TL;DR The Terraform state has more benefits than drawbacks, and it should not be considered a disadvantage in a well managed infrastructure as code environment!
... Continue ReadingTL;DR AzApi v1.0.0 released!
If you are using Terraform for Azure infrastructure, and keen on using preview features, you have most likely already tested AzApi. AzApi is a lightweight wrapper for the Azure Resource Manager api, and lets you create or update Azure resources that are not supported with providers in Terraform.
... Continue ReadingTL;DR Some identity gotchas when deploying an AKS Application Gateway Ingress Controller with an existing Application Gateway using Terraform
... Continue ReadingTL;DR You can test Terraform without an Azure/AWS/GCP subscription. It’s free to use.
... Continue ReadingTL;DR
You can run Azure Functions with Managed Identity for assigning Azure and API permissions.
TL;DR
You can set Diagnostic Settings on Azure Management Groups with API, and by extension Terraform AzApi!
TL;DR
Connect Subscription Activity Log with Azure Event Hubs for sending logs to third party SIEM using Terraform. Reduced scope for RBAC permission on Auth rule.
TL:DR; Both the AzureRM provider and the Remote Backend (if applicable) require authentication. I recommend using Environment variables/Azure AD or OpenID Connect where possible in pipelines. Azure CLI should be used locally. Avoid plaintext secrets, and never commit any secrets to version control!
... Continue ReadingTL:DR; Use Terraform AzApi provider to deploy an Azure Firewall Policy Rule Collection Group containing Mssql type application rule. Full AzApi example here. Attempted module for re-use here.
... Continue ReadingTL:DR; You can use checkov to scan your Terraform Iac for misconfigurations adding some level of DevSecOps. It can also be integrated with pre-commit. If you want, it can be applied to Bicep, Kubernetes or other supported frameworks.
... Continue Reading