# Azure Machine Configuration Deep Dive

Source bundle for **Azure Machine Configuration Deep Dive: PowerShell DSC, Configuration Drift, Azure Policy, and Auto-Remediation**.

Run the stages from PowerShell 7 with the exact active Azure subscription ID. The lab is Windows-only, uses no public VM IPs, and retrieves custom Machine Configuration packages through a Storage Private Endpoint with a user-assigned managed identity.

The package includes the `WorkshopMachineConfiguration` class-based DSC module. It bridges Windows feature commands into the Machine Configuration PowerShell 7 worker using bounded, asynchronous process I/O; do not replace it with the incompatible `WindowsFeature` or `WindowsOptionalFeature` resources from `PSDscResources`.

The `.private` directory is runtime-only and excluded from the distributable ZIP. Never enable Azure CLI debug output while identity, policy, or Storage operations are running. Preserve the sanitized bundle before running the exact-scope cleanup script.
