Azure
In THIS previous post we looked at managing Entra Privileged Identity Management (PIM) with Terraform and working with Azure RBAC roles. That is great but did you know that you can onboard Entra Groups to PIM and therefor also manage them in Terraform? In todays post we'll look
Azure
If you are deploying Azure resources you are most likely doing so using the azurerm provider which requires you to supply a subscription_id and Terraform will run in the context of this subscription both from your local server and from your pipeline runners. Imagine that you have a CICD
Azure
Introduction There is no surprise to anyone who has seen my content before that I kind of love Infrastructure as Code (IaC), I really do. However, there seem to be a lot of people who think only about Azure resources when IaC is introduced into the conversation but that is
Azure
There are several ways you can manage Policy as Code with Microsoft Azure. There are things like Enterprise Policy as Code (EPAC) and Azure Landing Zone Conceptual Architecture (ALZ) (Both Terraform and Azure Bicep options exist). Not to mention the different ALZ accelerators that exist but they are more focused
Azure
There are two new pretty neat provider-defined functions with the new major release version of the Terraform AzureRM provider which I kind of missed initially but seem pretty cool to use. normalise_resource_id which tries to "normalise" the case-senitive segments of a resource ID in
Azure
You can apply precondition and postcondition blocks to your resources in Terraform if you want to assume some properties will be true/false before apply or if you want to guarantee some properties will be true/false after apply when supplying your modules to consumers. Rules for evaluating conditions When
Azure
When writing Terraform Modules that you intend to share with your team or customers so they can consume them and create infrastructure it is common that you will write some base code and accept some input variables. Input variables let you customize the modules to make the deployment fit the
Azure
Ansible is automation everything IT If you have maybe 1-5 servers in your setup managing them individually should still be pretty easy. Now think about managing 200+ servers. If you had to login to them all individually that would just not be feasible. This is something we have dealt
Azure
With Azure Devops you can use Microsoft hosted agents when configuring your pipelines. This means that all you need to focus on is configuring your pipeline and .yaml files. Once they are executed Microsoft takes care of the underlying compute that runs your code. The benefit of this is that
Terraform
In terraform we have something called a a lifecycle block. It is very useful for many reasons. In this post we will focus primarily on two which are prevent_destroy and ignore_changes I have a small configuration where I will create an SQL server and a database in Azure.
Azure
In an older post we discussed the benefits of using and protecting your web applications with Azure Web Application Firewall, you can find the post in full here We touched on some best practices which were summarized in the post: * Best Practices: I recommend using Detection mode rather than Prevention
Azure
Introduction Azure rolled out a new service in public preview in February of this year (I am a bit late, I know) called Azure Storage Actions. Effective data management is essential for businesses to fully leverage their data assets, meet compliance regulations, reduce costs, and safeguard sensitive information and this