11 min read
Fabric Item CI/CD Is Mostly Solved. Your Tenant Isn't
Git integration and fabric-cicd ship Fabric items well. Workspaces, capacity, domains, roles and tenant settings still need their own source of truth.
Infrastructure as Code
17 articles
1 min read
Infrastructure as Code Best Practices: Lessons from 100+ Deployments
IaC is a skill that compounds. These practices become second nature and save countless hours of debugging and recovery.
1 min read
Infrastructure as Code Maturity: Where Are You on the Journey?
IaC maturity is a journey, not a destination. Start where you are, establish good practices early, and continuously improve. The goal is infrastructure that…
1 min read
Azure Deployment Environments: Infrastructure as Code for Dev Teams
Azure Deployment Environments addresses these challenges with templated, self-service infrastructure.
6 min read
Azure Blueprints Is Still in Preview: Hedging With Bicep and Template Specs
Azure Blueprints has sat in preview since 2018; here's how to keep landing zone governance portable with Bicep, Template Specs, Policy and locks.
8 min read
Azure Policy as Code: Repo Layout, Pipeline and Staged Rollout
How to run Azure Policy from a Git repo with Bicep: what to version, how to stage controls safely, and how to test without a local evaluator.
7 min read
ARM What-If in CI/CD: Reviewing Bicep Changes Before They Ship
How to use ARM what-if to review Bicep deployments in pull requests, what its output really tells you, and the noise and blind spots to plan around.
6 min read
Bicep Private Module Registry: Publishing and Versioning with ACR
How to run a private Bicep module registry on Azure Container Registry: publishing, aliases, immutable versions, and when template specs fit better.
6 min read
Bicep at v0.4 in January 2022: Ready for Production, With Caveats
Where Azure Bicep stands in January 2022: what v0.4 gives you in production, the gaps that still bite, and when I'd still pick Terraform instead.
1 min read
Infrastructure as Code Maturity: Beyond the Basics
IaC maturity in 2021 meant treating infrastructure code with the same rigor as application code. The tools support it; the discipline makes it work.
1 min read
ARM Template Specs for Enterprise Template Management
ARM Template Specs provide a governed, versioned approach to managing infrastructure templates. With native RBAC integration and first class Azure resource…
1 min read
Bicep Modules for Modular Azure Infrastructure
Bicep modules enable clean, maintainable Azure infrastructure code. By separating concerns into modules, you create reusable components that can be shared…
1 min read
Pulumi for Azure Infrastructure as Code
Pulumi is the infrastructure-as-code choice for teams where "I don't want to learn another DSL" is a genuine constraint. You write infrastructure in C#…
1 min read
Terraform Azure Provider Fundamentals
Terraform with the AzureRM provider is the infrastructure-as-code choice I recommend to teams that need multi-cloud portability or already have Terraform…
1 min read
Azure Resource Manager Templates Best Practices
I've written a lot of ARM templates in the past three years, and I've also inherited a lot of ARM templates written by people who were having a bad day. The…
2 min read
Environment Governance with Azure Blueprints
The first time I helped a platform team stand up a new environment from scratch, we got it right on the third try. The first two tries had a RBAC assignment…
6 min read
Azure Bicep v0.2: Learn It Now, Hold Off on Production
What Azure Bicep v0.2 can and can't do in January 2021, how to build and deploy it today, and why I'd learn it now but wait for v0.3 before production.