Several months ago I published this article which discusses the problem of Azure services that use a public endpoint together with its available authentication options. If companies do not understand these mechanics, they put their environment at risk. For Azure Storage Accounts a new feature is now in preview that allows you to address this problem even better.Continue reading
How to master resources in Azure? This is a question I receive a lot. We all agree that deploying resources in Azure is a simple process: You just go to the marketplace, fill out some form, hit next, next, finish, done. That is indeed very straightforward, but not the approach you should take in an enterprise environment if you want to end up with a compliant, secure and manageable result. But how to do it right then?Continue reading
On October 19, 2020 I did a live stream together with Microsoft Azure MVP Martin Ehrnst to talk about Deployment Scripts in ARM templates. We talked about the need for deployment scripts for the “last mile configuration” and how they can be used to add some imperative magic to ARM template deployments.Continue reading
On October 4, 2020 I did a live stream together with Microsoft Azure MVP Martin Ehrnst to talk about more complex ARM templates. We covered topics such as parameters, variables, dependencies, functions, conditions and copy. And we gave a quick intro into Bicep, a new DSL that makes ARM templates authoring easier.Continue reading
Some days ago I did a live stream to talk about infrastructure-as-code and ARM templates basics. The goal was to give beginners a quick introduction why infrastructure-as-code makes sense and how very basic ARM templates work.Continue reading
Some days ago I did a live stream to talk about infrastructure-as-code and Terraform basics. The goal was to give beginners a quick introduction why infrastructure-as-code makes sense and how Terraform works in it’s very basics.Continue reading
A while ago I announced a new infrastructure-as-code live stream. The idea was to give interested persons a kickstart how to use common tools and procedures they can use on Azure, either with ARM templates or Terraform. The poll results were pretty close and so I decided to run two live streams – one for each topic.
In 2019, Hashicorp announced their very own Terraform Cloud. It allows you to manage state remotely, allows the remote execution of plan, apply and destroy tasks and supports integration with common version control systems to manage your code (and some more features). In this post I will demonstrate the basic setup of the Terraform Cloud for a flexible scenario with two workspaces that are totally managed remotely. Continue reading
Some days ago I wrote an article how one can bring existing resources under Terraform management. While this is a valid scenario, the opposite could also be needed. This blog post demonstrates several methods how one can release existing resources from Terraform management – maybe to bring them under control of some other tool.