Azure
In a previous blogpost I wrote about creating your own custom Azure Policies using Terraform, you can find that post here: Write your own custom Azure Policies with TerraformPreviously on this blog we’ve talked about dealing with Azure Policy using Infrastructure as Code, sometimes referred to as Policy as
Azure
I recently published this video on Youtube. In the video I talk about deploying D.R.Y (Don't repeat yourself) Terraform code to first our development environment and then finally to our production environment. The main focus of this video is how you can manage more than just
News
Did you know? I started a Youtube channel: Carl Lindberg☁️ I will help you code your cloud and automate your future... or at least try to!YouTube Here is my first "real" video on the channel: I would love for you to check it out! What will happen
Azure
With regular policies in Azure you may be familiar with some common concepts such as effect, enforcement mode, resources being compliant or non-compliant and so on and so forth. It can be a policy that states Public network access should be disabled and if the resource has its public
Azure
In my previous post I wrote about using Terraform to create metric alerts and it was well received. Some of you have asked if one can be done covering log alerts as well. If you haven't read the previous post I will provide a link to it HERE
Azure
In January 2024 I submitted a post about deploying the Azure Monitor Baseline Alert (AMBA) solution. I've temporarily removed that post as the project has developed a lot since that publication and some information I had about deploying AMBA is no longer up to date. To avoid misleading
Azure
Previously on this blog we've talked about dealing with Azure Policy using Infrastructure as Code, sometimes referred to as Policy as Code. You can read about that more if you are interested here: Use Terraform to manage Azure PolicyThere are several ways you can manage Policy as Code
Azure
From Terraform version 1.10 and later we now have support for ephermal blocks which are resources that will not be persisted to the Terraform state. A reoccurring issue with Terraform is secrets and sensitive values in state management. Sure, state is for example encrypted at rest when residing in
Azure
In THIS previous post we looked at managing Entra Privileged Identity Management (PIM) with Terraform and working with Azure RBAC roles. That is great but did you know that you can onboard Entra Groups to PIM and therefor also manage them in Terraform? In todays post we'll look
Azure
If you are deploying Azure resources you are most likely doing so using the azurerm provider which requires you to supply a subscription_id and Terraform will run in the context of this subscription both from your local server and from your pipeline runners. Imagine that you have a CICD
Azure
Introduction There is no surprise to anyone who has seen my content before that I kind of love Infrastructure as Code (IaC), I really do. However, there seem to be a lot of people who think only about Azure resources when IaC is introduced into the conversation but that is
Azure
There are several ways you can manage Policy as Code with Microsoft Azure. There are things like Enterprise Policy as Code (EPAC) and Azure Landing Zone Conceptual Architecture (ALZ) (Both Terraform and Azure Bicep options exist). Not to mention the different ALZ accelerators that exist but they are more focused