why does azure fail silently more often than loudly?

instead of big obvious failures, the problems usually come from small wrong settings. nothing crashes loudly. it just does not work properly, and you have to dig to find the exact misconfiguration.

nsg priority order blocks traffic. private endpoint dns is not linked correctly. managed identity misses one small role. everything looks healthy in the portal, but the app is broken.

the pattern seems clear. networking and identity cause more real-world pain than vm size or scaling limits.

treating network and iam as code, validating with cli instead of only the portal, and enabling diagnostics by default seems to reduce surprises.

curious how others see it. are your biggest azure incidents infra limits, or silent configuration mistakes?