September 19, 2025

321: The Cloud Pod is in Tears Trying to Understand Azure Tiers

54 minutes

The Cloud Pod is in Tears Trying to Understand Azure Tiers

Welcome to episode 321 of The Cloud Pod, where the forecast is always cloudy! Justin, Ryan, and Matt are all on hand to bring you the latest in cloud and AI news, including increased metrics data (because who doesn’t love more data), some issues over at Cloudflare, and even bigger issues at Builder.ai – plus so much more.

Let’s get started!

Titles we almost went with this week

Lost in Translation: Google Helps IPv6 Find Its Way to IPv4

BigQuery’s Soft Landing for Hard Problems

CloudWatch Gets a Two-Week Memory Upgrade

VM Glow-Up: From Gen1 Zero to Gen2 Hero

Azure Gets Contextual: API Management Learns to Speak AI

The Cloud Pod: Now Broadcasting from 20,000 Leagues Under the Sea

LoRA LoRA on the Wall, Who’s the Finest Model of Them All

Azure Says MFA or the Highway for Resource Management

Two-Factor or Two-Furious: Azure’s Security Ultimatum

Agent 007: License to Build

CUD You Believe It? Google’s Discounts Get More Flexible

WAF’s New Deal: Free Logs with Every Million Requests Served

SOC It To Me: Google’s AI Security Workshop Tour

MFA mandatory in Azure, now you too can hate/hate MS Authenticator

AWS AMIs no longer the Tribbles of cloud computing

ECS Exec; Justin’s prediction from 2018 finally comes true

General News

00:56 FinOps Weekly Summit 2025

Victor Garcia reached out and asked us to share the news about the FinOps Weekly Summit coming up on October 23rd, 2025.

A lot of great speakers; if you’re in the FinOps space, we recommend it.

Want to register? You can do that here.

01:53 Ignite Registration Opens

San Francisco, Moscone Center

November 18–21, 2025

Need to convince your manager to pay for you to go? Find that letter here.

02:45 Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1

Some issues over at Cloudflare recently…

Fina CA issued 12 unauthorized TLS certificates for Cloudflare’s 1.1.1.1 DNS resolver IP address between February 2024 and August 2025, violating domain control validation requirements and potentially allowing man-in-the-middle attacks on DNS-over-TLS and DNS-over-HTTPS connections.

The incident highlights vulnerabilities in the Certificate Authority trust model where any trusted CA can issue certificates for any domain or IP without proper validation, though exploitation would require the attacker to have the private key, interce

...more