How We Built A Generative Trading Card Game With Stable Diffusion & Semantic Kernel	Explore the exciting world of generative AI-powere... Explore the exciting world of generative AI-powered trading card games in this session! Learn how to transform real-time camera input into unique cartoon characters using Stable Diffusion on the edge. Discover the magic of creating a one-of-a-kind trading card game by integrating Azure AI Services and leveraging the power of Semantic Kernel with LLMs in C#. We'll walk you through the process of combining AI and traditional programming to build an innovative collectible card game. This session is ideal for developers, AI enthusiasts, and card game aficionados. Expect to leave with the know-how to run Stable Diffusion locally and start creating your own unique images.
Building responsible AI content generation pipelines with GitHub Actions and Prompty	Let's build a simple, effective content creation p... Let's build a simple, effective content creation pipeline using GitHub Issues, GitHub Actions, Prompty, and LLMs! You'll learn to responsibly handle AI-generated output and the importance of human input for high-quality content. This session is ideal for those who enjoy using LLMs for writing but are cautious about fully trusting AI like ChatGPT. Expect practical insights and a live demo on applying these techniques to your projects. Feel free to copy my code to start your own project.
Mastering Multi-Agent Madness With Microsoft Agent Framework	Let's discover how to effectively combine pre-buil... Let's discover how to effectively combine pre-built orchestrations with custom workflows to create sophisticated multi-agent applications. Learn how agents can communicate to achieve greater results or when a more deterministic approach is necessary to prevent communication breakdowns. We will also cover adding tools to your agents, recognising when to solicit human input, and leveraging Microsoft Agent Framework with the Azure AI Agent Service. This talk is perfect for software engineers eager to dive into the world of agents. Expect many demos that will pave the way for you to build your first multi-agent application confidently!
Creating Self-Guided Meditations With Azure AI	What happens when you stack GPT-3.5 Turbo, GPT-5, ... What happens when you stack GPT-3.5 Turbo, GPT-5, GPT Image 1, Azure AI Speech and Azure Machine Learning together? You get unlimited potential for generating unique content. In this session, I will take you through my adventures with generative AI to create self-guided meditations automatically uploaded to YouTube daily. You can use these principles to enhance your own applications with artificial intelligence. What you will learn: - Leveraging OpenAI's Large Language Models to generate unique content. - Create human-like interactions with Azure AI Speech. Let's go beyond accents and languages and add some style. - Automating prompt engineering using AI techniques for more dynamic content. Throughout the session, you will be bombarded with live demonstrations and real-life examples that will provide you with actionable insights into building robust applications with the latest AI technologies. Whether you're interested in the meditative or the technical aspect, this session promises to be enlightening and inspiring.
Bringing Animatronics to Life with Large Language Models and Azure AI	Discover how to combine Azure's AI technologies, i... Discover how to combine Azure's AI technologies, including Azure OpenAI and AI Speech, with Arduino to create interactive animatronics. This session offers a straightforward look at using advanced AI to animate robots, making them more responsive and engaging. Perfect for AI enthusiasts and software developers, we will demonstrate a real animatronic that listens, speaks, and interacts, showing the practical use of AI in robotics. Learn how these technologies can be used together to bring animatronics to life in a clear and accessible way.

Anne Meijer

Session Title

Abstract

Closing the loop: instrumenting your .NET applications with OpenTelemetry

You build it, run it and own it. Knowing how your ... You build it, run it and own it. Knowing how your application behaves is easy in your development environment, because you have better debugging capabilities there. It gets more complicated when you run in production. Getting feedback from your application and learning its behavior is essential to close the DevOps feedback loop. In this session, you will learn what it takes to instrument your .NET application to get rich feedback in every stage of the lifecycle. We start by looking at the various ways to add logging, tracing, and metrics using the built-in .NET libraries. We will consume the telemetry data from your development environment with OpenTelemetry; no cloud required. Next, we will cover the production scenario and see how you can leverage Azure with Application Insights and Azure Monitor. By the end of your session, you will have a good understanding how to add proper instrumentation with OpenTelemetry and to put it to good use during your entire development lifecycle.

Michael Kaufmann

Session Title	Abstract
DevSecOps - Security in times of daily deployments	Security has never been more important than it is ... Security has never been more important than it is today, and never more difficult. How to deal with security in times when multiple new versions are deployed to production every day? In this talk Michael explains how you can achieve a security-first culture in your company and how you can integrate security and pen-testing into your DevOps pipeline. The talk will cover the assume breach paradigm, zero trust, shift-left security, and red team blue team simulations.
DevSecOps: Sicherheit in Zeiten von täglichen Deployments	Sicherheit war noch nie so wichtig wie heute – und... Sicherheit war noch nie so wichtig wie heute – und noch nie so schwierig. Wie geht man mit Sicherheit in Zeiten um, in denen jeden Tag mehrfach auf Produktion neue Versionen ausgerollt werden? In diesem Vortrag zeigt Michael Kaufmann, wie man eine Kultur der Sicherheit schafft und Security- und Pen-Testing in den DevOps Prozess integriert. In praktischen Demos zeigt er die Best-Practices für Azure Security und Governance. Außerdem stellen Sie Übungen wir Red-Team/Blue-Team und Chaos-Engineering vor.
Sichere Anwendungen und DevSecOps - von A bis Z	Im Jahre 2016 legte ein Streit um den Namen Kik qu... Im Jahre 2016 legte ein Streit um den Namen Kik quasi das gesamte Internet lahm: eine Open-Source Lösung mit elf Zeilen Code wurde aufgrund des Streits zurückgezogen und tausende von Webseite sind daraufhin temporär ausgefallen. Auch SolarWinds erzeugte durch eine Sicherheitslücke im Jahre 2020 Aufregung, die durch einen Angriff auf die Softwarelieferketten ihrer Software namens Orion erfolgte und mehr als 33.000 Kunden einem Angriff aussetzte – darunter sicherheitsrelevante Behörden wie Homeland Security und das Finanzministerium. Anwendungssicherheit ist nicht einfach nur ein Sicherheits-Check nach einem Release oder eine statische Code-Analyse. Anwendungssicherheit muss in den Entwicklungsprozess integriert werden – und sie muss die ganze Lieferkette betreffen. In diesem Talk zeigt Michael Kaufmann wie sie Sicherheit komplett in ihren Prozess integrieren können. Schwerpunkt liegt dabei auf: - Sichere Entwicklungsumgebungen - Secret-Scanning und Secret-Rotation - Analyse ihrer Abhängigkeiten (Software Composition Analysis - SCA) - Verwaltung der Lieferketten mit Dependabot - XSS, SQL-Injection und Speicher-Leaks finden - Statische und dynamische Codeanalysen (SAST und DAST) - Eigene Abfragen mit CodeQL Der Talk ist für alle interessant, die sich für Anwendungssicherheit interessieren: sowohl Entwickler als auch DevOps-Engineers.
Deep-Dive into Git	In dieser Dev-Session werden wir Hands-on alle wei... In dieser Dev-Session werden wir Hands-on alle weiterführenden Themen in Git behandeln: - Wie funktioniert Git? - Was ist eigentlich DAG, SHA-1, Patch und ein Commit? - Was sind Branches und Tags? - Wie löst man Merge-Konflikte? - Wie manipuliert man die Historie mit ammend, reset, rebase und cherry-pick? - Wie arbeitet man mit dem Stash? - Wie sucht man in Git? Außerdem gibt es sehr viele Praxis-Tipps, die das Arbeiten mit Git leichter machen: die richtige Konfiguration, automatische Korrektur der Befehle, und viele mehr. Die Session richtet sich an Entwickler die schon Grundkenntnisse mit Git haben – bisher aber eher durch ausprobieren gelernt haben. Sie ist aber auch für Teilnehmer geeignet, die neu im Thema Git sind aber Erfahrung mit anderen Quellcodeverwaltungen haben. Voraussetzung für die Session ist eine aktuelle lokale Installation von Git, ein Texteditor und ein kostenloser Account auf GitHub.
To sign, or not to sign – everything there is to know about signing commits and tags	In today’s fast-paced software landscape, efficien... In today’s fast-paced software landscape, efficient release processes are critical. Git, as a decentralized version control system, relies on synchronizing changes across different repositories. However, authentication and authorization are decoupled from commit author information. To ensure authenticity, developers can sign commits and tags using PGP or SSH keys. Join us in this session as we explore all aspects of signing commits and tags: - GitHub Validation: Understand how GitHub validates author information for commits and tags. - Key Management: Learn best practices for creating and managing PGP and SSH keys. - Security Considerations: Dive into key security measures. - Local Signing: Discover how to sign commits and tags locally. - GitHub and Codespaces: Explore signing within GitHub and Codespaces. - Enforcing Signed Commits: Implement signed commits for protected branches. - Vigilant Mode: Uncover the benefits of enabling vigilant mode. - 1Password Integration: Utilize 1Password to store SSH keys and PGP passphrases. Whether you’re part of large open-source projects or small security-focused teams, signing practices vary based on context and Git workflows. We’ll focus on practical scenarios where signing adds value, drawing from real-world examples. Join Michael as he shares insights on when signing accelerates progress and when it’s essential to tread carefully.
Sign oder nicht sign – alles, was man über das Signieren von Commits und Tags wissen muss	Git ist eine dezentrale Versionsverwaltung, die da... Git ist eine dezentrale Versionsverwaltung, die darauf ausgelegt ist Änderungen zwischen unterschiedlichen Repositories zu synchronisieren. Aus diesem Grund sind Authentifizierung und Autorisierung komplett von den Autorinformationen der Commits und Tags unabhängig. Um Authentizität sicherzustellen kann ein Autor diese mit seinem PGP-Key signieren. Dieser Talk deckt alle Aspekte von Signaturen in Git und GitHub ab: - Wie GitHub Authorinformation von Commits und Tags validiert - Erstellen und Verwalten von PGP-Schlüsseln - Sicherheit der PGP-Schlüssel - Lokales signieren von Tags und Commits - Signieren von Tags und Commits in GitHub Codespaces - Signaturen in geschützen Branches erzwingen - Der Vigilant-Mode - Signing off commits Von großen Open-Source Projekten bis hin zu kleinen Teams, die in privaten Repositories arbeiten – der Kontext für die Arbeit mit Git ist sehr vielseitig. Best-Practices für das Signieren von Commits hängen aber sehr von diesem Kontext und dem verwendeten Workflow ab. Der Fokus dieses Talks liegt darauf zu erklären, in welchen Szenarien Signaturen einen Mehrwert bringen und die Sicherheit erhöhen und in welchen sie Teams einfach nur ausbremsen.
Zurück in die Zukunft – DevOps als Motor der Unternehmen von morgen	Die Art, wie wir zusammenarbeiten, war schon immer... Die Art, wie wir zusammenarbeiten, war schon immer durch unseren technischen Fortschritt geprägt – von der Zeit der Krämer und Kaufleute, über die Zeit der Industrialisierung bis in das digitale Zeitalter. Der Fortschritt hat aber nicht aufgehört: mit künstlicher Intelligenz, der Cloud, Hologrammen und der zunehmenden Vernetzung aller Geräte schreitet er schneller voran als je zuvor. Welchen Einfluss hat das auf die Unternehmen – heute und in der Zukunft? Michael Kaufmann sieht DevOps als eine logische Folge aus einer Spannung zwischen unserer Arbeitsweise und dem technischen Fortschritt. Er erklärt in seiner Keynote, welche Faktoren Einfluss auf unsere Unternehmensstruktur und Wertschöpfung haben, welches die drei Säulen sind, auf die Unternehmen sich stellen müssen, damit sie auch in Zukunft erfolgreich sein werden und welchen Einfluss das Auf die Arbeit von Entwicklern haben wird. „Wer in der Zukunft lesen will, muss in der Vergangenheit blättern.“ (André Malraux) – so regt dieser Vortrag dazu an, die Vergangenheit mit anderen Augen zu sehen, um eine neue Vision der Zukunft zu erhalten.
.NET in der Box: Best Practices für Microservice APIs mit .NET Core in Docker und AKS	In diesem Workshop zeigt Michael Kaufmann Best Pra... In diesem Workshop zeigt Michael Kaufmann Best Practices für die Entwicklung und den Betrieb von Microservices mit .NET Core in Docker Container. Die Container werden in Azure Container Services (AKS) betrieben. Folgende Themen werden behandelt: - .NET Core Best Practices für Entwicklung von REST-APIs Evolution der APIs (von SOAP über REST nach gRPC) Modern .NET Patterns Authentication Credential Handling Middlewares Bereitstellen von Client APIs SDKs - Best Practises von .NET Core Applikationen in Docker Containern und AKS Konfiguration Parameter Health Checks Logging - Closed Loop (Development, Debugging - Continuous Delivery mit Azure DevOps nack AKS (Container DevOps, Always-On Updates) - Debuggen und Pull-Request Validierung von Multi-Container-Anwendungen mit AKS Dev Spaces - Logging und Monitoring mit Application Insights und Azure Monitor Die Teilnehmer werden lernen, wie man eine Anwendungsplattform, die aus vielen einzelnen Container besteht, strukturiert und entwickelt, was in .NET Core zu beachten ist, wie man live-debugging durchführt und wie man das Gesamtpaket ausrollt. Das Ziel des Hands-On ist, dass jeder Teilnehmer am Ende eine funktionierende Code- Azure DevOps und Azure-Struktur haben wird, mit der er weiter experimentieren und sein zukünftiges Produkt fließend aufbauen kann.
Back to the future – DevOps as the driving force for tomorrow's businesses	The way we humans collaborate has always been rela... The way we humans collaborate has always been related to our technological advancement – from the time of chapmen and merchants, over the time of the industrialization, until the digital age. But our progress did not stop: artificial intelligence, cloud computing, holograms, connected devices – what influence does this technological progress have on the way we collaborate - and therefore on businesses? Michael Kaufmann believes that DevOps is the logical consequence of the tension between our current way of collaborating and our fast technological advancements. He explains in his keynote what factors influence our corporate culture and the way we create value for our customers. You will learn how the role of engineers has evolved over the time and the impact it has on our daily work: teamwork in cross-functional teams, globally distributed teams that span multiple time zones, asynchronous ways of working, and a completely new approach to attract, retain, and train talent. “Who wants to read in the future, must scroll in the past.” (André Malraux) – this talk invites you to see at the past with different eyes – to get a new vision for the future of work.
From Application Security to Developer Security – Shift left with GitHub Advanced Security	Research shows, that most developers are still see... Research shows, that most developers are still seeing security as a burden that slows them down. Too many security alerts in too many platforms overwhelm developers –not enough or no alerts are an indication of e a security risk. This leads to either slower software delivery or a higher security risk for your application. This talk will demonstrate how you can use GitHub as the central developer experience platform for all your security tools – giving developers a consistent experience and allowing them to address security issues as early as possible. The talk will cover strategies to drive adoption across your teams and introduce you to the default DevSecOps tooling from GitHub: Secret Scanning, Code Scanning, Dependabot, and Security Overview.
Accelerate Innovation with DevOps	Research has proven, that highly effective compani... Research has proven, that highly effective companies, which successfully have transformed to a DevOps culture, are faster, more effective, and they score higher on customer satisfaction and innovation. But many companies still struggle to break up their silos and adopt these practices. This talk will explain why many transformations fail and it will give you practical guidance on how to get your transformation back on track. Enriched with many real-world examples from customers, this talk will give you a battle-proven guide to a successful transformation: in small steps, but with a clear vision and direction. Starting with the WHY and a sense of urgency and celebrating the wins as you transform step by step. DevOps is only 10 percent about tool and processes – but 90 percent about people. A successful transformation must also be 90 percent about the people and the culture to make it a success.
Deep-Dive into Git	In dieser Dev-Session werden wir Hands-on alle wei... In dieser Dev-Session werden wir Hands-on alle weiterführenden Themen in Git behandeln: - Wie funktioniert Git? - Was ist eigentlich DAG, SHA-1, Patch und ein Commit? - Was sind Branches und Tags? - Wie löst man Merge-Konflikte? - Wie manipuliert man die Historie mit ammend, reset, rebase und cherry-pick? - Wie arbeitet man mit dem Stash? - Wie sucht man in Git? Außerdem gibt es sehr viele Praxis-Tipps, die das Arbeiten mit Git leichter machen: die richtige Konfiguration, automatische Korrektur der Befehle, und viele mehr. Die Session richtet sich an Entwickler die schon Grundkenntnisse mit Git haben – bisher aber eher durch ausprobieren gelernt haben. Sie ist aber auch für Teilnehmer geeignet, die neu im Thema Git sind aber Erfahrung mit anderen Quellcodeverwaltungen haben. Voraussetzung für die Session ist eine aktuelle lokale Installation von Git, ein Texteditor und ein kostenloser Account auf GitHub.
Microservices - the cloud-native way with AKS and DAPR	In this hands-on workshop you will learn how to ar... In this hands-on workshop you will learn how to architect microservices-based solutions, implement them with ASP.NET Core, containerize them, and deploy them to Azure Kubernetes Service (AKS). Furthermore, you will learn to continuous delivery distributed SaaS solutions in a cloud-native way with DAPR and apply SRE practices to ensure you meet your SLO’s.
Deep dive into git	In this practical session, we’ll cover all advance... In this practical session, we’ll cover all advanced topics of git: - How does git work? - What is a DAG, SHA, patch, and a commit? - What are branches and tags? - How do you solve merge conflicts? - How do you manipulate your history using commit amend, reset, rebase, and cherry-pick? - How do you work with the stash? - How do you search in git? Furthermore, the session is pact with practical tips that help you to work with git: the right configuration, auto-correct of commands, recording merges, and many more. The session is designed for developers that already have a basic knowledge of git but learned it through try and error. But it is also suitable for developers that are new to git and only have experience in other version control systems.
GitHub Advanced Security boot camp – hands-on workshop	Software supply chain attacks and secrets leakages... Software supply chain attacks and secrets leakages are still one of the biggest threat vectors for software companies. But supply chain security does not have to be a burden and slow down development! With GitHub Advanced Security (GHAS) you can incorporate security into your development process with a developer first mindset. This hands-on workshop is designed for developers that want to improve their security posture by giving them practical exercises to get to know GHAS. The workshop covers: - Dependency graph, dependabot, and dependency review - Secret scanning and push protection - Code scanning and pull request integration - Include other security tools in GHAS - CodeQL and writing custom queries - Rolling out GHAS in your organization
Empowering Digital Transformation: Harnessing the Potential of OpenAI and ChatGPT	This session delves into the transformative power ... This session delves into the transformative power of OpenAI and ChatGPT in accelerating digital transformation. We will explore the possibilities of how these advanced technologies can assist businesses in expanding their digital presence, developing more efficient processes, and delivering customer-centric solutions. Dive into the world of machine learning and artificial intelligence to understand how OpenAI and ChatGPT can revolutionize the way we conduct business and interact with customers. Discover how organizations can enhance their innovation capabilities and gain competitive advantages by strategically leveraging these powerful technologies. This session offers an inspiring perspective on the future of digital transformation and how OpenAI and ChatGPT can be a driving force in this process.
Beschleunigung der digitalen Transformation: Das Potenzial von OpenAI und ChatGPT nutzen	In dieser Session geht es um die transformative Kr... In dieser Session geht es um die transformative Kraft von OpenAI und ChatGPT bei der Beschleunigung der digitalen Transformation. Wir werden die Möglichkeiten erkunden, wie diese fortschrittlichen Technologien Unternehmen dabei unterstützen können, ihre digitale Präsenz zu erweitern, effizientere Prozesse zu entwickeln und kundenorientierte Lösungen zu liefern. Tauchen Sie ein in die Welt des maschinellen Lernens und der künstlichen Intelligenz, um zu verstehen, wie OpenAI und ChatGPT die Art und Weise, wie wir Geschäfte machen und mit Kunden interagieren, revolutionieren können. Erfahren Sie, wie Unternehmen ihre Innovationsfähigkeit steigern und Wettbewerbsvorteile erlangen können, indem sie diese leistungsstarken Technologien gezielt einsetzen. Diese Session bietet eine inspirierende Perspektive auf die Zukunft der digitalen Transformation und wie OpenAI und ChatGPT eine treibende Kraft in diesem Prozess sein können.
Empower Your DevSecOps Journey: GitHub Advanced Security Boot Camp - A Hands-On Workshop	Software supply chain attacks and security breache... Software supply chain attacks and security breaches continue to pose significant threats to software companies worldwide. However, securing your software supply chain need not be a cumbersome process that hampers development speed. With GitHub Advanced Security (GHAS), you can seamlessly integrate security into your development workflow, fostering a developer-first mindset. Join us for this immersive, hands-on workshop tailored for developers seeking to enhance their security proficiency through practical exercises and in-depth exploration of GHAS. This workshop will equip you with the knowledge and skills to fortify your applications and protect against supply chain vulnerabilities. Key Workshop Highlights: - Dependency Graph, Dependabot, and Dependency Review: Learn how to effectively manage and secure your software dependencies. - Secret Scanning and Push Protection: Discover techniques to detect and safeguard against secret leaks. - Code Scanning and Pull Request Integration: Incorporate automated code scanning into your development pipeline. - Integrating Other Security Tools with GHAS: Extend GHAS capabilities by integrating additional security tools. - CodeQL and Custom Query Development: Harness the power of CodeQL to create custom security queries. - Rolling Out GHAS in Your Organization: Gain insights into strategies for implementing GHAS across your organization. Prepare to embark on a transformative DevSecOps journey and elevate your security posture with GHAS. This workshop is your gateway to mastering GitHub Advanced Security, enabling you to safeguard your software supply chain without compromising development efficiency. Don't miss this opportunity to bolster your security skills and protect your organization's digital assets.
Revolutionizing DevOps: Harnessing AI for Unprecedented Efficiency	Artificial Intelligence (AI) is reshaping industri... Artificial Intelligence (AI) is reshaping industries worldwide, and its profound influence is extending to DevOps practices. In this enlightening conference talk, join Michael as he delves into the extensive possibilities of enhancing DevOps processes through data and AI integration. From optimizing code development (DevEx) and streamlining pipelines to enhancing production environments with AI-driven monitoring, anomaly detection, and self-healing systems, Michael will illustrate the remarkable synergy between AI bots and ChatOps. Discover how these AI-driven solutions can efficiently resolve incidents and assign the most qualified engineers to ongoing tasks, ushering in a new era of DevOps efficiency and effectiveness.
Navigating the DevOps Transformation Journey: Unlocking Innovation and Breaking Down Silos	Embracing a DevOps culture has been proven to empo... Embracing a DevOps culture has been proven to empower organizations with unparalleled speed, effectiveness, customer satisfaction, and innovation. However, many companies continue to grapple with the challenges of dismantling silos and implementing these practices successfully. In this enlightening conference talk, we will explore the reasons behind the stumbling blocks that often hinder transformation initiatives. Drawing from a rich tapestry of real-world examples from various organizations, this presentation offers a battle-tested roadmap for a successful DevOps transformation. Learn how to take measured yet decisive steps, guided by a clear vision and strategic direction. Begin with the essential "WHY" and a sense of urgency, and celebrate each milestone along the transformation journey. While tools and processes account for only 10 percent of DevOps, the remaining 90 percent centers on people and culture. Discover the pivotal role of individuals and organizational culture in ensuring the success of your transformation endeavors. Join us to gain invaluable insights into accelerating innovation, breaking down silos, and cultivating a culture of collaboration and agility within your organization. Don't miss this opportunity to embark on a transformative journey that can unlock your company's full potential.
Efficiency Unleashed: Mastering Automated Releases in a Multi-Team Environment	In today’s fast-paced software landscape, efficien... In today’s fast-paced software landscape, efficient workflows and release processes are critical. Join Michael in this session as he explores a comprehensive approach to fully automate the end-to-end release cycle across multiple teams. We’ll dive into practical techniques using GitHub Flow, GitVersion, GitHub Actions, and Dependabot to streamline versioning, release notes, and dependency updates. Discover how this automation not only saves time but also enhances quality, allowing your teams to focus on innovation rather than manual tasks. Whether you’re a developer, DevOps engineer, or team lead, this session will equip you with actionable insights to elevate your release pipelines and developer workflows to the next level.
Maximale Effizienz: Automatisierte Releases in einer Multi-Team-Umgebung	In der heutigen schnelllebigen Softwarelandschaft ... In der heutigen schnelllebigen Softwarelandschaft sind effiziente Workflows und Release-Prozesse von entscheidender Bedeutung. In dieser Session wird ein Ansatz zur vollständigen Automatisierung von Release-Zyklen über mehrere Teams hinweg vorgestellt. Anhand von praktischen Beispielen zeige ich, wie man mit GitHub Flow, GitVersion, GitHub Actions und Dependabot den Release-Prozess inklusive Versionierung, Release-Notes und eines automatischen Updates von Abhängigkeiten voll automatisiert. Dies spart nicht nur Zeit, sondern es verbessert auch die Qualität und es erlaubt den Teams, sich auf Innovationen und neue Features zu konzentrieren und befreit sie von lästigen, manuellen, und fehleranfälligen Aufgaben. Egal ob Entwickler, DevOps-Ingenieur oder Teamleiter – diese Session wird Ihnen das nötige Wissen vermitteln, um Ihre Workflows und Release-Pipelines auf das nächste Level anzuheben.
Security 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers	In this session, we will delve into fundamental cy... In this session, we will delve into fundamental cybersecurity concepts, explore the concept of zero trust, and discuss key themes across various security domains. This session is especially for developers and will focus on how they can improve their company's security posture without having security slowing them down. The session will cover the following topics: Basic Cybersecurity Concepts: - Understanding the CIA triad: Confidentiality, Integrity, and Availability. - Differentiating between risks and threats. - Exploring the role of security controls in safeguarding systems and data. Zero Trust: A Paradigm Shift - Defining zero trust and its principles. - Why zero trust matters in today’s interconnected and dynamic digital landscape. - How to implement zero trust strategies effectively. Key Concepts Across Security Domains - Identity and Access Management (IAM): Managing user identities and permissions. - Networking Security: Protecting networks from threats. - Security Operations (SecOps): Incident response, monitoring, and threat hunting. - Infrastructure Security: Securing servers, cloud resources, and endpoints. - Data Security: Safeguarding sensitive information. Examples of Security Tools - Firewalls: Network security appliances. - Intrusion Detection Systems (IDS): Detecting suspicious activity. - Endpoint Protection: Securing devices. - Encryption Tools: Protecting data in transit and at rest. The Consequences for Developers - Securing development environments and pipelines. - Manage the Software Supply chain and automate the update vulnerable dependencies. - Automatically securing your code and infrastructure as code using code scanning tools. - Prevent leaked credentials and manage / rotate credentials in a secure way. Attendees will gain a solid understanding of cybersecurity fundamentals, learn about zero trust principles, and discover practical tools to secure the entire development lifecycle.
Unlocking the Power of AI: Transforming Software Development	In a rapidly evolving world, artificial intelligen... In a rapidly evolving world, artificial intelligence (AI) is reshaping our reality. It’s not just about automating tasks; it’s about revolutionizing how we build software. This talk will guide you through practical ways to leverage AI as a developer—from requirements analysis and coding to testing and documentation. Expect live demos that showcase the seamless integration of AI tools, empowering you to elevate your software development process. Beyond GitHub Copilot, we’ll delve into other AI forms that can enhance the entire software development life cycle (SDLC). Join us on this transformative journey!
Innovationskraft der KI: Neue Horizonte für Entwickler	Künstliche Intelligenz (KI) verändert unsere Reali... Künstliche Intelligenz (KI) verändert unsere Realität in einem extremen Tempo. Und auch die Art wie wir Software bauen wird sie komplett verändern. Dieser Vortrag führt Sie durch praktische Möglichkeiten, KI als Entwickler zu nutzen – von der Anforderungsanalyse und dem Codieren bis hin zu Tests und Dokumentation. Erwarten Sie Live-Demos, die die nahtlose Integration von KI-Tools zeigen und Ihnen helfen, Ihren Softwareentwicklungsprozess zu verbessern. Über GitHub Copilot hinaus werden wir uns mit anderen KI-Formen befassen, die den gesamten Softwareentwicklungslebenszyklus (SDLC) verbessern können.
GitHub boot camp – hands-on workshop	GitHub is more than just source control. It is a c... GitHub is more than just source control. It is a complete DevOps solution that can help you to accelerate your entire development process – from idea to production. In this practical boot camp, you’ll get to know all parts of GitHub and you’ll learn all tricks to get you an effective start. The workshop is designed for developers that have used other platforms like Azure DevOps, GitLab, or Bitbucket and now want to switch to GitHub. But it is also suitable for people that are new to topics like git, CI/CD and DevOps. Agenda: Part 1: Idea to code - Introduction to GitHub - Collaborate with GitHub Issues and pull requests - Hands-on: GitHub issues und pull requests - GitHub Projects (beta), Discussions, Wikis and Pages Part 2: Code to Cloud - Branching strategies and git workflows like GitHub flow - Working locally with git (hands-on) - Introduction to GitHub Actions workflows und YAML - Hands-on: My first Action workflow - Types of GitHub Actions - Hands-on: My first container Action - Hands-on: My first JavaScript Action - GitHub Packages and GitHub Releases - Hands-on: Releasing NPM packages - Hands-on: Releasing Docker containers - Staged deployments with environments
Deep dive into git – half-day workshop	In this half-day workshop, we’ll cover all advance... In this half-day workshop, we’ll cover all advanced topics of git: - How does git work? - What is a DAG, SHA, patch, and a commit? - What are branches and tags? - How do you solve merge conflicts? - How do you manipulate your history using commit amend, reset, rebase, and cherry-pick? - How do you work with the stash? - How do you search in git? Furthermore, the workshop is pact with practical tips that help you to work with git: the right configuration, auto-correct of commands, recording merges, and many more. The workshop is designed for developers that already have a basic knowledge of git but learned it through try and error. But it is also suitable for developers that are new to git and only have experience in other version control systems. Prerequisites for the session are a local git installation, a text editor, and a free GitHub account.
From 0 to hero: GitHub Actions kick start	GitHub has a new workflow and automation engine: G... GitHub has a new workflow and automation engine: GitHub Actions. It’s much more than just a CI/CD pipeline solution – it is a workflow engine you can use to automate anything in GitHub in a secure way. With over 10,000 actions in the GitHub marketplace, GitHub is a rapidly growing ecosystem that connects all your tools to automate every step of your software development process. In this practical half-day workshop, you’ll learn everything related to GitHub Actions: - YAML and YAML syntax - Workflows, triggers, and jobs - Workflow runners (hosted and self-hosted) - Variables, secrets, contexts, and expressions - Workflow commands - Hands-on: My first workflow - Actions: JavaScript/Typescript, Docker, and Composite Actions - Hands-on: My first GitHub Action - Templates und reusable workflows - Environments und staged deployments - Hands-on: My first multi-stage pipeline with approvals - Security considerations when using GitHub Actions The workshop is designed for developers and DevOps engineers that are experienced in other CI/CD platforms, like GitLab, Jenkins, or Azure Pipelines, and want to switch to GitHub Actions. But people that are completely new to the topics will also be able to follow along.
Application security and DevSecOps - end to end	In 2016, a dispute over the name Kik let to an out... In 2016, a dispute over the name Kik let to an outage that affected nearly the entire internet: an open-source package with 11 lines of code, that every developer could easily write themselves, was withdrawn from the package registry and caused thousands of websites to break. And, in 2020, SolarWinds caused a security leak that affected over 33,000 customers, amongst them the Department of Homeland Security and the Department of Treasury: an attack to the software supply chain of their software Orion was successful and let to malicious software to be distributed to many of their clients. Incidents like this proof that application security is not just security testing before you ship your software or architecture reviews. Security must be baked into your development process and if must span the entire software supply chain. In this talk you’ll learn how you can integrate security into your complete development process: - Secure development environments - Secret scanning and secret rotation - Dependency management and software composition analysis (SCA) - Manage your software supply chain with Dependabot - Find XSS, SQL injection, and memory leaks - Static and dynamic security testing (SAST and DAST) - Hunt for vulnerabilities writing your own CodeQL queries The talk is for everyone that is interested in application security – developers as well as DevOps engineers.

Michael Theobald

Session Title	Abstract
Workshop: Moderne Web-Applikationen mit TypeScript, React und Material-UI	In diesem Workshop geht es um die Erstellung von B... In diesem Workshop geht es um die Erstellung von Browser-Applikationen mit TypeScript, React und Material-UI. Sie lernen, welche Technologien in solch einer modernen Anwendung drin stecken, den Umgangen mit diesen Technologien und wie man heutzutage eine Web-Anwendung aufbaut, um Testbarkeit, Wartbarkeit und Skabarkeit zu gewährleisten. Es werden gängige Fallstricke und Besonderheiten aufgezeigt genauso, wie wichtige Unterschiede zwischen Web-Seiten-Entwicklung und Web-App-Entwicklung. Vor allem für Entwickler, die aus der Desktopentwicklung kommen, werden viele Parallelen für den leichten Einstieg gezeigt. Themen, die angesprochen werden: - Einrichtung von Visual-Studio-Code für Web-App-Entwicklung - Extensions - Debugging - Einführung in Typescript als Superset von Javascript (Generics, Types, Interfaces) - React mit funktionaler Entwicklung - Component Lifecycle Methods - State-Handling mit React-Context - React-Hooks - Material-UI als UI-Framework (Komponenten, Layouting, Styling) - Data-Fetching - Browser fetch-API - REST-Client-Generierung mit AutoRest - Performace Optimierungen und Do’s und Dont’s - Umgang mit NodeJS - Bundler (webpack oder vite) - optional: Testing (Unit-/Component-Tests, Integration-Tests mit Playwright) - optonal: App-Konfiguration
Web-Anwendungen Front-ends für Windows-Entwickler	Bei der Modernisierung einer Legacy-Windows-Deskto... Bei der Modernisierung einer Legacy-Windows-Desktopanwendung sehen sich Entwickler mit einer Vielzahl von Web-Technologien und unterschiedlichen Programmierparadigmen für das Front-End konfrontiert. Durch die Auswahl der geeigneten Web-Technologien und Frameworks können Windows-Entwickler die Notwendigkeit vermeiden, anspruchsvolle Technologien wie CSS beherrschen zu müssen. Dieser Vortrag bietet einen kurzen Überblick und praktische Anleitungen zu dem Wissen, das Windows-Entwickler leicht übertragen können, sowie den Hauptunterschieden bei der Entwicklung eines Front-Ends für das Web. Unter Verwendung von React und dem Material-UI-Framework werden den Teilnehmern die Grundlagen der funktionalen Programmierung mit TypeScript vermittelt. Am Ende dieser Sitzung werden ehemalige Windows-Entwickler Wissen über einen grundlegenden Satz von Technologien zur Hand haben, um mit dem Aufbau eines Webanwendungs-Front-Ends zu beginnen.
Ist das Scrum oder kann das weg?	Was tun, wenn die Anforderungen für SCRUM nicht er... Was tun, wenn die Anforderungen für SCRUM nicht erfüllt sind, das Entwicklungsteam aber agil arbeiten möchte? Wie wäre es mit einem Umstieg auf KANBAN? Ein Neustart in einem anderen System kann wieder Wind in die Segel bringen. Es bringt das Dev-Team dazu, die eigenen Prozesse zu überdenken und signalisiert im Management, dass sich Dinge nun anders verhalten. Wie schafft man es nun, die agile Denkweise aus SCRUM mitzunehmen, aber einen Prozess basierend auf KANBAN aufzubauen? Erfahren Sie an einem bewährten Beispiel wie man mit einem DEV-Team, bei dem SCRUM nicht angenommen wird, oder einfach nicht funktioniert, erfolgreich zu einem produktiveren System basierend auf KANBAN wechselt.
Kann das weg oder ist das Scrum?	Was tun, wenn die Anforderungen für SCRUM nicht er... Was tun, wenn die Anforderungen für SCRUM nicht erfüllt sind, das Entwicklungsteam aber agil arbeiten möchte? Wie wäre es mit einem Umstieg auf KANBAN? Ein Neustart in einem anderen System kann wieder Wind in die Segel bringen. Es bringt das Dev-Team dazu, die eigenen Prozesse zu überdenken und signalisiert im Management, dass sich Dinge nun anders verhalten. Wie schafft man es nun, die agile Denkweise aus SCRUM mitzunehmen, aber einen Prozess basierend auf KANBAN aufzubauen? Erfahren Sie an einem bewährten Beispiel wie man mit einem DEV-Team, bei dem SCRUM nicht angenommen wird, oder einfach nicht funktioniert, erfolgreich zu einem produktiveren System basierend auf KANBAN wechselt.
Die Leistungsfähigkeit von Visual Studio Code entfesseln	Visual Studio Code ist eine äußerst leistungsfähig... Visual Studio Code ist eine äußerst leistungsfähige integrierte Entwicklungsumgebung (IDE), aber nutzen Sie dessen Funktionen und Erweiterungen voll aus, um Ihre tägliche Produktivität zu steigern? Nutzen Sie Erweiterungen, die eine verbesserte Übersicht bieten und helfen, Fehler zu minimieren? In diesem Vortrag werde ich außergewöhnlichen Funktionen von Visual Studio Code demonstrieren und wesentliche Erweiterungen für die Full-Stack-Entwicklung mit Web-Frontends (z. B. React), C#-Backends und CI/CD-Umgebungen wie Azure DevOps oder GitHub empfehlen. Durch die Umsetzung dieser Empfehlungen können Sie Ihre Effizienz bei der Arbeit mit Visual Studio Code erheblich verbessern.
Chat ist tot: Sprich zur KI	In einer Session mit Snippets werde gezeigt, wie m... In einer Session mit Snippets werde gezeigt, wie man mit wenig eigenem Code einen Chatbot schreibt, mit dem man sich auch über Sprache unterhalten kann statt nur zu chatten. Basierend auf Microsoft-Services und in einem React-Frontend ist dies so schnell etablierbar wie noch nie. Natürlich wird sich auch live mit der KI unterhalten.
Stay useful in the age of AI	We explore how individuals can remain relevant and... We explore how individuals can remain relevant and valuable in a world increasingly shaped by artificial intelligence. It highlights uniquely human strengths—such as empathy, creativity, ethics, and critical thinking—that machines cannot replicate. Key strategies include embracing lifelong learning, developing digital and interdisciplinary skills, and learning to collaborate effectively with AI systems. The presentation also introduces meaningful career paths and emerging roles that leverage human-AI synergy.
How AI supports your soft skills	We explore how artificial intelligence can enhance... We explore how artificial intelligence can enhance and support the development of essential soft skills in the modern workplace. It highlights how AI-powered tools can provide real-time feedback on communication, simulate emotional intelligence scenarios, and personalize learning experiences for skills like empathy, leadership, and collaboration. Rather than replacing human qualities, AI acts as a coach and amplifier—helping individuals grow in areas that are uniquely human. The presentation offers practical examples, tools, and strategies to integrate AI into personal and professional development, empowering people to thrive in a tech-augmented world.

Michiel van Oudheusden

Session Title	Abstract
How to run a global, cloud scale event for 10.000 people	We want to tell you a story, a story about an even... We want to tell you a story, a story about an event that spanned 35 countries, reached 10.000 participants, involved 1.400 websites and databases, raised 8 disruptions on those websites and even caused Azure DevOps outages. In which we reached the limits of the cloud and still were able to spend only half of the budget. We will tell you how not only organize an event on this scale, but also how to automate it; from pipelines to deploy the Azure infrastructure, to the actual event day automation. What did we run into, what did we use and what have we learned.
Empowering Developers with FinOps: Mastering Cost Efficiency in the Cloud	In this session, we'll dive into the fascinating i... In this session, we'll dive into the fascinating intersection of development and financial operations (FinOps). Designed for developers, this talk will unveil why FinOps is crucial for you and how it directly impacts your work. We'll explore practical strategies to ensure cost-effective development, highlighting actionable steps you can take to optimize spending on platforms like Azure. Learn about the critical choices in architecture and tools that influence cost control, and gain insights into proactive versus reactive cloud cost management. Discover the concept of "shift left" in cost management and understand its importance in the development lifecycle. We’ll also cover various tools and tricks to incorporate cost efficiency into your workflow from the start. By the end of this session, you’ll have a clear understanding of how you, as a developer, can significantly influence cloud costs and drive efficiency, making you an invaluable asset to your team and organization.

Manuel Riezebosch

Session Title	Abstract
The 2 tools you need to trim down 1 humongous repository	Part of Azure DevOps migrations often involves swa... Part of Azure DevOps migrations often involves swapping out the underpinning source control. Build up history for over 20 years, including all kinds of binary file formats, make up a gigantic repository that is a pain to work with. I've had great success using filter-repo (and BFG before), git lfs, and a bit of excel to split, cleanup, reduce, remove and replace GBs of history into only a few 100 MBs tops. In this session, I will show my plan of approach. For everyone that likes to have clean and concise repositories.
Kotlin for C# Developers, a side-by-side comparison	I'm in no way an expert on Kotlin, but I happen to... I'm in no way an expert on Kotlin, but I happen to know almost everything about C#. It's that knowledge I tried to apply on my bit-too-serious-side-project that I've been working on for over a year now. In this session, I will go by the most notable features in C# to check how that's implemented in Kotlin. Maybe there are even some built-in features that we've been waiting for years already.

Nico Orschel

Session Title	Abstract
Moderne CI/CD-Prozesse mit GitHub Actions	Mit Actions wird Continuous Integration/Continuous... Mit Actions wird Continuous Integration/Continuous Delivery (CI/CD) auch ein Teil von GitHub. Actions bieten den Nutzern nicht nur ein leistungsstarkes Werkzeug für ihre CI/CD-Prozesse, sondern auch eine Plattform zur Automatisierung von GitHub selbst. Im Vortrag zeigen wir Beispiele dafür, wie Entwickler GitHub Actions zur Automatisierung ihrer DevOps-Prozesse verwenden kann, angefangen von der Automatisierung von Builds bis hin zur Erstellung von Issues mit Ihrer Stimme auf Ihrem Smartphone. Sie werden auch lernen, wie Sie Ihre eigenen Actions entwickeln und GitHub-Actions verwenden können, um andere Teile Ihres Repositories zu automatisieren.
Leistungsstarke Observability: OpenTelemetry und Azure Monitor im Zusammenspiel	OpenTelemetry und Azure Monitor bieten eine umfass... OpenTelemetry und Azure Monitor bieten eine umfassende Monitoring-Lösung für Anwendungen mit einem offenen Protokoll. Erfahren Sie, wie Sie mit dem OpenTelemetry Framework Telemetriedaten aus Ihren Anwendungen sammeln, analysieren und optimieren können. Durch die Integration mit Azure Monitor als Backend erhalten Sie tiefe Einblicke in die Performance Ihrer Anwendungen und können Probleme schnell identifizieren und beheben. Nutzen Sie das offene Protokoll von OpenTelemetry, um nahtlos mit Azure Monitor zu interagieren und eine umfassende Überwachungsumgebung aufzubauen. Die Präsentation zeigt Ihnen Best Practices, Tipps und reale Anwendungsfälle, um das volle Potenzial von OpenTelemetry und Azure Monitor mit einem offenen Protokoll auszuschöpfen.
Azure DevOps und GitHub – wo geht die Reise hin?	Seit der Übernahme von GitHub durch Microsoft vor ... Seit der Übernahme von GitHub durch Microsoft vor einigen Jahren ist sowohl im Microsoft Azure-DevOps- als auch im GitHub-Universum einiges passiert. Jetzt wird es Zeit, sich die vermeintlichen Konkurrenten GitHub und GitHub Enterprise genauer anzuschauen. Neben einem Einstieg in das GitHub-(Enterprise)-Universum wird auch auf die Fragestellungen „Wo geht die Reise der Plattformen hin?“, „Was bedeutet das für mich?“ und „Wie kann eine Migrationsstrategie aussehen?“ eingegangen.
Azure DevOps Nutzung effizienter gestalten durch PowerShell-Automatisierung	In Azure DevOps gibt es so die ein oder andere Ste... In Azure DevOps gibt es so die ein oder andere Stelle wo man sich als Nutzer des Systems gerne mehr Komfort, eine neue Funktionalität oder einfach weniger manuelle Tätigkeiten wünschen würde. Nicht für jede Anforderung möchte man gleich eine vollwertige AzD Extension schreiben und somit einen großen Aufwand spendieren. Im Vortrag soll eine leichtgewichtige Alternative in Form von PowerShell mit der AzD REST API vorgestellt werden. Anwendungsfälle wären exemplarisch Bulk Updates von Work Items Feldern sowie Build Runs oder erweiterte Reports (jenseits von Azure DevOps Analytics). Für die einzelnen Anwendungsfälle sollen auch praktische Beispiele sowie die theoretischen Grundlagen vermittelt werden.
Schnelle und einfache Auswertungen in Azure DevOps	Auswertungen von Daten werden gefühlt in jeder Sof... Auswertungen von Daten werden gefühlt in jeder Software benötigt. Auch Azure DevOps bildet hier keine Ausnahme. Für die tägliche Arbeit müssen schließlich Unmengen an Daten handhabbar aufbereitet werden. Beispiele für solche Auswertungen gibt es viele, Build Reports, Test Reports, Code Quality Reports, Burn Down Reports, etc.. Im Vortrag wird ein Streifzug über die verschiedenen Möglichkeiten der Datenbereitstellung- und -aufbereitung gezeigt. Die Bandbreite reicht dabei von Out-of-the-Box bis zu eigenen Auswertungen über PowerShell-basierende Daten-Aggregration.
Die richtige Versionierung macht’s	Die Definition der richtigen Versionierungsstrateg... Die Definition der richtigen Versionierungsstrategie für die eigene Software ist mindestens so individuell und schwierig wie die Definition der „richtigen“ Softwarearchitektur. Auf den ersten Blick erscheint das trivial und man denkt, dass man das mal schnell nebenbei erledigen kann. Blickt man etwas weiter in die Zukunft, sieht man, dass von der Versionierung eine Menge anderer Dinge abhängen können. Gerade in CI/CD Pipelines ist eine saubere Versionierung essentiell, denn nur mit ihr kann „build once, deploy many“ auch effektiv und effizient umgesetzt werden. In dieser Session wollen wir uns eine kleine Auswahl verschiedener Versionierungstechniken aus den letzten Jahren und der jüngeren Vergangenheit anschauen. Bei den einzelnen Strategien stellen wir uns die Leitfragen "Warum wurde es so gemacht?", "Was sind die Vor- und Nachteile des jeweiligen Ansatzes?" und "Würde der Vortragende es heute wieder so machen?". Neben der reinen Theorie werden wir uns auch einige Codebeispiele für Implementierungen in CI/CD Pipelines am Beispiel von Azure Pipelines (Azure DevOps/TFS) bzw. GitHub Actions anschauen.
Azure DevOps: 10 + 1 elementare Dinge für jeden Nutzer	Sind Sie gestresst von der Azure DevOps (AzD) Feat... Sind Sie gestresst von der Azure DevOps (AzD) Featuritis der letzten Jahre? Sie glauben auch, das gute DevOps-Prozesse und eine effiziente AzD-Nutzung mehr sind als der neue Feedbackclient oder die 200. Optimierung des AzD API? Die grundlegenden Ursachen der Probleme in vielen Teams lassen sich selten direkt mit dem neusten Update lösen. Im Vortrag gehen wir einen gedanklichen Schritt zurück und geben Tipps und Tricks für eine pragmatische AzD-Nutzung, gemäß dem Motto: "Früher war nicht alles schlecht ... und gute, einfache Ideen helfen immer." Die vermittelten Ideen beschränken sich nicht nur auf einzelne Bereiche wie Source Control oder Work Item Tracking, sondern betrachten auch erweitere Themen wie Strukturierung.
Testautomatisierung für WebApps mit Playwright	Testautomatisierung ist ein wichtiger Baustein von... Testautomatisierung ist ein wichtiger Baustein von Software-Entwicklungsprojekten. Das Fundament bilden dabei Unit Tests. Nicht alles lässt sich aber mit Unit Test Frameworks adäquat testen, sodass noch immer spezifische UI Tests zur Ergänzung zum Einsatz kommen. Im WebApp Bereich ist der Platzhirsch hier Selenium. In der jüngeren Vergangenheit sind neue Alternativen zu Selenium entstanden. Der neuste und vielversprechendste ist dabei das Open Source Framework Playwright von Microsoft. Playwright Tests lassen sich dabei flexibel in unterschiedlichen Sprachen wie C# oder JavaScript erstellen, unterstützen auch unterschiedliche Browser sowie Betriebssysteme. Im Vortrag sollen die Konzepte, Vorteile, Nachteile und Unterscheide im Vergleich zu Selenium gezeigt werden. An Live-Demos wird es ebenfalls nicht fehlen, sodass ein besseres Gefühl für Playwright vermittelt wird.
Zurück in die Zukunft: Von Azure Pipelines zu GitHub Actions migrieren	Immer mehr Entwickler stehen vor der Herausforderu... Immer mehr Entwickler stehen vor der Herausforderung von Azure Pipelines auf GitHub Actions zu migrieren. In diesem Vortrag geht es um die Migration von Azure DevOps CI/CD Pipelines zu GitHub Actions. Es werden Vorteile, Nachteile und Herausforderungen erläutert und Best Practices für eine reibungslose Migration vorgestellt. Darüber hinaus werden die Unterschiede zwischen Azure Pipelines und GitHub Actions beleuchtet und Möglichkeiten diskutiert, bestehende Pipelines in Actions zu konvertieren. Darüber hinaus wird die Integration von GitHub Actions in den Entwicklungsworkflow erläutert und gezeigt, wie Performance und Skalierbarkeit maximiert werden können. Ziel des Vortrags ist es, den Teilnehmern das notwendige Wissen und die Werkzeuge zu vermitteln, um mit GitHub Actions zu starten und eine Migration von Azure Pipelines zu GitHub Actions durchzuführen.
Erfolgreiche Umstellung: Von Azure DevOps zu GitHub migrieren	Mit GitHub und Azure DevOps entwickelt Microsoft p... Mit GitHub und Azure DevOps entwickelt Microsoft praktisch zwei DevOps-Plattformen im eigenen Haus. Viele Anwender stehen nun vor der Herausforderung, von Azure DevOps zu GitHub zu migrieren. In dieser Session geht es um die Migration von Azure DevOps zu GitHub als zentrales Werkzeug für die Entwicklung von Software. Im Detail geht es um Gemeinsamkeiten und Unterschiede in den verschiedenen Funktionsbereichen zwischen den beiden Plattformen sowie um Herausforderungen und Lösungen bei der Migration von Azure DevOps zu GitHub. Die Session richtet sich an alle, die eine Migration zu GitHub in Erwägung ziehen und eine moderne DevOps-Plattform für ihre Softwareentwicklung nutzen möchten.
Von Anfang an sicher: GitHub Advanced Security mit GitHub und Azure DevOps	Anwendungen werden angegriffen und Entwickler sind... Anwendungen werden angegriffen und Entwickler sind die erste Verteidigungslinie, indem sie den Code schützen und sicherstellen, dass wir die besten Sicherheitsverfahren anwenden. Es gibt verschiedene Methoden, um Ihren Code anzugreifen, vom direkten Einfügen von bösartigem Code in Ihr Repo bis hin zur Übernahme eines Kontos oder der Kompromittierung eines Signierschlüssels, um Software zu verteilen, die nicht offiziell Teil einer Komponente ist, und viele andere Möglichkeiten. Es ist einfach, über Shift-Left bei Sicherheit zu sprechen, aber wie genau soll man das tun? Welche Tools sollten Sie verwenden, und wie setzen Sie sie so ein, dass Sie mit Zuversicht veröffentlichen können? Wir werden uns mit dem Konzept der Anwendungssicherheit befassen, über die verfügbaren Tools sprechen und Wege aufzeigen, wie Sie sicherstellen können, dass die Tools der Entwicklung nicht im Wege stehen. Sie werden lernen: - GitHub Advanced Security- und GitHub Advanced Security for Azure DevOps (GHAS- und GHAzDO)- Funktionen - Verstehen, was mit Shift-Left bei der Sicherheit gemeint ist - Was kann ich als Entwickler tun, um die Sicherheitslage ihrer Anwendung zu verbessern?
IaC mit Pulumi und GitHub Actions	Infrastructure as Code (IaC) ist die moderne Art I... Infrastructure as Code (IaC) ist die moderne Art Infrastruktur zu verwalten und bereitzustellen. Pulumi ist ein neues Framework, das es Entwicklern ermöglicht, in ihrer bevorzugten Programmiersprache zu bleiben, um sich der Thematik anzunähern. Dieser Ansatz senkt die Einstiegshürde für viele Entwickler, erst eine neue Sprache lernen zu müssen, um sich mit dem Thema beschäftigen zu können. GitHub Actions ist eine aufstrebende Workflow-Engine, welche die Automatisierung der Bereitstellung auf Basis von Pulumi unterstützen kann. In dieser Session möchten Till und Nico zeigen, wie man mit Pulumi, der bevorzugten Programmiersprache und GitHub Actions Infrastruktur einfach und flexibel auf Azure oder anderen Cloudanbietern bereitstellen kann.
Azure DevOps und GitHub - Better together?	Es muss nicht immer 100% GitHub oder 100% Azure De... Es muss nicht immer 100% GitHub oder 100% Azure DevOps sein. Warum nicht mal die Services von beiden Plattformen nach Nutzerbedarf mischen? Im Talk wollen wir uns mal ausnahmsweise Hybrid-Szenarien für die Nutzung von GitHub und Azure DevOps anschauen. Kernfragen sind dabei: a) Was sind die Vor- und Nachteile des jeweiligen Szenarios? b) Wie sieht die Zukunft aus? c) Für welche Nutzergruppe ist das Szenario interessant? Neben der Theorie wird auch das ein oder andere Szenario praktisch gezeigt.
Evolving Best Practices in Azure DevOps: Von Organisation bis zur Auslieferung	Entwicklungsteams stehen oft vor der Herausforderu... Entwicklungsteams stehen oft vor der Herausforderung, historisch gewachsene Strukturen zu aktualisieren oder abzulösen - Stichwort Refactoring. Dies betrifft nicht nur die entwickelte Software, sondern auch Azure DevOps. In diesem Vortrag werden die bestehenden Best Practices bei der Strukturierung und Arbeit mit Azure DevOps untersucht und wie sie sich im Laufe der Zeit weiterentwickelt haben. Wir werden verschiedene Themenbereiche behandeln, wie zum Beispiel die Organisation von Projekten, die effektive Nutzung von Source Control, die Implementierung von CI/CD-Pipelines, das Testmanagement und den Betrieb von Anwendungen. Dabei zeigen wir auf, wie sich bewährte Methoden in diesen Bereichen verändert haben und wie Entwickler und Teams von diesen Veränderungen profitieren können. Durch praktische Beispiele und Demos zeigen wir, wie Unternehmen die neuesten Entwicklungen in Azure DevOps umsetzen können, um ihre Entwicklungsprozesse zu optimieren und die Qualität ihrer Software zu verbessern.
Verbesserung von Azure DevOps YAML-Pipelines: Anwendung bewährter und innovativer Funktionen	In diesem Vortrag erfahren Sie, wie Azure DevOps P... In diesem Vortrag erfahren Sie, wie Azure DevOps Pipelines durch den gezielten Einsatz neuer, bewährter und vielleicht weniger bekannter Features optimiert werden können. Im Detail und anhand praktischer Beispiele werden die folgenden Themenschwerpunkte behandelt: - Wiederverwendung: Effektive Nutzung von YAML-Templates, um Konfigurationen und Workflows zu standardisieren und in anderen Entwicklungsprojekten wiederzuverwenden. - Compliance: Umsetzung von Compliance-Anforderungen zur Einhaltung von Richtlinien. - Sicherheit: Erhöhung der Pipeline-Sicherheit durch Implementierung von Sicherheitsmaßnahmen - Integration manueller Tätigkeiten: Strategien zur nahtlosen Integration manueller Schritte in automatisierte Pipelines. - Skalierung: Maßnahmen zur Steigerung der Build-Performance
Azure DevOps Pipeline-Infrastruktur im Fokus: Hosting, Sicherheit und Skalierung	In unserem Vortrag geht es um den effizienten Betr... In unserem Vortrag geht es um den effizienten Betrieb von Azure DevOps Pipeline-Infrastrukturen. Wir werden die verschiedenen Hosting-Optionen (On-Premise, Hosted oder Hybrid) genauer unter die Lupe nehmen und vorstellen, welche Vor- und Nachteile sie mit sich bringen. Außerdem werden wir uns mit dem wichtigen Themen Sicherheit und Compliance auseinandersetzen, um einen sicheren und regelkonformen Betrieb der Azure DevOps Pipeline-Infrastruktur zu ermöglichen. Und zu guter Letzt stellen wir die interessante Möglichkeit der Azure DevOps Scale-Set Agents vor. Diese zeigt, wie die Leistungsfähigkeit der Pipeline-Infrastruktur durch die Skalierung der Agents durch Packer und die Azure Cloud verbessert werden kann. Der praxisnahe Vortrag enthält viele Tipps, Demos und Best Practices für alle, die ihre Azure DevOps Pipelines-Infrastruktur auf das nächste Level bringen möchten.
Bootcamp - Testautomatisierung mit Playwright	Der Workshop "Testautomatisierung mit Playwright" ... Der Workshop "Testautomatisierung mit Playwright" bietet eine umfassende Einführung in die Verwendung des Playwright-Frameworks zur Testautomatisierung. Playwright ist ein leistungsstarkes Open-Source-Tool, das die Entwicklung zuverlässiger und skalierbarer Testskripte für Webanwendungen ermöglicht. In diesem Workshop lernen die Teilnehmer Playwright zu installieren, zu konfigurieren und Testskripte zu schreiben und auszuführen. Außerdem werden Best Practices für die Organisation und Pflege von Testfällen diskutiert. Der Workshop richtet sich an Entwickler, Tester und QA-Teams, die ihre Fähigkeiten im Bereich der Testautomatisierung erweitern möchten. Vorkenntnisse in der Webentwicklung und Grundkenntnisse in der Testautomatisierung sind von Vorteil, aber nicht zwingend erforderlich. Am Ende des Workshops werden die Teilnehmer in der Lage sein, Playwright effektiv einzusetzen, um automatisierte Tests für Webanwendungen zu erstellen und die Qualität ihrer Software zu verbessern.
Bootcamp - Von Anfang an sicher: GitHub Advanced Security mit GitHub und Azure DevOps	Anwendungen werden angegriffen und Entwickler sind... Anwendungen werden angegriffen und Entwickler sind die erste Verteidigungslinie, indem sie den Code schützen und sicherstellen, dass wir die besten Sicherheitsverfahren anwenden. Es gibt verschiedene Methoden, um Ihren Code anzugreifen, vom direkten Einfügen von bösartigem Code in Ihr Repo bis hin zur Übernahme eines Kontos oder der Kompromittierung eines Signierschlüssels, um Software zu verteilen, die nicht offiziell Teil einer Komponente ist, und viele andere Möglichkeiten. Es ist einfach, über Shift-Left bei Sicherheit zu sprechen, aber wie genau soll man das tun? Welche Tools sollten Sie verwenden, und wie setzen Sie sie so ein, dass Sie mit Zuversicht veröffentlichen können? Wir werden uns mit dem Konzept der Anwendungssicherheit befassen, über die verfügbaren Tools sprechen und Wege aufzeigen, wie Sie sicherstellen können, dass die Tools der Entwicklung nicht im Wege stehen. Sie werden lernen: - GitHub Advanced Security- und GitHub Advanced Security for Azure DevOps (GHAS- und GHAzDO)- Funktionen - Verstehen, was mit Shift-Left bei der Sicherheit gemeint ist - Was kann ich als Entwickler tun, um die Sicherheitslage ihrer Anwendung zu verbessern?
GitHub Copilot mit Nachbrenner: Erweiterungen & Power-User Funktionen für smarteres Coden	Visual Studio Code hat sich als eines der beliebte... Visual Studio Code hat sich als eines der beliebtesten und leistungsstärksten Entwickler-Tools etabliert. Ein entscheidender Erfolgsfaktor war dabei die umfangreiche Auswahl an verfügbaren Erweiterungen und Anpassungsmöglichkeiten. In unserem Vortrag zeigen wir, wie der Copilot in Visual Studio Code durch gezielte Erweiterungen, individuelle Konfigurationen und effektive "Power-User"-Prompt-Befehle optimiert werden kann. Zu Beginn des Vortrages zeigen wir wie durch bereits verfügbare Funktionen (Slash Commands, Chat Participants und -Variables, etc.) oder Anpassung der Konfiguration bereits bessere Ergebnisse erzielt werden können. Den Abschluss bildet die Erweiterung von Copilot über GitHub Copilot- und Visual Studio Code APIs. Als praktisches Beispiel nutzen hierfür wir unser Open-Source-Projekt VOCE, das Azure DevOps-Daten in Copilot integriert.
Von DevOps zu Rugged DevOps – Schnell und mit Sicherheit built-in ausliefern	Entwickler und IT-Profis in einem Team zu vereinen... Entwickler und IT-Profis in einem Team zu vereinen, macht sie nicht gleich zu einem DevOps-Team. Und selbst wenn sie reibungslos zusammenarbeiten, gibt es immer wieder das offene Spannungsfeld Sicherheit. Build- und Release-Pipelines kümmern sich um die Erstellung und Bereitstellung Ihrer Anwendung, aber sind Ihre Pipelines sicher? Und der Code, den Sie bereitstellen? Bei vielen Releases pro Tag können Sicherheitsverantwortliche nicht jedes Release überprüfen. Bei Rugged DevOps geht es darum, Ihre Assets und Ihre Pipeline zu sichern und Sicherheit wirklich in Ihren DevOps-Prozess einzubetten. In diesem Vortrag führen wir Sie durch die Konzepte von Rugged DevOps, die Risiken, denen Unternehmen derzeit ausgesetzt sind, und sprechen über einige Strategien und Tools, die Ihnen helfen können, Sicherheit in Ihre DevOps-Prozesse zu integrieren.
Telemetriedaten richtig auswerten mit Kusto und PowerBI	Azure Monitor als Plattform ermöglicht das Sammeln... Azure Monitor als Plattform ermöglicht das Sammeln und Analysieren von Telemetriedaten aus Azure-und lokalen Umgebungen. Beispiele für einzelne Bereiche sind z. B. Applikationen (App Insights), Container (Container Insights), virtuellen Maschinen (Log Analytics) sowie Azure-PaaS-/SaaS-Komponenten. Anhand dieser Daten kann man theoretisch einfach und schnell gute Entscheidungen treffen, doch leider passen die fertigen Auswertungsmöglichkeiten oft nicht zur eigenen Situation. Die Plattform verfügt dabei mit Kusto (KQL) als Abfragesprache über eine mächtige und einfache Möglichkeit, eigene Reports für Telemetriedaten zu erstellen und diese über PowerBI für alle (interessierten) Nutzer zu veröffentlichen. Im Talk soll die Abfragesprache Kusto (75 Prozent) sowie die Visualisierung via PowerBI (25 Prozent) im Fokus stehen.
Intelligente Erfassung und Verarbeitung von Telemetriedaten mit Application Insights	Build-Measure-Learn (Erstellen-Messen-Lernen) sind... Build-Measure-Learn (Erstellen-Messen-Lernen) sind die Schlagwörter aus dem DevOps-Universum. Die Build-Phase ist inhaltlich bereits sehr gut in den Teams adaptiert. Der nächste Schritt im Prozess, das Messen, ist da schon ein anderes Thema. Ohne gute Messdaten kann man als Team keine guten Erkenntnisse für die Weiterentwicklung des Produkts bzw. den Betrieb generieren. Das richtige Sammeln und Verarbeiten von Telemetriedaten ist somit für die ganzheitliche Adaption von DevOps als Konzept sehr wichtig. Das Motto lautet: "Wer 'sinnvolle' Daten im 'richtigen' Umfang sammelt, kann später auch intelligent Entscheidungen treffen". Ohne guten Input gibt es keinen guten Output.
Azure DevOps meets GitHub – Erfolgreich und einfach Open-Source-Projekte machen	Seit dem VSTS-Relaunch Mitte 2018 als Azure DevOps... Seit dem VSTS-Relaunch Mitte 2018 als Azure DevOps ist Microsoft mit den Cloud-Diensten der Azure-DevOps-Servicefamilie auch für die Verwaltung und den Betrieb von Open-Source-Projekten eine sinnvolle Ergänzung. Gerade im Hinblick auf die kostenlose Verfügbarkeit der Dienste für Open-Source-Projekte ist es eine spannende Alternative. Im Vortrag soll an Beispielen aus unserem eigenen Umfeld gezeigt werden, wie sich GitHub-basierende Projekte mit einzelnen Azure-DevOps-Diensten (z. B. Azure DevOps Pipelines, Azure Boards) integrieren bzw. erweitern lassen. Neben der Integration betrachten wir hier ebenfalls die Aspekte "Was hat sich bewährt?" und "Was würden wir mittlerweile anders machen?".
Continous Delivery von (klassischen) Windows Apps mit Azure Pipelines und Squirrel	Auch im Jahre 2020 sind noch nicht alle Apps gleic... Auch im Jahre 2020 sind noch nicht alle Apps gleich mit Web-Technologien realisiert und immer 100%-Online. Einen großen Anteil der Apps bilden immer noch klassische Windows-Apps auf Basis von WinForms, WPF oder ähnliche Desktop-Technologien. Auch für diese App-Kategorie möchte man im Sinne von DevOps schnelle Release- und Feedback-Zyklen ermöglichen. Im Vortrag soll das moderne Gespann aus dem OpenSource Installer- und Updateframework Squirrel und Azure Pipelines als Vertreter für CI-/CD Systeme vorgestellt. Als Leitfragen der Session dienen dabei: - Was ist Squirrel? Welche Desktop-Apps unterstützt Squirrel? Warum wird nicht ClickOnce für .NET Apps verwendet? - Wie integriert ich das Squirrel-Update-Framework in meine App? - Wie integriere ich eine Squirrel-basierende App in meinen CI-/CD Prozess? - Was ist Azure Pipelines? Was ist eine Yaml-basierende CI-/CD-Pipeline? Damit die Session aber nicht zu theoretisch ist, wird am Beispiel einer WPF App und YAML-basierenden-Azure Pipelines CI-/CD Pipeline der gesamte Prozess der Integration als Demo gezeigt.
Git im Leben eines TFVC/-SVN Nutzers	GIT gilt als die beliebteste und erfolgreichste ve... GIT gilt als die beliebteste und erfolgreichste verteilte Quellcode-Verwaltung überhaupt und ergänzt seit nun fast drei Jahren das Portfolio der DevOps-Plattform Team Foundation Server/Azure DevOps. Für eingefleischte Nutzer von zentralen Versionskontrollsystem wie TFVC, SVN oder CVS, stellt Git oftmals noch Neuland dar und es gilt einigen Stolperfallen geschickt aus dem Weg zu gehen. Im Vortrag zeigen wir mit viel Hintergrundinformationen und Beispielen, welche Konzeptänderungen auf einem warten. Nebst Visual Studio zeigen wir auch Shell Extensions und die Kommandozeilen-Tools als Ergänzung zum gewohnten Tool-Sets. Themen wie Git-Flow oder Large File Support (LFS) dürfen natürlich ebenfalls nicht fehlen.

Olena Borzenko

Session Title	Abstract
Inspired by Canvas, Built With Code	Art is something that speaks to the fundamental cr... Art is something that speaks to the fundamental creative urge in people. It comes in many forms, and it's everywhere. It's in the way we write code, design systems, and build tools. Even the output of the tools themselves can be art. This talk is about my journey, being inspired by both technology and science to write software that makes art. While it might seem that creating a beautiful painting requires mastery of paints and brushes, in this session, we'll see that traditional skills are not the only way to make art. When I started my journey as an artist, I couldn’t leave my love for technology behind. This talk is about how that love of programming, combined with machinery and 3D modeling, has helped me develop a distinct style of art that's a natural blend of both painting and engineering. In this session, I’ll talk about my inspirations and how my fascination with mathematics and art led me to build a tool for generating sketches for my artworks. I’ll show how I process data with OpenAI’s models, use Azure Cosmos DB to store it, run semantic searches on embeddings, and turn that processed data into mathematical visualizations using the p5.js library. You’ll hear the story of how I became an artist, seeing in detail how I bring shapes to life on canvas, the machines I use to do it, and how I built the system behind my generative sketches and paintings. This talk is for anyone who wants to be creative without leaving their love of software behind.
The Ethical Paradox of AI: Navigating the Dark Side of a Bright Future	In this talk, we explore the ethical side of artif... In this talk, we explore the ethical side of artificial intelligence (AI), focusing on biases found in large language models (LLMs). These technologies, while potent, tend to reflect societal prejudices. We will discuss who should be responsible for the outputs generated by these intelligent systems and the impact of such biases. We will also look at the impact of intelligent automation on employment, especially in creative fields like voice acting and content creation. As AI takes on roles traditionally held by humans, we face important questions about the future of these professions. We will share examples where adopting these advanced systems has posed challenges, showing the need for a careful balance between innovation and protecting human skills. This presentation is for everyone, whether you know a lot about technology or not. Our aim is to provoke thought about the ethical considerations of intelligent automation. We will talk about times when AI has not worked well and when its use has raised concerns. Our goal is to encourage a wise approach to AI development, ensuring it benefits everyone and respects our values.
AI-Infused Precision: Rethinking Project Estimations	In the multifaceted realm of IT project management... In the multifaceted realm of IT project management, mastering the art of accurate estimations is a cornerstone for success, yet notoriously challenging to achieve. The balance between realistic timelines and efficient resource allocation hinges on accurate project forecasts. But what makes pinpointing these estimations so elusive in IT’s dynamic landscape? We will delve into the art and complexities of IT project estimations, exploring strategies and data to improve accuracy and precision. This session is designed to enhance your estimation skills exploring potential assistance from AI and experimenting with Azure AI tools, including Azure AI Studio and Cognitive Search. Join us to acquire actionable insights for advancing your estimation strategies in IT projects and exploring the integration of AI technologies. This session is perfectly suited for professionals aiming to merge classic estimation methods with innovative AI advancements, refining accuracy and efficiency.
Harnessing the Power of Materialised Views in Cosmos DB	As we navigate the digital age the shift away from... As we navigate the digital age the shift away from the traditional database structures has transformed the way how we approach development. Technology has evolved to serve our needs more efficiently providing us with wider functionality and bigger computing abilities. In this session, Olena will walk you through the fundamental concepts of the globally distributed, multi-model database and its transformative impact on how we approach the challenges of modern business. We will explore key features such as scalability, flexibility, and the novel 'Materialized Views' feature that enhances query performance. Using real-life examples, we will investigate different scenarios of processing the data to serve variable use cases. Join Olena for this enlightening and demo-rich session where she will demonstrate the innovative features of Azure Cosmos DB in combination with other Azure services. We will explore the challenges and benefits of moving away from traditional database approaches, highlighting the power of data denormalization in web-scale systems.
Next-Gen Data Solutions: Applying AI in Azure Cosmos DB Data Modeling	Navigating the complexities of data modeling in Az... Navigating the complexities of data modeling in Azure Cosmos DB requires a nuanced understanding of partition key selection and data distribution. This session introduces a forward-thinking solution: leveraging artificial intelligence to optimize these aspects. We will begin by addressing the intricacies of data modeling in a schema-less, document-based database environment, focusing on the importance of effective partitioning strategies. Merging theory with practical application, we will explore how AI tools can significantly aid in making informed decisions about data structuring. By analyzing patterns and predicting outcomes, these intelligent systems become an invaluable ally in enhancing database performance and scalability. This presentation will feature real-life examples, illustrating how AI can resolve common challenges in data modeling and partition key selection within Azure Cosmos DB. In this session, you will gain insights into utilizing machine intelligence for smarter data modeling, ensuring that your Azure Cosmos DB usage is not only powerful but also strategically aligned with the needs of your applications.
AI-Driven Development: Reshaping the Future of Coding	In the swiftly evolving landscape of software deve... In the swiftly evolving landscape of software development, AI-assisted technologies are not just additional tools but are becoming central to the development process, transforming how developers work and the skills they need to succeed. This session delves into the profound impact of AI on software creation, offering developers strategies to harness AI's potential and stay ahead in their careers. Through a practical demonstration, we will show how AI tools not only increase productivity but also prompt a reevaluation of current technical skills and practices. Designed for forward-thinking developers, this presentation aims to equip you with the knowledge to excel in an AI-driven future. Attendees will gain a holistic understanding of how to adapt their skills and solutions to thrive in an AI-enhanced development landscape. Join us to future-proof your career and redefine what it means to be a developer in the age of artificial intelligence.

Randy Pagels

Session Title	Abstract
GitHub Copilot Mastery: ProTips Beyond the Basics	Buckle up! This session isn’t just about using Git... Buckle up! This session isn’t just about using GitHub Copilot—it’s about mastering it. I’m diving into the power moves, expert techniques, and real-world .NET C# examples that separate casual users from those who truly unlock Copilot’s full potential. Forget the basics. I’m showcasing fast-paced, high-impact demonstrations of advanced Copilot features, from multi-file editing to live, context-aware code transformations powered by Copilot Edits. Then I’ll shift gears into something brand new: Copilot’s Agent Mode—a powerful AI upgrade that doesn’t just assist, it acts. Think of it as your coding co-pilot that plans, executes, and iterates on tasks using natural language. Whether it’s suggesting terminal commands or automatically fixing issues across your app, this agentic AI helps you build and ship faster. Key Highlights: - Beyond Autocomplete: Experience how Copilot can refactor, optimize, and rewrite code with minimal input, maintaining coding consistency across large projects. - Precision Prompting: Learn expert-level prompt techniques to fine-tune Copilot’s output, from code refactoring to generating entire functions with context-aware efficiency. - Debugging at the Speed of AI: Watch Copilot identify and fix bugs in real time, leveraging AI-powered troubleshooting like a seasoned pro. - Automating the Future: Discover how Copilot integrates with DevOps pipelines, CI/CD automation, and even code reviews, supercharging your workflow. By the end of this session, you won’t just use Copilot—you’ll command it. Get ready to code smarter, faster, and like an absolute pro.
Building Apps on Autopilot: Meet Your AI Co-Engineer	Imagine an AI co-engineer that doesn’t just sugges... Imagine an AI co-engineer that doesn’t just suggest code, but plans, builds, tests, and improves your app with you. In this session, I’ll show you exactly that with GitHub Copilot Agent Mode — and then take it further. Building apps doesn’t stop at your IDE, so we’ll jump into GitHub.com to see how the GitHub Coding Agent tackles real-world backlog items directly from Issues — turning ideas into working features, writing tests, and creating pull requests. You’ll get a clear look at the architecture that powers these AI agents, hands-on techniques for writing prompts that keep them productive, and a live demo where I use agents to build a small game and complete additional features — all driven by AI. By the end, you’ll know how to put autonomous development to work across your entire workflow, from code to cloud.
Test Smarter, Not Harder: AI-Powered Playwright Automation at Scale with Azure	Manual testing slows delivery and limits confidenc... Manual testing slows delivery and limits confidence in release quality. In this session, you'll see how AI bridges the gap by turning manual test plans into automated Playwright scripts using GitHub Copilot’s Model Context Protocol (MCP). Combined with Microsoft’s Azure App Testing Service, we’ll show how to run these tests at scale across browsers and platforms. The result is faster feedback, fewer regressions, and more resilient applications. If your team is ready to reduce testing bottlenecks and embrace intelligent automation, this session is your next step.
The Power of DevOps in the Real World	In the realm of software development, the year is ... In the realm of software development, the year is 2025, where good DevOps practices have transformed from mere aspirations to absolute necessities. Continuous value delivery to our end users has become paramount, yet mastering this art is no small feat. Join this epic session on Real World DevOps, where we delve into the "why's" and "how's" of DevOps. Uncover its importance and our unwavering commitment to excellence. Witness a real-world marvel as we forge a complex, modern application from pure source code—no infrastructure exists—ultimately deploying it flawlessly to the cloud, including continuous testing. Explore web front ends, APIs, mobile apps, and beyond, harmonizing all modern technologies. But this is no mere showmanship. Prepare to immerse yourself in advanced DevOps techniques and best practices, prioritizing developer security, infrastructure as code, and fostering collaboration. Experience the transformative power of GitHub Actions as we push the boundaries of the DevOps workflow. Through cutting-edge tooling, we'll unveil a breathtaking demonstration, defying limits and propelling you into an unforgettable journey through the future of software development. Key Takeaways: • Understanding the importance of DevOps in modern software development. • Learning practical application of DevOps techniques through a real-world demonstration. • Exploring innovation and cutting-edge tooling in the DevOps workflow, with a focus on GitHub Actions.
Mastering GitHub: Your Path to Collaboration and Version Control	Join this session for your gateway to understandin... Join this session for your gateway to understanding GitHub's core features, fostering effective collaboration, and gaining version control expertise. Whether you're a beginner or a seasoned user, this session equips you with the skills needed to excel in software development. Join us for a comprehensive journey that will elevate your GitHub proficiency. Takeaways: - An in-depth understanding of GitHub, suitable for all skill levels. - Insights into effective collaboration, boosting team productivity and project success. - Proficiency in version control, enhancing project organization and development efficiency.
Mission Copilot Autofix: Securing the World’s Software with GitHub Advanced Security	In today’s fast-paced development cycles, develope... In today’s fast-paced development cycles, developers aren’t just writing code — they’re also making sure it’s safe. This session explores GitHub Advanced Security (GHAS) and how it empowers developer-first security by weaving automated security checks directly into your GitHub workflow. You’ll see how GitHub’s latest features — including autofix suggestions, secret scanning push protection, and CodeQL-powered code scanning — help teams catch and resolve vulnerabilities early, without disrupting velocity. We’ll also look at how new capabilities like Security Campaigns make it easy to create and track PRs across repositories so you can batch-resolve alerts at scale and monitor progress from a central dashboard. Whether you’re securing one repo or an entire enterprise, you’ll leave with proven GitHub-native strategies for “shifting security left” with confidence.
Ignite Your IoT Potential: Unleashing the Power of Azure for Real-Time Business Solutions	Join me for an exciting exploration of IoT and Azu... Join me for an exciting exploration of IoT and Azure’s transformative capabilities. Discover how to harness data from IoT devices to solve real business challenges—without lengthy development cycles or complex coding. In this session, we’ll guide you through creating a real-world IoT application from device data capture to advanced cloud processing and visualization using powerful Azure services like Azure Functions, Logic Apps, CosmosDB, and Azure Maps. Whether you’re a tech enthusiast or business leader, get ready to envision how IoT and Azure can revolutionize your approach to data-driven decision-making.
Unleashing Playwright: Mastering Scalable UI Testing for Continuous Application Excellence	Automated UI testing is more than just a safeguard... Automated UI testing is more than just a safeguard; it's a necessity for building reliable cloud applications. But how do you achieve seamless and continuous testing without disrupting development flow? This hands-on session takes you through the power of Playwright, the modern tool designed to scale your UI testing efforts with ease. From implementing end-to-end tests to embedding Playwright into your CI/CD pipeline, this session unlocks the steps to integrate continuous UI testing at scale, ensuring your applications remain resilient, functional, and ready for anything. Key Takeaway 1: Understand the value of automated UI testing in fortifying cloud applications. Key Takeaway 2: Explore Playwright’s capabilities for intuitive, scalable web UI testing. Key Takeaway 3: Learn the strategies for incorporating Playwright into CI/CD to enable resilient, continuous testing.
Beyond the Code: Mastering App Visibility with Azure Application Insights	Unlock the full potential of Azure Application Ins... Unlock the full potential of Azure Application Insights to take your app’s performance to new heights. From precise, real-time analytics to cutting-edge diagnostic capabilities, this session will show you how to stay ahead in app development. Discover how Application Insights can instantly detect issues, streamline diagnostics, and seamlessly fit into your DevOps toolkit, transforming the way you monitor and improve applications. Join us for a live, interactive demo that showcases how this powerful service changes the game for application visibility and performance.
Beyond the Basics: Master Coding with GitHub Copilot	Welcome aboard our journey into the future of codi... Welcome aboard our journey into the future of coding with GitHub Copilot, where we channel the Wright Brothers' spirit of innovation. Today, we soar beyond routine coding exercises, charting new territories in automated coding with Copilot as our guide. This session is a transformative leap, akin to the first flight at Kitty Hawk. With GitHub Copilot, you're not just coding; you're pioneering in the next evolution in software engineering. We're here to elevate your coding skills, empowering you to explore new horizons. As we conclude, remember that you are the Pilot ready to take-off with GitHub Copilot by your side. After the session you are ready to navigate uncharted coding landscapes and unlock your full potential.
Building Tomorrow’s Apps: AI-Driven Development with Azure, OpenAI, and GitHub	Step into the future of app development, where AI ... Step into the future of app development, where AI meets the cloud to transform your projects from concept to reality. This session will bring you up to speed with Azure OpenAI, SQL Server, and App Service, creating an intelligent Retrieval-Augmented Generation (RAG) application. Discover how GitHub’s Advanced Security and Copilot work in unison to boost your productivity while keeping your code secure. Through real-world examples and practical exercises with the LangChain framework, you'll learn the ins and outs of building scalable, AI-enhanced applications. Walk away with the knowledge and tools to redefine app development with cutting-edge AI integration. Key Takeaway 1: Learn to combine Azure OpenAI, SQL Server, and App Services to create a powerful AI-driven RAG application. Key Takeaway 2: Discover how GitHub Advanced Security and Copilot streamline workflows and safeguard your codebase. Key Takeaway 3: Gain practical skills with LangChain and VS Code to build and deploy scalable AI applications.
The Power of Playwright: Scaling UI Testing for Robust Application Delivery	Step up your application’s reliability with Playwr... Step up your application’s reliability with Playwright, the cutting-edge tool for scalable, automated UI testing. This session dives into practical strategies for integrating Playwright into your CI/CD pipeline, ensuring every deployment meets high standards for functionality and resilience. Learn how to set up end-to-end tests that operate seamlessly across different environments, enabling continuous testing that doesn’t disrupt your development process. Join me to see how Playwright can drive the stability and quality of your applications, setting a new standard for continuous excellence.

Patrick de Kruijf

Session Title	Abstract
Azure private networking for your (web) application	As a developer you primarily focus on developing y... As a developer you primarily focus on developing your application code, but it is also becoming important to think about the hosting part of your application. What service will be used within the Azure cloud and how will it communicate with other services using secure connections. During this sessions we will talk about how to enable private networking for your Azure services. Understand how your frontend can reach the backend or database services by using private networking. We will talk about virtual networks, private endpoints in combination with services that host your application (i.e. App Services). Join me to find out how you can further improve your Azure services to securely communicate to other services using private networking.
Govern your Azure environment with Azure Policy	When your Azure environment is relatively small, i... When your Azure environment is relatively small, it is straightforward to keep track of what resources you have running in Azure and make sure that your solution is secure, compliant, and cost-effective. When your cloud workload gets bigger, and you have a lot of subscriptions and multiple management groups, that is much harder to do. Luckily, Azure has a built-in feature called Azure Policy that can help you govern your Azure resources. But how do we implement policies, guarantee compliance and security, without decreasing developer agility? This workshop will teach you how to deploy policies using Infrastructure as Code. You will get to use the built-in policies and will create and deploy your own. We will look at all the different effects that a policy can have and which should be used when.
Securely expose your web application with Application Gateway	There are always Web applications hosted within an... There are always Web applications hosted within an Azure cloud environment, and usually these web application will need to be exposed to the internet. But how do you securly expose these services, this is where Application Gateway can help. During this workshop you will learn how to design, deploy and troubleshoot the Application Gateway and how to secure it with a Web Application Firewall (WAF).
Secure and Private DNS Resolution in Hybrid Cloud Environments	Resolving DNS queries in a hybrid cloud can be cha... Resolving DNS queries in a hybrid cloud can be challenging, especially resolving on-premise environments from the Azure cloud and vice versa. If you are looking for a secure and private way to resolve DNS queries between Azure and the on-premises infrastructure, Azure DNS Private Resolver is the solution you need. It allows you to resolve DNS queries for resources within your Azure Virtual Network using a private DNS zone without any exposure to the public internet. This means you can use it to facilitate communication between your on-premises infrastructure and Azure Virtual Networks. Join me for this talk to learn how you can leverage this powerful service to ensure seamless communication in your hybrid cloud environment.
Govern your Azure environment through Azure Policy	When your Azure environment is relatively small, i... When your Azure environment is relatively small, it is straightforward to keep track of what resources you have running in Azure and make sure that your solution is secure, compliant, and cost-effective. When your cloud workload gets bigger, and you have a lot of subscriptions and multiple management groups, that is much harder to do. Luckily, Azure has a built-in feature called Azure Policy that can help you govern your Azure resources. But how do we implement policies, guarantee compliance and security, without decreasing developer agility? This session will teach you how to deploy policies using Infrastructure as Code. You will see how to use the built-in policies and how to create your own. We will look at all the different effects that a policy can have and which should be used when. You will learn how to assign policies on different scopes and finally how to review the compliance status. All with the goal to enforce security, being compliant, monitoring that continuously, and keep costs at bay.
Say Goodbye to ClickOps! Embrace IaC for Game-Changing Automation	In the ever-evolving IT operations and software de... In the ever-evolving IT operations and software development landscape, adopting Infrastructure as Code (IaC) has become essential. This presentation dives into the transformative advantages that IaC brings in contrast to the traditional manual configuration, often dubbed 'clickops.' IaC fundamentally revolutionizes infrastructure management by ushering in automation through code, leading to heightened efficiency, consistency, scalability, and reproducibility. We will explore the advantages of IaC, highlighting its capacity to boost agility, minimize errors, facilitate collaboration, and expedite the deployment and management of complex infrastructures. The analysis underscores the clear superiority of IaC over manual configurations, firmly positioning it as the foremost method for managing infrastructure in today's dynamic, cloud-centric landscape.
Seamless Cloud Communication: Harnessing Azure DNS Private Resolver	Struggling with DNS queries in the hybrid cloud ju... Struggling with DNS queries in the hybrid cloud jungle? Azure vs. On-premises - Enter the dynamic fusion in the world of DNS resolutions. Discover the Game-Changer: Azure DNS Private Resolver. Your secure, private passage for seamless DNS query resolution between Azure and your on-premises fortress(es)! Ready to conquer your cloud challenges? Don't miss this talk! Join me in this demo-rich session and unlock the secret to frictionless communication in your hybrid cloud universe!
Identity Lifecycle Management with Microsoft Entra ID Access Packages	How convenient would it be to let users determine ... How convenient would it be to let users determine for themselves when and which permissions they need within Azure without compromising on control and security? How nice would it be to fully automate the onboarding and offboarding of users in numerous Entra ID groups? With Access Packages, Microsoft provides a powerful tool to solve these kinds of issues and automate Identity Lifecycle Management!
Understanding Azure Virtual WAN and lessons learned	The session provides a comprehensive overview of A... The session provides a comprehensive overview of Azure Virtual WAN, exploring its key features and functionalities. I will share some personal insights and lessons learned from practical experience, offering valuable takeaways for optimizing network architecture and enhancing connectivity within the Azure environment. You will gain a deeper understanding of Azure Virtual WAN's capabilities and practical considerations for successful implementation.
Azure VPN: Dynamic Address Pool Assignment by User Groups	Have you ever pondered the challenge of employing ... Have you ever pondered the challenge of employing a single VPN solution while applying distinct firewall rules for individual users or user groups? Azure VPN offers a solution with dynamic address pool assignment based on user group membership. This session unveils practical strategies, implementation best practices, and real-world use cases for optimizing connectivity, enhancing security, and ensuring compliance. Tailored for IT professionals and network administrators seeking to maximize the potential of Azure VPN services, it provides insights on efficiently managing firewall rules for diverse user groups, all while leveraging the dynamic capabilities of Azure VPN.
10 things a developer needs to know about Azure networking	When developing applications on Azure, you are qui... When developing applications on Azure, you are quickly confronted with a lot of different Azure networking services. Hosting an application securely is not as easy as one might think. In this session we will guide you through the most important Azure networking services for developers and we will explain how they can benefit you! We will answer questions like ‘how do I access my database or Key Vault privately and securely’ and ‘how do I securely expose my application to the entire world’. With lessons learned using Azure networking services, you won’t make the same mistakes as we did. Join us to find out how you can improve your software development by leveraging Azure networking services!
Why I love using Managed DevOps Pools, and why you should too	Have you ever had to deploy, configure, and mainta... Have you ever had to deploy, configure, and maintain your own DevOps agents for Azure DevOps or GitHub? If so, you probably found it a hassle to keep everything up-to-date and running. Let's examine Managed DevOps Pools and understand how they can help accelerate deployments. During this session, we will discuss what Managed DevOps Pools are, how they can be used, how to deploy and use them, some of the differences between traditional self-hosted agents, and the caveats and lessons learned. Join me and fall in love with Managed DevOps Pools too!
Azure private networking for your (web) application	As a developer you primarily focus on developing y... As a developer you primarily focus on developing your application code, but it is also becoming important to think about the hosting part of your application. What service will be used within the Azure cloud and how will it communicate with other services using secure connections. During this session we will talk about how to enable private networking for your Azure services. Understand how your frontend can reach the backend or database services by using private networking. We will talk about virtual networks, private endpoints in combination with services that host your application (i.e. App Services). Join me to find out how you can further improve your Azure services to securely communicate to other services using private networking.
Using Azure IPAM Pools for automate your Azure IP Addresses	Managing your IP addresses is a tedeious task, usu... Managing your IP addresses is a tedeious task, usually done inside a spreadsheet or markdown file, which require manual checks for available ranges and manual updates after you have used a network range. If you are like me and do not like manual actions join my session about Azure IPAM Pools. During this session I will show you how to use the IPAM Pools within the Azure Virtual Network Manager to automate the assignment of address spaces in both your Virtual Networks and the subnets.

Philip Wagner

Session Title	Abstract
Hybrid Project Scoping - From vision to reality	This session targets agile teams, project managers... This session targets agile teams, project managers, and product owners, based on real-world use cases of an end-to-end product, from vehicle sensor technology through cloud infrastructure to an end-user app. It highlights a hybrid project approach, focusing on product management and business planning. It will demonstrate how a product vision can be transformed into a tangible and economical, hybrid development approach for complex IoT products. This session also aims to provide valuable insight into the compatibility of contrasting aspects of agile development and classic project management in a hybrid environment.
Hybrid Project Scoping - Von der Vision zur Realität	Die Session richtet sich an agile Teams, Projektma... Die Session richtet sich an agile Teams, Projektmanager und Product Owner und basiert auf realen Anwendungsfällen eines End-to-End-Produkts, beginnend bei der Fahrzeugsensorik, über eine Cloud-Infrastruktur hin zu einer Endnutzer-App und beleuchtet einen hybriden Projektansatz, mit den zentralen Elementen Produktmanagement und Business Plan. Es wird beleuchtet, wie aus einer Produktvision ein greifbarer und wirtschaftlicher, hybrider Entwicklungsansatz für komplexe IoT Produkte entsteht. Diese Sitzung zielt darauf ab, die Teilnehmer mit dem Wissen auszustatten, um die Lücke zwischen ambitionierten Visionen und ihrer Umsetzung in der realen Welt zu überbrücken und wertvolle Einblicke in die Vereinbarkeit der kontrastierenden Aspekte der agilen Entwicklung und des klassischen Projektmanagements in einer hybriden Umgebung zu bieten.
Navigating Product Ownership in complex projects without being a Tech Guru	Being a Product Owner in tech loaded projects is a... Being a Product Owner in tech loaded projects is a bit like jumping into the deep end without floaties - especially when your expertise isn't in the nuts and bolts of IoT or cloud platforms. In this session, I’ll share what it’s really like to wrangle a backlog for complex, technical products without being a technical guru. We’ll dig into practical aspects of backlog management, writing user stories that actually resonate, and figuring out what “definition of ready” really means for such products. Through real-life examples - like juggling IoT components between UI and cloud backend of construction machinery or high demanding real-time monitoring for medical freezers - you’ll learn how to bridge technology gaps without being an expert coder. We’ll also dive into ways your Dev Team can support you to boost quality and product outcomes. Expect a blend of humor and hard-won wisdom as we uncover what it really takes to keep your product features and roadmap on track, even when the tech seems a bit daunting.
Wie man Product Ownership in komplexen Projekten übernimmt - ohne ein Tech Guru zu sein	Ein Product Owner in einem techniklastigen Umfeld ... Ein Product Owner in einem techniklastigen Umfeld zu sein, ist ein oft bisschen so, als würde man ohne Schwimmflügel ins kalte Wasser springen - vor allem, wenn man keinen spezialisierten technischen Hintergrund hat In dieser Session erzähle ich, wie es wirklich ist, ein Backlog für komplexe, hybride technische Produkte zu erstellen, ohne ein technischer Guru zu sein. Wir werden uns mit den praktischen Aspekten des Backlog Management befassen, mit dem Schreiben von User Stories, die wirklich ankommen, und mit der Frage, was die „Definition of Ready“ für solche Produkte wirklich bedeutet. Anhand von Beispielen aus der Praxis - wie dem Jonglieren mit IoT-Komponenten zwischen UI und Cloud-Backend von Baumaschinen oder der anspruchsvollen Echtzeit-Überwachung von medizinischen Gefrierschränken - lernt Ihr, wie Sie technologische Lücken schließen können, ohne ein Experte im Programmieren zu sein. Wir werden auch darauf eingehen, wie Ihr von der Erfahrung eures Development Team profitieren könnt, auch um die Qualität und die Produktergebnisse zu verbessern. Freut euch auf eine Mischung aus Humor und hart erkämpfter Weisheit, wenn wir aufdecken, was wirklich nötig ist, um die Produkt-Features und Roadmap auf Kurs zu halten, selbst wenn die Technik ein wenig überfordernd wirkt.
Effektiver als Product Owner: Mit KI-Agents deine digitale Produktentwicklung optimieren	Die digitale Produktentwicklung wird immer komplex... Die digitale Produktentwicklung wird immer komplexer und anspruchsvoller. Mit KI-Agents kannst du deine Arbeitsweise als Product Owner spürbar effizienter gestalten und die Ergebnisse deines Teams nachhaltig verbessern. In dieser praxisnahen Session lernst du, wie du KI-Agents gezielt einsetzt, um wiederkehrende Aufgaben zu automatisieren, Daten strukturiert auszuwerten und dich bei strategischen Entscheidungen unterstützen zu lassen. Du erfährst, wie du solche Agents unkompliziert aufbaust, an deine Bedürfnisse anpasst und in deinen Arbeitsalltag integrierst. Besonderes Augenmerk liegt dabei auf der Auswahl geeigneter Tools, die nicht nur leicht zugänglich, sondern auch sicher im Umgang mit sensiblen Unternehmensdaten sind. Egal, ob du Product Owner, Produktmanager oder Mitglied eines agilen Teams bist – diese Session gibt dir konkrete Ansätze und hilfreiche Tools an die Hand, um KI-Agents direkt in deine Arbeitsprozesse einzubinden und so die Produktentwicklung zu boosten.
More Effective as a Product Owner: Optimize Your Digital Product Development with AI Agents	Digital product development is becoming more compl... Digital product development is becoming more complex and more demanding. With AI agents, you can make your work as a Product Owner significantly more efficient and sustainably improve your team's results. In this practical session, you will learn how to use AI agents to automate recurring tasks, evaluate data structured and support strategic decisions. You will discover how to easily build such agents, adapt them to your needs, and integrate them into your daily work. Special attention is given to selecting suitable tools that are not only easily accessible but also secure in handling sensitive company data. Whether you are a Product Owner, Product Manager, or member of an agile team – this session provides you with concrete approaches and helpful tools to integrate AI agents directly into your work processes and to boost product development.

Pieter Nijs

Session Title	Abstract
Down the rabbit hole: non-nullable reference types	Imagine a wonderland where reference types aren't ... Imagine a wonderland where reference types aren't implicitly 'nullable'... Somewhere where you explicitly need to define them as nullable, just like you do with value types. Imagine no unnecessary null-checks, while getting warnings in your IDE where you should check for nulls. No more NullReferenceExceptions! Since C# 8 you can opt-in for this utopian experience! Let's go down the rabbit hole of the non-nullable reference types and discover all of its goodness. It's more than just adding a '?' here or a '!' there.
From Zero to AI Hero: Transform Your Data into Generative AI with Azure and C#	Want to build a Generative AI application without ... Want to build a Generative AI application without being a data scientist or AI expert? In this talk, Pieter shares the knowledge and insights he gained while setting up an AI solution for a customer using Azure's OpenAI Service, Azure AI Search, and C#. This talk will demonstrate how anyone with a basic understanding of C# can create a RAG (Retrieval Augmented Generation) solution that leverages their own data. By the end of this talk, you should have a practical understanding of some of Azure's AI capabilities, RAG and the confidence to create your own Generative AI application infused with the knowledge from your own data. Whether you're an experienced developer looking to expand your AI skill set, or a curious tech enthusiast seeking to understand the potential of AI, this talk will give you some insights and tools necessary to get a grasp of what Generative AI can do.
Building a Copilot for Your Own Application with Semantic Kernel	Ever wondered how intelligent 'copilot' features a... Ever wondered how intelligent 'copilot' features are being integrated into applications? This talk will guide you through leveraging Generative AI (GPT4) and Semantic Kernel to transform your applications. Whether you're aiming to improve user experience, boost efficiency, or innovate in your field, you'll get to see how to create AI assistants that integrate seamlessly with your software. We'll be focussing on a demo where we add a copilot to an existing application, showcasing the step-by-step process and the immediate impact it has. Get ready to explore the seamless fusion of AI with C# through Semantic Kernel, and leave equipped to create your own intelligent application enhancements!
Building Intelligent .NET MAUI Apps with ML.NET	Machine Learning is no longer exclusively reserved... Machine Learning is no longer exclusively reserved for Python or some of the more ‘hipster’ languages. Let's see what we can do while sticking to C#! In this session, we’ll explore how to train Regression and Classification models using C# and ML.NET, and how to run those models in a .NET MAUI app, enabling offline AI analysis directly on a mobile device. We’ll also look at how to create an image classification model using Azure Custom Vision, and use it offline in our .NET MAUI app with the power of ONNX. After this session, you’ll have a basic understanding of what Regression and Classification problems are, how to train and evaluate models with ML.NET and Azure Custom Vision and how to use these models locally in a .NET MAUI app.
Faster .NET MAUI Development Through Efficient Testing	As .NET MAUI developers, we know how frustrating i... As .NET MAUI developers, we know how frustrating it can be to deal with slow iteration cycles. Constantly deploying to devices or simulators for every little change eats up time and drags down productivity. In this session, we’ll look at how designing your app with testability in mind can break this cycle. By separating your business logic from your UI code and adopting smarter testing practices, you can validate most of your app’s functionality directly in the IDE. In other words: no endless deployments or manual clicks required. Through real-world examples and practical tips, we’ll see how better testing gives faster iterations, better code, and happier developers.
Adding AI to your applications with Azure AI Foundry	So, you’ve heard about this thing called AI, and y... So, you’ve heard about this thing called AI, and you’re curious about how to add it to your applications. But where do you start? Do you need to train your own models? Do you need to learn Python? How do you deploy this and make sure it scales? That’s where Azure AI Foundry comes in! In this session, we’ll have a look at how you can bring AI into your apps using Azure AI Foundry’s Speech, Language, Translation, and Vision capabilities. Whether you want to add real-time transcription, automate document processing, enhance interactions with natural language understanding, or build intelligent image recognition features, Azure AI Foundry has got you covered! And best of all? You don't need a PhD in machine learning! We’ll walk through some examples, show how to customize and deploy AI models, and how to interact with them. No fluff, just practical guidance and live demos.
Building Secure .NET MAUI Apps and APIs with Entra ID and MSAL	Let’s face it: authentication and authorization ca... Let’s face it: authentication and authorization can feel like a headache. But with the right tools and approach, it doesn’t have to be! Using Microsoft Entra ID and the Microsoft Authentication Library (MSAL), you can easily add secure and flexible user authentication and authorization to your .NET MAUI apps and APIs. In this session, Pieter will walk you through setting up Entra ID, integrating it into your .NET MAUI app, and leveraging MSAL to manage user authentication and enforce user permissions. You’ll also learn how to restrict API access to authorized users with confidence. With practical demos, you’ll see how to set up user flows, handle secure token-based authentication, and lock down API endpoints. By the end, you’ll have the tools and knowledge to implement a rock-solid authentication strategy for your apps.

Stefan Rapp

Session Title	Abstract
Unlocking Azure Governance - Strategies for Secure & Compliant Cloud Management	When it is possible to provision or delete an enti... When it is possible to provision or delete an entire application or even virtual datacenter in the cloud with a single line of code inadvertently, we must rethink the traditional way of managing resources. Therefore, new paradigms regarding cloud technologies are necessary to provision, adopt, manage, and govern cloud resources in the right and secure way. That is the moment when governance comes into place. For an organization it is essential to provide compliance rules as guardrails on the organizations’ tenant to secure all cloud workloads, avoid misconfiguration and being compliant. In this session Stefan will explain on an Azure real-life scenario, which capabilities must be considered (also from a developer perspective) regarding cloud workloads to keep the cloud resources compliant and secure. We will go more into detail in the following Azure management areas: - How to structure the hierarchy. - Why naming conventions are essential. - Force configurations using policies. - How to implement role-based access control. - Track costs and manage budget alerts. - Strategies of tagging and locking. - Deployment of Azure Governance using HashiCorp Terraform The session will cover frameworks, tools and best practices that can be used to bring governance to the organizations’ Azure tenant the fast and easy way. Moreover, Stefan will show how to deploy governance resources using the IaC (“Infrastructure as Code”) approach.
Better Together! – Cloud Automation with Terraform & Ansible	In the rapidly evolving cloud landscape of modern ... In the rapidly evolving cloud landscape of modern IT infrastructure management, the synergy between HashiCorp Terraform & Ansible has emerged as a powerful combination, enabling organizations to achieve a high level of automation, scalability, and efficiency. The audience will deep-dive into the world of "Infrastructure as Code (IaC)" with both tools. Furthermore, it will be demonstrated how Terraform & Ansible, when used in tandem, form a dynamic duo that addresses the challenges of provisioning, configuration, management as well as a full “end-to-end” automation. The session will start with a comprehensive introduction to IaC, explaining the importance and goals in the context of cloud application workloads. Attendees will gain insights into the core principles of IaC and its important role in infrastructure automation, consistency, and version control. Moving forward, the focus will shift to Terraform, exploring its declarative approach to infrastructure provisioning using HCL. Attendees will be guided through real-world examples, showcasing how Terraform simplifies the deployment and scaling of infrastructure across various cloud providers and environments. The second part of the talk will aim at Ansible, emphasizing its strengths in configuration management and orchestration. Attendees will learn how Ansible streamlines application deployment, configuration updates, and system management, making complex tasks manageable through simple, human-readable playbooks. The main part of the session will explore the integration points between Terraform & Ansible, explaining how these tools complement each other seamlessly. Practical demonstrations will showcase the integration workflows, emphasizing the collaborative benefits of using Terraform for infrastructure provisioning and Ansible for configuration management. By the end of the session, the audience will get an idea of how to implement the IaC using both tools including all needed recommendations, real-world use cases, best practices, examples, pitfalls to avoid and practical tips to make the cloud journey successful with fully automated cloud infrastructures.
Demystify Azure DNS Architecture	Besides the right cloud strategy, many infrastruct... Besides the right cloud strategy, many infrastructure decisions must be made by an organization to lead the defined cloud journey to success. Before starting to shift on-premises workloads to the cloud, in every phase of this journey, enterprises are faced with difficult and complex architectural decisions, like the right setup of name resolution for cloud and/or hybrid resources. Regarding the domain name system (DNS), choosing an appropriate DNS architecture for hybrid or cloud-only infrastructure approaches is one of the most critical design questions and must be planned precisely, according to the given requirements. In this session Stefan will explain what needs to be considered by the IT infrastructure department, to implement a proper DNS architecture and support all relevant cloud workload scenarios. In practical examples regarding DNS services on Microsoft Azure, he will explain the following details: • Default, public & private DNS services on Azure. • Architectural design criteria for name resolution • What are the “Dos and Don’ts”? • Benefits, capabilities, and features • Implementation example using “Infrastructure as Code” (IaC) The audience will get an idea which DNS methods should be used on Azure to fulfill certain scenarios with all relevant recommendations, best practices, practical tips, and tools to support the most common name resolution architectures and bring cloud workload to Azure the successful and easy way.
“Stay safe!” – Mastering Network Security on Azure	Besides the right cloud strategy, a lot of infrast... Besides the right cloud strategy, a lot of infrastructure decisions must be made by an organization to lead the cloud journey to success. Before start moving workloads or modernizing applications on Azure, enterprises are faced with difficult and complex architectural decisions, like how to protect cloud applications from network-based cyberattacks using the right Azure Network Security services to meet the compliance rules. In this session Stefan will focus on Azure Security topics from the network perspective and describe how Azure Network services, capabilities and mechanisms can be used to build highly secured cloud environments on Azure, focused on the following main areas: • Architectural network security disciplines • Conceptual network design & approaches • Azure Virtual Network as foundation layer • Network segmentation/isolation (zone models) • Traffic management and control on cloud networks • Security for external interfaces and endpoints The audience will get the knowledge of how to create a secure platform and use Azure services the right way to build secure applications as well as to avoid potential vulnerabilities in the Azure “Landing Zone”. Based on the strict security and compliance requirements of organizations, Stefan will share all relevant recommendations, best practices, practical experience, and potential pitfalls to provision and mange cloud workload in Azure the secure and smart way.
Design & Deploy Azure Landing Zone infrastructure best	One of the most important steps before migrating o... One of the most important steps before migrating or modernizing the first application workload to a cloud platform like Azure is to design, provision and manage the Azure Landing Zones according to the organization’s requirements. The design of the core architecture landscape as well as the fulfillment of related design principles build the foundation layer for all future workloads on Azure. Additionally, the core environment must be scalable, reliable, secure, and flexible in order to be able to meet the complex requirements of different cloud applications. But which subject areas, disciplines and cloud services must be considered to provide a stable place for future application workloads? Moreover, it is important to understand the most common design patterns, concepts, blueprints, and best practices to design and provision a robust Azure core infrastructure for your organization, covering the following main topics: • Necessity of governance in the Azure Tenant • Benefits from the Microsoft Cloud Adoption Framework (CAF) • Design of Azure Core architectures • "Infrastructure as Code" (IaC) vs. "Click-Click-Cloud" • Purpose of using a central IaC module library In this session, participants will get an understanding of the key decisions and aspects that need to be designed and implemented for hosting future application cloud workloads the right way. Additionally, the content is complemented by real-life examples, practical experiences and architectural pitfalls.
Mastering Cloud Automation – The Power of IaC!	As technology evolves, so do the approaches, deplo... As technology evolves, so do the approaches, deployments and tools for managing workloads and resources in the cloud. Many enterprises still rely on traditional methods, such as cloud GUIs, for cloud resource provisioning and management. However, browser-based cloud portals can bring significant challenges for IT teams, seeking to leverage the benefits of cloud automation. Over the past years, Infrastructure as Code (IaC) has dramatically transformed the design, creation, and rollout of cloud environments. The era of manual IT resource management is over, especially with the adoption of cloud-native services for modern applications. The key to successfully integrating IaC into an IT organization lies in its professional setup of cloud automation aspects. This involves creating reusable modules to enhance speed and prevent configuration drifts (standardization). In this session, Stefan will illustrate the best-practice approaches of cloud automation and modularization for a successful cloud transition of an enterprise organization. Moreover, he will provide practical examples using HashiCorp Terraform and Microsoft Azure, covering the following topics: • Provision cloud resources faster and more reliable. • Terraform modules as real game changer. • Structure Terraform code repositories best. • Environment handling using Terraform workspaces. • Impact on the way of working and the IT organization. Attendees will gain insights on implementing the IaC approach within their organizations, including all recommendations, best practices, practical tips, and examples to ensure a successful cloud journey of your applications.
Reusability in IaC – The art of module development in Terraform	In the ever-evolving approach of Infrastructure as... In the ever-evolving approach of Infrastructure as Code (IaC), Terraform stands out as a the “top dog” tool for managing and provisioning cloud resources efficiently. A key aspect of leveraging Terraform effectively is the knowledge of module development, which brings reusability, scalability, and maintainability. This talk dives into the topic of Terraform modules, exploring why they are essential for modern cloud infrastructure. Attendees will gain a comprehensive understanding of what modules are, how they encapsulate infrastructure configurations, and why using them is critical for reducing redundancy and enhancing consistency. The journey from understanding a Terraform provider to using a fully functional module will be explained in detail, highlighting best practices and common patterns for logical groupings. The session will also cover the essentials of structuring and versioning modules correctly, ensuring that they are robust, easy to manage, and align with organizational standards. Furthermore, strategies for publishing modules within an organization and to the public will be illustrated, emphasizing how to maximize their utility and adoption. Finally, practical tips on managing the lifecycle of modules will be shared, offering attendees straightforward methods to handle updates, deprecations, and evolving infrastructure needs. Whether you are a Terraform novice or a seasoned infrastructure developer, this talk will equip you with the skills to master module development, making your IaC practices more efficient and lead cloud journeys to success.
“Stay safe!” – Netzwerksicherheit auf Azure	Neben der richtigen Cloud-Strategie als Grundlage,... Neben der richtigen Cloud-Strategie als Grundlage, müssen in Unternehmen viele Infrastrukturentscheidungen getroffen werden, um den Gang in die Cloud sicher und erfolgreich zu gestalten. Bevor Workloads nach Azure verschoben oder Anwendungen modernisiert werden können, steht die IT von Enterprise-Umgebungen oft vor schwierigen und komplexen Architekt-Entscheidungen, wie sie Cloud-Anwendungen vor netzwerkbasierten Cyberangriffen schützen kann, indem sie die richtigen Azure Network Security Services verwendet. Dieser Vortrag konzentriert sich auf Azure Security Themen aus Netzwerkperspektive und beschreibt, wie Azure Network Services verwendet werden können/sollen, um hochsichere Cloud-Umgebungen in Azure aufzubauen. Dies beinhaltet die Schwerpunkte auf den folgenden Hauptbereichen: • Network Security Architekturen • Konzeptionelles Netzwerkdesign • Azure Virtual Network als Grundlage • Netzwerksegmentierung/Isolierung (Zonenmodelle) • Traffic Management & Control in Cloud-Netzwerken • Sicherheit von externen Schnittstellen und Endpunkte Die Zuhörer erhalten Kenntnisse darüber, wie sie eine sichere Netzwerkarchitekturen erstellen und Azure Services auf die richtige Art und Weise einsetzen, um sichere Applikationen in der Cloud bereitstellen zu können sowie potenzielle Schwachstellen in ihrer Azure Landing Zone zu vermeiden. Basierend auf den strengen Sicherheits- und Compliance-Anforderungen von Unternehmen werden alle relevanten Empfehlungen, bewährten Methoden, praktischen Erfahrungen und möglichen Fallstricke aufgezeigt, um Cloud-Workloads in Azure sicher und zielgerichtet bereitstellen zu können.
Aufbau von skalierbaren und flexiblen Azure Landing Zones - Eine Erfolgsgeschichte!	Eine der wichtigsten Grundlagen, um Applikationen ... Eine der wichtigsten Grundlagen, um Applikationen und Workloads zukünftig auf eine Cloud Plattform wie Azure migrieren/modernisieren und diese auch sauber betreiben zu können, ist seine Infrastruktur gemäß den Anforderungen aufzubauen und diese auch zu verwalten. Cloud Infrastrukturen in Azure müssen skalierbar, zuverlässig, sicher und vor allem flexibel aufgebaut werden, um die stetig ändernden Anforderungen von Cloud Applikationen abdecken zu können. Doch welche Themengebiete und Disziplinen müssen zwingend betrachtet werden, bevor die erste Applikation nach Azure gelangen kann? Deshalb ist es wichtig einen Blick über die wichtigsten Vorgehensweisen, Konzepte, Terminologien und Best-Practices zu werfen, um den strukturierten Aufbau einer Azure Landing Zone Infrastruktur im Enterprise-Umfeld zu gewährleisten. Hierzu zählen die folgen Hauptthemengebiete: • Governance im Azure Tenant als Grundlage • Nutzung des Microsoft Cloud Adoption Frameworks (CAF) • Aufbau von Azure Core Architekturen • „Infrastructure as Code“ (IaC), statt „Click-Click-Cloud“ • Sinn des Einsatzes einer zentrale IaC-Module-Library In dieser Session bekommen die Teilnehmer ein Verständnis für die Eckpunkte, die vor der Bereitstellung von Cloud-Applikationen in Bezug auf die Azure Core Infrastruktur zu spezifizieren und umzusetzen sind. Die vermittelten Inhalte werden anhand von Praxisbeispielen untermauert und auf mögliche Fallstricke hingewiesen.
Securing Cloud Workloads with Azure Firewall	As organizations increasingly migrate their worklo... As organizations increasingly migrate their workloads to the cloud, ensuring robust security has become more critical than ever. Azure environments face sophisticated threats, and protecting sensitive data and applications is indispensable. This session on Azure Firewall will provide essential insights into Microsoft’s comprehensive network security solution, designed to safeguard Azure resources against modern cyber threats. We will cover Azure Firewall’s architecture, deployment options, traffic control, and integration with other Azure services. The session will emphasize advanced threat protection, best practices for secure network design, and routing concepts to optimize traffic flow. Moreover, the speaker also explains managing firewall policies and using Infrastructure as Code (IaC) tools like Terraform for efficient deployment and management. We will focus on monitoring, analytics, and leveraging Azure Monitor for security insights. Real-life scenarios, common pitfalls, and best practices will be shared to give attendees a hands-on understanding of how Azure Firewall can enhance cloud security, ensuring secure, efficient, and resilient networks.
Optimierung der Cloud Security: Umfassende Einblicke in die Azure Firewall als PaaS	Da Organisationen zunehmend ihre Workloads in die ... Da Organisationen zunehmend ihre Workloads in die Cloud verlagern, ist die Gewährleistung der Security wichtiger denn je. Azure-Umgebungen sind komplexen Bedrohungen ausgesetzt, und der Schutz sensibler Daten und Anwendungen ist unverzichtbar. Diese Session über die Azure Firewall bietet wichtige Einblicke in die umfassende Netzwerksicherheitslösung von Microsoft. Der Cloud Service wurde entwickelt, um Azure-Ressourcen im Virtual Network vor modernen Cyberbedrohungen entsprechend zu schützen. Wir werden die Architektur der Azure Firewall sowie Deployment-Möglichkeiten, Traffic Control und die Integration mit weiteren Azure Services behandeln. Der Vortrag wird auf die Best Practices für sicheres Netzdesign und Routing-Konzepte zur Optimierung des Datenverkehrs eingehen. Darüber hinaus wird auch erklärt, wie Firewall Policies die Konfiguration massiv vereinfach und Tools wie Terraform für die effiziente Bereitstellung und Verwaltung mittels Infrastructure as Code (IaC) einsetzt werden können. Es werden Einsatzszenarien, häufige Fallstricke und Best Practices geteilt, um den Teilnehmern ein praktisches Verständnis dafür zu vermitteln, wie die Azure Firewall die Cloud Security verbessern kann, um sichere, effiziente und widerstandsfähige Netzwerke in Azure aufzubauen.
Cloud-Automatisierung in der Praxis - IaC als echter Game Changer!	Da sich Technologien stetig weiterentwickeln, ände... Da sich Technologien stetig weiterentwickeln, ändern sich auch die Ansätze, Deployments sowie die Tools zur Verwaltung von Workloads und Ressourcen in der Cloud. Viele Unternehmen verlassen sich immer noch auf traditionelle Methoden, wie graphische Oberflächen der Cloud Provider, zur Erstellung und Verwaltung von Ressourcen. Browserbasierte Cloud-Portale bringen jedoch erhebliche Herausforderungen für IT-Teams mit sich, die eigentlich die Vorteile der Cloud-Automatisierung im operativen Tagesgeschäft für sich nutzen sollten. In den letzten Jahren hat „Infrastructure as Code“ (IaC) den Aufbau, die Verwaltung sowie den Rollout von Cloud-Umgebungen drastisch verändert. Die Ära des manuellen IT-Ressourcenmanagements gehört der Vergangenheit an, insbesondere mit der Nutzung von Cloud-nativen Diensten für moderne Applikationen. Der Schlüssel einer erfolgreichen Integration von IaC in eine IT-Organisation, liegt in der professionellen Implementierung von Cloud-Automatisierungsaspekten. Dazu gehört die Erstellung wiederverwendbarer Module, um die Geschwindigkeit zu erhöhen und etwaige „Configuration Drifts“ zu vermeiden (Standardisierung). In dieser Session wird der Referent bewährte Ansätze zur Cloud-Automatisierung und Modularisierung veranschaulichen, um den erfolgreichen Übergang eines Unternehmens in die Cloud zu unterstützen. Darüber hinaus werden praktische Beispiele unter Verwendung von HashiCorp Terraform und Microsoft Azure präsentiert und dabei folgende Themen als Schwerpunkte behandelt: • Schnelle und zuverlässige Provisionierung von Cloud-Ressourcen. • Terraform-Module zur Wiederverwendbarkeit. • Optimale Strukturierung von Code Repos für Terraform. • Abbildung mit Stages durch die Verwendung von Terraform Workspaces. • Auswirkungen auf Arbeitsweisen und die IT-Organisation. Die Teilnehmer erhalten wertvolle Einblicke in die Implementierung des IaC-Ansatzes in ihren Organisationen, einschließlich aller Empfehlungen, Best Practices, praktischen Tipps und Beispiele, um eine erfolgreiche „Cloud Journey“ ihrer Applikationen im Zuge der Cloud-Automatisierung sicherzustellen.
Save your money $$$ - Effective Cost Management on Azure	As organizations increasingly adopt Azure cloud se... As organizations increasingly adopt Azure cloud services, managing costs effectively becomes crucial to maximizing the value of cloud investments. Without proper cost control, expenses can quickly spiral out of control, leading to budget overruns and reduced ROI for enterprises. In this session, we will explore best practices and strategies for optimizing costs in Microsoft Azure - also from an architecture perspective. We will start by understanding the key cost drivers in Azure and how to gain visibility into cloud spendings. Next, we will dive into cost-saving techniques, including rightsizing resources, meeting the defined design criteria, optimizing storage and networking costs, budget alerts, and implementing automation for costs. Additionally, we will discuss Azure Governance hierarchies as relevant baseline as well as cost allocation strategies to ensure accountability across teams within an enterprise. By the end of this session, attendees will have actionable insights to proactively manage and optimize their Azure spendings. Whether you are an IT decision-maker, cloud architect, or FinOps practitioner, this session will equip you with the right tools, strategies and best practices in combination with real-life scenarios to enhance cost efficiency while maintaining performance and scalability of your Azure workloads.
Kohle sparen $$$ - Effektive Kostenverwaltung auf Azure	Unternehmen nutzen Cloud-Services in immer größer ... Unternehmen nutzen Cloud-Services in immer größer werdenden Umfang – auch auf Microsoft Azure. Aus diesem Grund wird ein effektives Kostenmanagement immer wichtiger, um den Einsatz von Cloud-Investitionen zu maximieren. Ohne angemessene Kostenkontrolle können die Ausgaben schnell aus dem Ruder laufen, was zu Budgetüberschreitungen und einem geringeren „Return on Investment“ (ROI) für Unternehmen führt. In diesem Vortrag werden wir Best Practices und Strategien zur Kostenoptimierung in Microsoft Azure aufzeigen – auch aus Sicht konkreter architekturtechnischer Design-Entscheidungen. Wir beginnen mit einem Verständnis der wichtigsten „Kostentreiber“ in Azure und wie man Transparenz über die Cloud-Ausgaben schafft. Anschließend tauchen wir in verschiedene Techniken zur Kosteneinsparung ein, darunter das „Right-Sizing“ von Ressourcen, die Einhaltung von Designkriterien, die Optimierung von Storage- und Netzwerkkosten, Budgetwarnungen sowie die Automatisierung zur Kostenkontrolle. Darüber hinaus werden wir konkrete Ansätze der Azure Hierarchien als wichtige Basis sowie Strategien zur Kostenverteilung besprechen, um die Kostenverantwortlichkeit innerhalb eines Unternehmens sauber abbilden zu können. Am Ende dieses Vortrags haben die Teilnehmenden praxisnahe Einblicke, um ihre Ausgaben auf Azure proaktiv zu verwalten und zu optimieren. Egal, ob IT-Entscheidungsträger, Cloud-Architekt oder FinOps-Spezialist – dieser Vortrag vermittelt die richtigen Tools, Strategien und Best Practices angereichert mit realen Szenarien aus der Praxis, um die Kosteneffizienz zu steigern, während gleichzeitig die Performance und Skalierbarkeit von den Application-Workloads erhalten bleiben.

René van Osnabrugge

Session Title	Abstract
The Fin-tastic Way to Boost Your Cloud ROI: An Introduction to FinOps on Azure	Are you tired of overspending on cloud costs? Want... Are you tired of overspending on cloud costs? Want to optimize your Azure spending and boost your ROI? Look no further than FinOps! In this session, we'll dive into the basics of FinOps and why it's becoming increasingly important for organizations of all sizes. We'll also explore the specific tools and features available on the Azure platform that can help you implement FinOps successfully, including cost management, budgeting, and optimization tools. Whether you're new to FinOps or have experience in the field, this session will provide valuable insights and practical tips for maximizing your cloud savings. So join me in this session and learn how to become a FinOps pro on Azure!
Monolith Makeover: Creating a business case to revitalize an old application	Are you tired of dealing with a legacy monolith th... Are you tired of dealing with a legacy monolith that's slowing you down? Are you considering a migration to a more modern system but not sure where to start? Look no further! In this session, we'll explore the key considerations and challenges involved in migrating a 20 year old monolith, including technical and business case perspectives. I'll also provide practical tips and best practices for success, including how to approach the migration process, how to minimize disruption, and how to ensure a smooth transition. Whether you're just starting to think about migration or are well into the process, this session will provide valuable insights and actionable guidance. So join me and learn how to modernize your system and take your organization to the next level!
Mind Matters: The Importance of Cultivating a DevOps Mindset	While hard skills like continuous delivery and aut... While hard skills like continuous delivery and automated testing are important for practicing DevOps successfully, they are not the only factors that determine success. In many cases, people's mindset and willingness to embrace new practices and tools can also play a critical role. Fear of failure, fear of speaking up, motivation, and drive are all factors that can impact a team's ability to practice DevOps effectively. In this session, we'll explore the concept of a DevOps mindset and how to cultivate it within yourself and your team. We'll discuss how to recognize fears and counter-productive behavior, and provide tips and insights on how to foster a culture of courage, teamwork, DevOps leadership, and continuous improvement. Join me and learn how to cultivate a DevOps mindset that drives success!
Embrace chaos to achieve stability	What do you do in case of a cyber attack? And a na... What do you do in case of a cyber attack? And a natural disaster? The absence of a person? Or, more concrete. What happens if the network is down, your data center is not available, your VM's cannot spin up, you get the DDOSed or your website becomes a success overnight? Usually we cater for a number of scenarios, but do we actually test them and can we actually find out what happens when doomsday shows up? Chaos engineering is a practice that can help you to prepare for these scenario and be ready when you need to be. In this session I will talk you through the principles of chaos engineering and explain why this could benefits you and your company. With some demos I can also show you some tools that can help you to overcome this crisis.
Culture Club: Building a Strong Engineering Culture from the Ground Up	Every company is essentially a software company in... Every company is essentially a software company in today's digital world. However, building and delivering great software is not enough to ensure success. To truly thrive in the world of software, companies must embrace an engineering culture that goes beyond technical solutions and touches upon the deeper causes of organizational success. In this session, we'll explore the 8 pillars of an engineering culture and show you how to build and nurture one that drives business success. From state of the art software and smooth delivery, to appropriate continuity and the power of platforms, we'll cover the key elements that make up an engineering culture. We'll also delve into the importance of an empowering operating model, moving beyond traditional IT, and leadership in building a successful engineering culture. Join me in this session and learn how to build and nurture an engineering culture that drives business success!
CodeToCloud with GitHub - Hands-on Workshop	This workshop focuses on the Code to Cloud journey... This workshop focuses on the Code to Cloud journey. The journey includes the integration with Azure Boards, working with GitHub Codespaces, the GitHub Flow, and the GitHub Container Registry. Students will learn to use docker and docker-compose and deploy their solution to an Azure Web App using GitHub Actions, and Azure DevOps pipelines. To make it challenging for the students, the workshop contains challenges that can also be done individually. To make sure students do not get stuck, there are scripts available with instructions to "automatically" fix a challenge, so students can continue. The workshop also contains extensive Step-By-Step videos and written instructions. There are also videos that explain the concepts that are used in the exercises. We will cover the following modules: Module 1: improving the Developer Workflow Module 2 - Moving to the Cloud Module 3 - Closing the Feedback Loop
Rebuild or Refactor? That is the question!	Sooner or later, you will encounter the question: ... Sooner or later, you will encounter the question: Rebuild or Refactor? Software that has been in use for several years will inevitably cause issues. Maybe the software is hard to maintain, or perhaps it is difficult to add new features, which slows down development. Your development teams might spend more time fixing issues than adding new features, making changes both hard and expensive. Developers may suggest starting over because the software is unmaintainable, while the business pushes back to maintain velocity. Regardless of the reason, the question will arise: Should we rebuild the software? How long will it take? And how much will it cost? These are important and seemingly straightforward questions, but the answers are not always simple or concrete. There is more to consider than just time and resources. In this session, we will explore this question in more detail. We will discuss some challenges and considerations involved in making the business decision to rebuild or refactor an application. Furthermore, we will explore how to proceed once the decision has been made.
Security in your pipelines. The shift to Rugged DevOps	Putting Developers and IT-Pros in one team does no... Putting Developers and IT-Pros in one team does not make it a DevOps team. And even when they work smoothly together there is always Security that needs to be addressed. Build and Release Pipelines take care of building and deploying your application, but are your pipelines secure? And the code that you are deploying? With many releases a day, security officers will not be able to verify each release. Rugged DevOps is all about securing your assets and your pipeline and really embed Security in to your DevOps process. In this talk I will guide you through the concepts of Rugged DevOps, the risks companies are currently facing and talk about some strategies and tools which can help you embed security in to your DevOps processes.
Growing your DevOps mindset	Practicing DevOps successfully requires knowledge ... Practicing DevOps successfully requires knowledge of hard skill areas such as continuous delivery and automated testing. But even if you have all these tools in place, you are not necessarily successful. And why is that? In most cases, the people are not in the right "state" or mindset, to actually use these new practices and tools. Fear of failure, of speaking up, motivation and drive are all factors that play an important role. Creating a culture where people show courage, work on team building, practice DevOps leadership and have a continuous improvement mindset is hard but extremely important. In this session, I will talk about what a DevOps MindSet. How to recognize fears and counter-productive behavior and give you some tips and insights on how to start growing a DevOps Mindset for yourself and your colleagues.
When "We are down" is not good enough. Site Reliability Engineering (SRE) in Azure	The more we are connected and the more others are ... The more we are connected and the more others are connected to us, the more important reliability of your sites becomes. Site Reliability Engineering is an engineering discipline devoted to helping an organization sustainably achieve the appropriate level of reliability in their systems, services, and products. But what does this mean, and how do get started with this? In this session I will talk about the concepts of Site Reliability Engineering and use Microsoft Azure to implement some of the concepts and practices

Rik Groenewoud

Session Title	Abstract
The best answer on where and how to apply alerts: Azure Monitor Baseline Alerts	When maintaining an Azure Infrastructure landscape... When maintaining an Azure Infrastructure landscape, such as a Landing Zone, one of the most significant challenges is monitoring it effectively. How can you ensure proactive alerts for potential issues? Where should you place these alerts, and what thresholds should you set? How do you cover everything important while avoiding alert fatigue? Recently, Microsoft and the community introduced an open-source framework designed to address these questions and provide guidance on deploying alerts in a Landing Zone scenario. This framework is known as Azure Monitor Baseline Alerts (AMBA). It offers a set of alerts with best practice configurations, utilizing Azure Policies for deployment. In this session, I will delve into what AMBA is and how you can leverage it. We will explore the strength of deploying alerts via Policies and discuss potential pitfalls and downsides of using the AMBA framework.
How To Do Managed Services the DevOps Way	As a Managed Services provider delivering solution... As a Managed Services provider delivering solutions in the Microsoft Azure space, we are challenged to service multiple enterprise size customers, each with their own environments and demands, with a small team of 8 devOps engineers. During this session, I will demonstrate how we've implemented our own flavour of Scrum to operate a Managed Services company in alignment with the DevOps methodology. By doing so, we've achieved the capability to create a robust platform, enabling customer teams to independently run and maintain their workloads while we stay in control of the quality and security of solutions we provide. Our approach combines Microsoft Azure's native tools, Azure DevOps, along with tools like Grafana and PagerDuty to create an integrated solution. This presentation will illustrate how we moved away from “traditional” IT Managed Services to a collaborative reality where service providers and customers actively cooperate, enabling our customers to create every day!
Is Azure Managed Grafana and Prometheus the way to go?	During this session, we'll embark on an exploratio... During this session, we'll embark on an exploration of two exciting Azure services: Azure Managed Grafana, which officially launched on August 31, 2022, and Azure Managed Prometheus, currently in preview. Our journey will involve a comprehensive comparison between these Azure offerings and their well-established counterparts, Grafana and Prometheus. We'll seek to answer several key questions throughout our discussion: - What exactly do these Azure Managed Services entail, and how can they benefit your projects and operations? - What are the ideal use cases for Azure Managed Grafana and Prometheus, and how can they enhance your cloud ecosystem? - How do these managed Azure services measure up against their self-hosted or cloud-hosted counterparts, and what advantages do they bring to the table? - What potential downsides or limitations should you consider when opting for Azure Managed Grafana or Prometheus? By the end of our exploration, we'll assess whether Azure Managed offerings have what it takes to emerge victorious in this face-off, or if the well-established tools still hold their ground. Join us on this journey to gain insights into these new Azure services and make informed decisions about their integration into your cloud infrastructure.
Shifting Left: Visualizing Cloud Spend from Every Angle for Full Control and Optimization	In the current challenging economic climate, there... In the current challenging economic climate, there's a growing emphasis on the cost aspect of cloud computing. For DevOps engineers, taking control of the cloud spend they generate is crucial. The FinOps model is gaining popularity as a means to maximize the use of cloud technology, delivering value while reducing unnecessary expenses. A key component of FinOps is increasing the visibility of financial data for engineers and developers, equipping them with the tools needed to integrate cost data into their daily workflows. The ultimate goal is to empower these teams to make informed decisions that consider not only technical performance data but also the associated costs. The guiding principle is: 'You build it, you run it, you pay for it.'"
Bring FinOps to the Engineer	One of the important principles of FinOps is that ... One of the important principles of FinOps is that "everyone takes ownership of their cloud usage." This sounds good, but to really make this happen, we cannot simply impose this ownership on engineers. Because... Why should they care about their spend? In this session we will explain what needs to be done to ensure that engineers understand what cloud spend is all about. It is important to speak their language and translate finance into technical examples and measures they can implement in their technical solutions. We will provide practical use-cases of how to shift-left cost ownership by adding tools to the developer toolset across all phases of the application lifecycle (requirements, build, run). Directly in their IDE, in their pipelines or by providing the right dashboards. Whether your are an engineer or need to work with engineers, this session will give you valuable take-aways to make your FinOps transition succesfull!

Rob Bos

Session Title	Abstract
GitHub Advanced Security boot camp – hands-on workshop	Software supply chain attacks and secrets leakages... Software supply chain attacks and secrets leakages are still one of the biggest threat vectors for software companies. But supply chain security does not have to be a burden and slow down development! With GitHub Advanced Security (GHAS) you can incorporate security into your development process with a developer first mindset. This hands-on workshop is designed for developers that want to improve their security posture by giving them practical exercises to get to know GHAS. The workshop covers: - Dependency graph, dependabot, and dependency review - Secret scanning and push protection - Code scanning and pull request integration - Include other security tools in GHAS - CodeQL and writing custom queries - Rolling out GHAS in your organization
Lessons learned from enabling 1000's of GitHub Copilot users	GitHub Copilot is the worlds most widely adopted A... GitHub Copilot is the worlds most widely adopted AI developer tool. After enabling thousands of users we have learned that this is not a tool you can give people a license for and expect them to be able to get the most out of it. There is a learning curve that needs to be acknowledged. Learn from Rob the practical insights and best practices for using GitHub Copilot to your benefit, and how to share these lessons with your team(s) in an efficient way.
Hands-on workshop GitHub Code to Cloud	In this Hands-on workshop we will teach you how to... In this Hands-on workshop we will teach you how to use all the great features GitHub has to offer. We will start with an overview how to come from Idea to Code by using GitHub Discussions, Issues, Pages and Wiki. Next we will move the idea's to code and start using the Git features. From here we dive in to the use of Branch Protection Rules, Code Owners, Actions for CI, CD and Deployments to the Azure Cloud. We will also have a look at how GitHub can help you in your Secure Development Lifecycle with Credential scanning, Package Vulnerability Scanning and Code Scanning to expose programming mistakes that might lead to vulnerabilities in the future. After this Hands-on workshop, you know what GitHub has to offer to you and your organization to implement Secure and Compliant DevOps with ease.
Protect your code with GitHub security features	Creating modern software has a lot of moving parts... Creating modern software has a lot of moving parts. We all build on top of the shoulders of giants by leveraging closed/open source packages or containers that other people have shared. That makes securing our software a lot more complex as well! In this session you'll learn what possible attack vectors you need to look for, how to protect yourself against them and how to leverage GitHub's features to make your life easier! Topics: - Signed Commits - Dependabot updates - Dependency scanning for known vulnerabilities - Secret scanning (and revoking) out of the box - Using CodeQL
How to use GitHub Actions with security in mind	When working in the real world with continuous int... When working in the real world with continuous integration / continuous deployment, you have to take care of your pipelines and the things they have access to. - Who can push code into to an environment? - Who could read and change the connection strings to the database? - Who can create new resources in your cloud environment? - Do you trust your third party extensions? - What part of the network does your pipeline have access to? I'll go over each of these aspects of your GitHub Actions Workflows and show you what to look for and how to improve your security stance without locking every DevOps engineer out.
A trip around GitHub Models	GitHub Models is a great place for developers to e... GitHub Models is a great place for developers to experiment with large language models (LLMs), especially if you’re an Azure developer who’s looking to test an idea or prototype an application. Integrating GitHub Models with Azure allows you to move logic back and forth as you work through each phase of a project. In this course, instructor Rob Bos shows you how to create prototypes and development paths in GitHub Models. Along the way, gather insights to help you leverage the power of planning and practice, shifting your attention away from the more constrained options of GitHub Models to the more open and flexible features offered by Azure OpenAI.
Protect yourself against supply chain attacks	As an industry, we are using third party packages ... As an industry, we are using third party packages and building components for lots of things. In this supply chain, there are lots of places for vulnerabilities. They can then be used to attack your DevOps pipelines! In this session, I will go over some common attack examples and show you a way to prevent them from happening. There are frameworks available in the industry that guide you through the process of becoming more mature in protecting not only your source code and application but also the packages you use and the pipelines you build them with. I'll demo some of GitHub's features that help preventing these types of attacks
GitHub Actions: beyond CI/CD	With GitHub Actions you can do so much more then j... With GitHub Actions you can do so much more then just CI/CD! I’ve validated the links on my blogposts, automated my issue management and provided easy configuration of my trainings that sets up entire environments for the attendees! Join this session for more examples how you can use GitHub Actions to make your life easier!
Collaborating effectively using GitHub	A lot of teams work on GitHub and use only a small... A lot of teams work on GitHub and use only a small part of the available features. In this session, Rob will show you how to use GitHub to handle team processes like on-boarding a new team member (while skipping the boring text documents or wiki pages), setting up daily scrums, and even sending out updates of team accomplishments at the end of your sprint. We'll explain how to set up an effective team environment using GitHub, with demos from open source repositories that'll help you get started right away!
Transitioning to DevSecOps: A Pathway for Engineers	Explore the world of DevSecOps in this session des... Explore the world of DevSecOps in this session designed for engineers. We’ll discuss the basics of DevSecOps, delve into Application Security (AppSec), and explore the importance of supply chain and pipeline security. Gain practical knowledge and insights into transitioning from a focus on engineering to include DevSecOps practices and elevate the overall security of your application.

Rockford Lhotka

Session Title	Abstract
DIY - Make A Kubernetes Cluster with Inexpensive Devices	If you are interested in Kubernetes, containers, a... If you are interested in Kubernetes, containers, and want an actual multi-node cluster you can use for learning, it is kind of fun to build your own by using low-cost devices such as Raspberry Pi and old laptops, plus a few extra bits of hardware. Join Rockford Lhotka as he talks about how he assembled a multi-node cluster, got 64 bit Ubuntu set up, and installed Kubernetes with microk8s, all for less than the cost of a low-end laptop.
Building Enterprise Blazor Apps Using CSLA .NET	Blazor is one of the most powerful UI technologies... Blazor is one of the most powerful UI technologies available today, allowing you to write apps that run on a web server, or directly on client devices in any modern browser by using WebAssembly. An enterprise app probably calls back-end services and needs to interact with app servers. Some or all of your business logic may run on the client, the app server, or both. That's ideal for the balance between user interactivity, performance, scalability, and security. The widely-used open source CSLA .NET framework helps you create a reusable, scalable, and cross-platform portable business layer that lets your application run on multiple types of client devices while sharing business logic between the clients and your app server. This session is an end-to-end walkthrough of how this works and how you can benefit. Learning points: 1. Learn how Blazor can be used to build end-user experiences for the enterprise 2. Learn how CSLA .NET helps you develop maintainable, reusable, cross-platform business logic 3. Learn how to leverage your business logic on the server with Linux containers
Deep Dive: Microsoft Blazor Zero to Success	Blazor is a UI framework that enables you to build... Blazor is a UI framework that enables you to build powerful web apps using HTML, CSS, and C#. You can host an app on a web server, or run the app on the client device in any modern browser. The Blazor UI framework is very capable, and provides a powerful UI component model, data binding, routing, authorization, and many other features necessary to build a modern app. Learning points: 1. Learn how Blazor, WebAssembly, and .NET combine to enable this app platform 2. Learn how to build server-side Blazor and Blazor WebAssembly apps 3. Learn how to use Blazor UI framework features such as UI components, data binding, routing, and authorization
Workshop: Microsoft Blazor Top to Bottom	Blazor (Browser + Razor) has redefined the current... Blazor (Browser + Razor) has redefined the current landscape for web developers, allowing C# and .NET back into the modern web development picture. Leveraging WebAssembly to allow running .NET code in the browser, we can use the same C# language on the client and the server to build our modern web applications. At the core of Blazor is the ability to compose our web application using reusable components just like the modern browser frameworks. Join experts in Blazor, WebAssembly, and enterprise development as they discuss why and when to use Blazor. They will give you everything you need to know to build Blazor apps, use the Razor component model, data and event binding, styling the UI, and building maintainable code. You will learn about Blazor server, WebAssembly, and MAUI hybrid apps, and how to implement authentication and authorization. WebAssembly and Blazor are incredibly powerful technologies and may be the future of web development. Come to this workshop to form your own view on this exciting platform.
Introduction to Blazor	Blazor is a UI framework that enables you to build... Blazor is a UI framework that enables you to build powerful web apps using HTML, CSS, and C#. You can host an app on a web server or run the app on the client device in any modern browser. The Blazor UI framework is very capable, and provides a powerful UI component model, data binding, routing, authorization, and many other features necessary to build a modern app. Learning points: 1. Learn how Blazor, WebAssembly, and .NET combine to enable this app platform 2. Learn how to build server-side Blazor and Blazor WebAssembly apps 3. Learn how to use Blazor UI framework features such as UI components, data binding, routing, and authorization
Making Use of Modern Blazor Render Modes	In .NET 8 Blazor introduced new and powerful rende... In .NET 8 Blazor introduced new and powerful render modes for components and pages. You can now render content statically on the server or using the Blazor interactive features from the server or on a WebAssembly client. Add to this the ability to stream static content, and automatically switch between these modes, and things are really powerful - but complex. There are three primary challenges to overcome: render mode detection, state management, and authentication. In this session you will learn how these new modes work, how to overcome the three challenges, how you can use them to build your sites and apps, and how to deal with potentially unexpected behaviors as your users move from page to page, and from one render mode to another.
Building Blazor Data Entry Forms with AI	One of the most common things developers do in Bla... One of the most common things developers do in Blazor is to create data entry forms. But did you know that there are multiple ways to design and build forms in Blazor 8? The EditForm component, HTML table or div tags, interactive pages vs server-static pages, and the new AI-driven Smart Components are some of the options at your disposal. In this session you will learn about these techniques, along with their pros and cons, so you can decide that works best in your apps.
Building Blazor Applications	Blazor is a modern .NET application framework, pri... Blazor is a modern .NET application framework, primarily used to build web applications. Since its release in 2020, it has evolved with new features and capabilities, enabling developers with the ability to produce high-quality applications for their uses. In this workshop, we’ll cover numerous features that Blazor brings to the table. We’ll discuss different hosting models and how you can use them to your advantage. At the end of the workshop, you’ll leave with a comprehensive understanding of the Blazor landscape.
Blazor Authentication and Authorization	Most web and native apps require some form of auth... Most web and native apps require some form of authentication to allow users access to the app. And they use authorization to change the app's behavior based on the user's roles and claims. Learn how to implement Blazor authentication on the server, in WebAssembly, and in a MAUI Hybrid app. Then learn how to use the current user's identity to authorize access to pages, components, and UI elements in your Blazor apps.
Building a Blazor MAUI Hybrid App	Blazor is a powerful web UI framework. .NET MAUI a... Blazor is a powerful web UI framework. .NET MAUI allows you to build native apps for iOS, Android, Windows, and macOS. Fortunately, these technologies work together, allowing you to create a native app using the features and capabilities of Blazor. This is an incredibly powerful and cost-effective way to build cross-platform native apps, and even potentially reusing the same UI on the web. Learn how to build a Blazor MAUI Hybrid app that can run natively on multiple types of device and operating system. This includes the use of per-platform APIs, authentication, authorization, and other important concepts.
Workshop: Building Blazor Applications	Blazor is a modern .NET application framework, pri... Blazor is a modern .NET application framework, primarily used to build web applications. Since its release in 2020, it has evolved with new features and capabilities, enabling developers with the ability to produce high-quality applications for their uses. In this workshop, we’ll cover numerous features that Blazor brings to the table. We’ll discuss different hosting models and how you can use them to your advantage. At the end of the workshop, you’ll leave with a comprehensive understanding of the Blazor landscape. ℹ️ This is a lecture-based workshop, not a hands-on lab You will learn: 1. How to leverage Blazor on the server, in the browser, and on mobile devices 2. How to effectively use the Blazor UI component model to build maintainable apps 3. How Blazor fits into an overall app architecture, including authentication, authorization, data access, and more
Build an AI-enabled Blazor App Using AI	As a developer, it is very powerful to leverage AI... As a developer, it is very powerful to leverage AI as a coding assistant, for code completion, via chat, and using AI as a co-developer. In addition, end users increasing expect AI to help them when using your app. In this session you will see various ways to use AI to help build a Blazor app that incorporates AI to assist end users, and you can judge for yourself whether AI helps the software development process.
Kubernetes: A Great Place to Host .NET Apps	Modern .NET server-side code runs on Linux at leas... Modern .NET server-side code runs on Linux at least as well as Windows and works great in containers. Kubernetes is the most widely used orchestrator for hosting container-based apps, but it can be quite complex. In this session you will learn how to build your .NET apps to run in Linux containers, and how to effectively host those containers in Kubernetes. Once you understand how to host your code in Kubernetes, you are ready to use AKS in Azure, Kubernetes on-prem, or any Kubernetes hosting environment, opening up a wide world for your .NET code. Learning objectives: 1. Learn how to package your .NET code into a Linux container 2. Learn how to host your containers in Kubernetes 3. Learn how to access other services in your Kubernetes cluster from your .NET code
No Silver Bullet: Use the Right Architecture for the Right Problem	Although monolithic architectures are making a com... Although monolithic architectures are making a comeback, the best way to build distributed software solutions is through the use of service-based architectures. These include microservices, dedicated n-tier services, and related architectural models widely used when building comprehensive solutions. In this session you will learn when to implement a system using microservices, and when to use dedicated services. You will also learn when to use sync vs async communication between system components, and the importance of discipline around messaging protocols within your system and with external consumers.
A Career With Open Source	Open source (OSS) is inescapable in our industry t... Open source (OSS) is inescapable in our industry today, and we are all part of the ecosystem one way or another. We all have a responsibility, as organizations and individuals, to understand our role in the ecosystem, and to actively engage to ensure OSS continues to be available into the future. Learn how you and your organization can support the OSS ecosystem, what OSS many OSS projects need, and ways to help keep our industry vibrant and healthy into the future. Rockford Lhotka relied on freeware, shareware, and OSS to build his career, and then became an OSS creator, with the CSLA project (https://cslanet.com) being active for more than 25 years.

Roy Cornelissen

Session Title	Abstract
Building Practical Zero Trust APIs with .NET 9 and Azure	In a world of increasing security threats, Zero Tr... In a world of increasing security threats, Zero Trust has become the gold standard for API security. But how do you implement it practically? This session explores building Zero Trust APIs with .NET 9 on Azure, leveraging AOT compilation, managed identity, and ingress/egress control. Learn how to protect your APIs with minimal overhead, integrate Azure-native security tools, and maintain both performance and developer efficiency through real-world examples and live demos.
Git Storytelling: crafting a git commit history your future self will thank you for	Git is the most widely used version control system... Git is the most widely used version control system in the industry. Yet, many teams merely use it to shove code changes around and for its branching capabilities. When reviewing code, or when looking through changes in the past, what changed only tells half of the story. The nature of the change, why it changed and in what steps are just as important. Creating huge PR's with lots of file changes and squashing them in one commit will bury a lot of that information. In this session, I will introduce how Git works under the hood, and how you can use several techniques such as (interactive) rebasing, meaningful commits and fixups to craft your git history to tell a story that will last for ages.
Legacy Lift-off: Bringing your legacy .NET application into the modern cloud and AI age	In today's fast-paced digital landscape, legacy so... In today's fast-paced digital landscape, legacy software can be a bottleneck to innovation and growth. Yet, a green field rebuild is hardly ever your best way to success. There is so much value in your existing system that can be salvaged and modernized. Join us for a hands-on exploration as we delve into modernizing a legacy .NET Framework 4.8 / WinForms application for the cloud and AI age. Through a series of interactive modules, participants will learn essential skills such as deciphering legacy code using AI, transitioning to modern technology stacks, and implementing best practices for refactoring, performance, security, and quality assurance. To finish it off, we will infuse the application with some AI to make it smart and ready for the new era. By the end of the workshop, we will have transitioned from a legacy .NET / WinForms application to a cloud-ready, AI infused web application with Blazor.
Deep dive: Going cloud native with 30 year old code	Docker makes it easy to containerize existing appl... Docker makes it easy to containerize existing applications and run them on arbitrary machines. Kubernetes takes it to the next level by offering fast and easy container orchestration at runtime. Containerization has been common practice in the Linux world for years, but lately developers on the Microsoft stack have jumped on the Docker bandwagon too. That is all nice and dandy for green field .NET Core applications that are easily deployable in Docker on Linux, but what if you have 30 year old Win32 and .NET software that has to be cloudified and run as a Software as a Service offering on demand? In this Deep Dive I’ll share the journey of my team that lead us from hope to desperation to glory in turning an on premise Client-Server application into a full blown cloud native service, with some ancient pieces still in there. The architectural learnings and technical details will give you a different perspective on cloud transformation than the default "we have to rebuild the whole application from scratch to run it in the cloud", and will give you tools for faster time to market.
Get the message? - Choosing a messaging framework for your .NET applications	With modern architectural styles like microservice... With modern architectural styles like microservices, "event driven" applications are becoming more and more mainstream. But how do you get messages across from A to B? There are many transport mechanisms and frameworks available that help you do this. In this session, we will cover how messaging helps to decrease temporal decoupling, and how it can help improve scalability of your application. We will also learn about the implications of introducing messaging. Next, we will cover 4 main stream messaging frameworks and compare some tradeoffs: NServiceBus, MassTransit, Dapr and the new kid in town: Wolverine.
Building Bridges, Breaking Down Walls: A Culture Workshop	Description Are you ready to build a culture of... Description Are you ready to build a culture of excellence and productivity in your engineering team? Join us for a full day workshop where we'll explore the principles of DevOps, growth mindset, knowledge sharing, and a strong engineering culture to help you create an epic workplace. During this workshop, we'll dive deep into the importance of DevOps and how it can help you break down silos between teams, automate repetitive tasks, and streamline processes to achieve better outcomes. You'll learn how to adopt a culture of continuous improvement, embrace experimentation, and build trust within the teams to really achieve true collaboration. We'll also explore the critical role of knowledge sharing in building a strong engineering culture. You'll learn how to encourage and facilitate knowledge sharing among team members, and how to create an environment where everyone feels empowered to contribute their ideas and expertise. But that's not all! We'll also tackle the topic of developer productivity head-on, discussing strategies for managing your time effectively, setting goals, and staying focused. You'll learn how to overcome common productivity challenges and achieve your full potential as a developer. We'll discuss the importance of flow and creativity in the development process, and provide practical tips for achieving a state of deep concentration and maximum productivity. By the end of the workshop, you'll have a clear understanding of how to build a strong engineering culture that promotes collaboration, innovation, and productivity. You'll also have the tools and knowledge you need to start implementing these principles in your work right away. Don't miss this opportunity to create an epic workplace and achieve your goals as a developer!
Mind Matters: The Importance of Cultivating a DevOps Mindset	While hard skills like continuous delivery and aut... While hard skills like continuous delivery and automated testing are important for practicing DevOps successfully, they are not the only factors that determine success. In many cases, people's mindset and willingness to embrace new practices and tools can also play a critical role. Fear of failure, fear of speaking up, motivation, and drive are all factors that can impact a team's ability to practice DevOps effectively. In this session, we'll explore the concept of a DevOps mindset and how to cultivate it within yourself and your team. We'll discuss how to recognize fears and counter-productive behavior, and provide tips and insights on how to foster a culture of courage, teamwork, DevOps leadership, and continuous improvement. Join me and learn how to cultivate a DevOps mindset that drives success!
Doing Kubernetes DevOps style	This training introduces you to Docker and contain... This training introduces you to Docker and container technology for DevOps teams. We will show you how to apply DevOps practices to cloud-based container solutions, complete with hands-on exercises using Kubernetes. The training uses Microsoft tooling and technology, but the skills you will learn can be applied in any technology stack. This workshop contains hands-on labs to help you gain practical experience with the following topics: - Getting started with containers and Docker - Working with Kubernetes - Azure DevOps pipelines - Canary releases and A/B testing using Istio service mesh Objectives: - Automate everything from infrastructure to deployment - Get hands-on experience supporting DevOps practices with available tools. - Understand the implications for DevOps teams to build, deploy and run container based solutions in a cloud environment. - Practice finding and fixing bugs without downtime Target audience: This training is intended for developers and architects that want to learn about DevOps practices and tooling for a cloud-based Kubernetes solution. This workshop is divided in two days with separate labs and allows you to start at any point given your experience. The first day introduces you to container technology and tooling with .NET Core. The second day covers container clusters and meshes using Kubernetes and Istio. Throughout the workshop you will gradually improve your DevOps skills for container based solutions. All courseware is on GitHub, so you can both prepare for the workshop ahead of time and finish the workshop from home if you are unable to finish the labs during the workshop.

Thijs Limmen

Session Title	Abstract
Soar to New Heights Devs! Master Coding with GitHub Copilot and Chat.	Welcome aboard our journey into the future of codi... Welcome aboard our journey into the future of coding with GitHub Copilot, where we channel the Wright Brothers' spirit of innovation. Today, we soar beyond routine coding exercises, charting new territories in automated coding with Copilot as our guide. This session is a transformative leap, akin to the first flight at Kitty Hawk. With GitHub Copilot, you're not just coding; you're pioneering in the digital era. We're here to elevate your coding skills, empowering you to explore new horizons. As we conclude, remember that you are the Pilot ready to take-off with GitHub Copilot by your side. After the session you are ready to navigate uncharted coding landscapes and unlock your full potential. Key Takeaways: - First, a Flight Demonstration teaches effortless workflow integration, where GitHub Copilot elevates coding efficiency by seamlessly generating code, communications, and ensure stylistic consistency. - Then, Navigating the Code Clouds distills prompt engineering to master GitHub Copilot's advanced features for code enhancement and refactoring. - Next, Aviation Incident Analysis offers dynamic demonstrations of GitHub Copilot's troubleshooting prowess in coding emergencies and bug resolution. - Finally, Auto-Pilot Mode explores leveraging AI for software development stages, automating health checks, CI/CD pipelines for Azure, and discovering Copilot's diverse capabilities. Explore expert prompt engineering methods to coax the best possible result out of a LLM.
Solo Devs' AI Odyssey: From Code to Calm	In an era where technology and mindfulness interse... In an era where technology and mindfulness intersect, the power of AI is reshaping how we approach app development. This session delves into the fascinating world of utilising artificial intelligence to expedite and streamline the development process of a mobile meditation app. We'll explore how Azure AI Speech, DALL-E, Azure OpenAI, and GitHub Copilot converge to eliminate the need for visual designers, voice actors, and sound designers, thereby revolutionising the traditional development workflow. Attendees will journey through the creation of a self-guided meditation app, learning how different AI technologies can be harnessed to rapidly prototype and even produce market-ready mobile applications. Highlighting two projects – one that generates daily meditation content for YouTube, and another transforming this concept into a mobile app akin to leading meditation platforms – this session is both an inspirational and technical deep dive into the practicalities and possibilities of AI in app development. Join us for a session that not only enlightens but also inspires, demonstrating how a single developer can leverage AI to not just iterate faster, but to also imaginatively redefine the boundaries of what's possible in app development. Prepare to be provoked, and above all, propelled into a future where your development skills are augmented by the limitless potential of AI.
Achieve 10x Productivity: Becoming an AI-Powered Developer	This session will showcase three personal projects... This session will showcase three personal projects, each demonstrating the practical and innovative use of AI in software development. We'll explore an AI-assisted project in building an Escape Room, leveraging Generative AI. Next, we'll dive into the creation of mind-blowing visuals and content, notably applied to this presentation! Finally, I'll unveil an AI-powered meditation app, illustrating the seamless integration of AI in app development. Attendees will walk away with actionable insights, including: - Utilizing AI code assistants for enhanced coding efficiency. - Creating awesome visuals and sound. - Integrating AI in your project or app. - Staying updated and inspired on Generative AI topics and fostering a culture of innovation by sharing knowledge about AI in your organization. - Adopting a mindset shift towards the use of AI instead of traditional ways of doing things. Whether you're an AI skeptic or enthusiast, a beginner, or an experienced developer, you'll discover how AI can not only streamline your workflow but also expand the horizons of what you can achieve.
Is ChatGPT a Better Software Engineer Than Me?	In this session, we will explore the capabilities ... In this session, we will explore the capabilities of ChatGPT as a software engineer, including its ability to write code, debug, and troubleshoot issues. We will also discuss the limitations and challenges of using AI in software engineering and consider the implications for the future of the field. We explore how to become a better developer using AI, touching on the mindset shift from traditional search engines to leveraging ChatGPT. We also discuss the importance of prompt building for effective communication with ChatGPT. We present various IDE integrated AI tools to assist with coding, writing commits and more. Additionally, we introduce image generation tools like Midjourney and Dall-E for inspiring UI, icon, and artwork design, as well as AI applications for blogging, documentation, and tutorials. Whether you are a software engineer yourself or simply interested in the role of AI in technology, this session will provide insights and thought-provoking discussions on the intersection of AI and software engineering.
GitHub Copilot Beyond the Basics - 10 Ways to Elevate Your Coding	This presentation takes you on a flight beyond the... This presentation takes you on a flight beyond the basics of GitHub Copilot, showcasing 10 advanced and unique use-cases that will elevate your coding. Empower yourself with the countless possibilities offered by using GitHub Copilot. Delve into the ever-evolving world of AI in coding, and learn to adapt and thrive in this dynamic landscape. Attendees will gain invaluable insights into leveraging Copilot for a broad variety of tasks. Each use-case will be accompanied by real-world examples, demonstrating how Copilot can be a game-changer in both routine and complex coding scenarios. Moreover, this session goes beyond technicalities. It also emphasizes the creative and innovative aspects of using GitHub Copilot, inspiring you to think differently about code. Join me for a session that elevates you to the boundaries of AI-assisted coding. Get ready for take-off and embark on a journey where your development capabilities are significantly empowered by the advanced features of GitHub Copilot.
Rebuilding Classic Video Games using Prompts Only	Thijs challenged himself to rebuild one of his fav... Thijs challenged himself to rebuild one of his favorite games using AI technology. He was amazed by the fact that he built level 1 of the original Super Mario Brothers in just 20 hours with all its game mechanics and interactions, by prompting only and having the AI make all the changes. This session is for anybody interested in using AI to significantly increase their productivity. There will be many demos where you will learn about the o1 model and its reasoning capabilities and GitHub Copilot Agent Mode. Besides the playful parts about building games, Thijs will show how the o1 model and agent mode helps him significantly in his daily job. Last we will enter the Boss Battle Arena and we will add features to the game live on stage. Next, Game Over?
Next level AI-assisted coding with GitHub Copilot	Join Thijs on a flight highlighting GitHub Copilot... Join Thijs on a flight highlighting GitHub Copilot as an AI-coding assistant directly built into your favourite IDE. It comes with a feature for inline suggestions and a chat experience which is context-aware of your codebase, helping coders to write code faster. You’ll also learn that GitHub Copilot is not just a coding tool; it is rapidly becoming an ecosystem of Copilots that are tied directly into the GitHub platform. Besides GitHub Copilot’s core features, Thijs will explore preview features like Custom Extensions, Copilot Edits, GitHub Models, and Copilot Workspaces through fun and engaging demos.
Building a Mindfulness App with AI	Thijs will guide you through the creation of a sel... Thijs will guide you through the creation of a self-guided meditation app using AI technology. Experience how a simple meditation prototype evolved into a full mobile app that is now available on both the Apple and Android app stores. This talk is ideal for developers, AI enthusiasts, and people with an interest in mindfulness and meditation. You will learn about Azure AI Speech, DALL-E, Azure OpenAI models, ChatGP, GitHub Copilot and how an independent developer can combine those to build products without the need of a complete team including designers, voice actors, and sound designers.

Yuliya Khadasevich

Session Title	Abstract
AI's Legacy Code Adventure	AI coding assistants like GitHub Copilot promise t... AI coding assistants like GitHub Copilot promise to supercharge developer productivity, and their benefits are clear when working on greenfield projects or personal side gigs. But what about the day-to-day reality for developers working in mature, large-scale codebases—with custom frameworks, long-standing conventions, and tangled histories? In this session, we'll roll up our sleeves and put GitHub Copilot through its paces on a sample legacy application. Through live coding examples, you'll see where Copilot shines unexpectedly (and where it falls flat). You'll walk away with strategies for making your existing codebase more "AI-friendly", techniques for your team to effectively collaborate with AI assistance, and a view of when to rely on Copilot versus when to stick with traditional approaches.
Beyond the Code: Can GitHub Copilot Be Your Co-Architect?	You already rely on GitHub Copilot to handle the b... You already rely on GitHub Copilot to handle the boring stuff — autocompleting code, tackling repetitive tasks, and jumping in when troubleshooting gets tough. Maybe you’ve even asked it to build an entire feature. But does it stop there? Now that Copilot frees you from routine work, you have more time to focus on the big picture — system design, architecture, and long-term decisions. But what if Copilot could support that too? What if it could recognize, suggest, and even guide architectural decisions? In this session, we’ll explore how GitHub Copilot can go beyond code and become your architectural thinking partner. Expect live demos and a fresh perspective on how AI is shaping modern software design.
AI-Infused Precision: Thoughts on Project Estimations	In the multifaceted realm of IT project management... In the multifaceted realm of IT project management, mastering the art of accurate estimations is a cornerstone for success, yet notoriously challenging to achieve. The balance between realistic timelines and efficient resource allocation hinges on accurate project forecasts. But what makes pinpointing these estimations so elusive in IT’s dynamic landscape? We will dive into the art and complexities of IT project estimations, exploring strategies and data to improve accuracy and precision. This session is designed to enhance your estimation skills exploring potential assistance from AI and experimenting with Azure AI Foundry. Join us to acquire actionable insights for advancing your estimation strategies in IT projects and exploring the integration of AI technologies. This session is perfectly suited for professionals aiming to merge classic estimation methods with innovative AI advancements, refining accuracy and efficiency.
GitHub Copilot Beyond the Basics - 10 Ways to Elevate Your Coding	This presentation takes you on a flight beyond the... This presentation takes you on a flight beyond the basics of GitHub Copilot, showcasing 10 advanced and unique use-cases that will elevate your coding. Empower yourself with the countless possibilities offered by using GitHub Copilot. Delve into the ever-evolving world of AI in coding, and learn to adapt and thrive in this dynamic landscape. Attendees will gain invaluable insights into leveraging Copilot for a broad variety of tasks. Each use-case will be accompanied by real-world examples, demonstrating how Copilot can be a game-changer in both routine and complex coding scenarios. Moreover, this session goes beyond technicalities. It also emphasizes the creative and innovative aspects of using GitHub Copilot, inspiring you to think differently about code. Join me for a session that elevates you to the boundaries of AI-assisted coding. Get ready for take-off and embark on a journey where your development capabilities are significantly empowered by the advanced features of GitHub Copilot.