I probably would have a much better time of it if I even had a TAM to talk to instead of a CSP (and that's a baked-in problem on our end, but Azure looks and feels worse every day when you have to go through a CSP--Microsoft would do well to jettison the whole thing, it makes their product worse) and I'd have a great time of it if I had an Azure product team invested in fixing the problems I have. Which are legion. Mostly around the bad APIs and stuff like "oh yeah, the AD connector for Ruby is broken and has been for a year, just monkey-patch it like so"...but, funnily enough, also around security, which the blog post kind of just waves off as "oh but you can encrypt". Yeah, sure, they have a KMS, but IAM is a constant and complete tire fire, so even though you can encrypt your data, who knows if it's correctly protected?