Getting started: Continuous deployment with Azure Bicep and Azure DevOps
Introduction – continuous deployment with Azure Bicep Continuous deployment with Azure Bicep using Azure DevOps provides a streamlined approach to deploying your resources. This method leverages Infrastructure as Code, harnessing the power of Azure DevOps tools such as source control, Azure Pipelines, and Azure Artifacts, all while maintaining environment control and auditing. In this article, …
Eliminate old API versions in your Azure Bicep templates
Introduction Eliminate old API versions in your Azure Bicep templates – did you know we can leverage the linting features within the bicepconfig.json file to notify you when old ARM API versions are detected? It can be a great addition to your Azure Bicep repository to ensure all cloud engineers can keep track of older …
Azure DevOps Agent: Azure Container Instance with Private Azure Container Registry
Introduction – Private Azure DevOps agent If you’re using Azure DevOps as your source control and deployment tooling, you may need to perform CI/CD to Azure resources that have no public access and are on private endpoints. This can pose a particular challenge, as unlike GitHub private runners, which can natively run within the private …
Compliance with Azure Bastion: Session recording
Introduction On May 30th, 2024, Microsoft announced Azure Bastion Premium, featuring the highly anticipated session recording capability. This feature, long requested since Bastion’s general availability in November 2019, marks a significant enhancement. In my view, session recording is an essential addition to Bastion, as it provides superior compliance and security. It enables the direct recording …
Azure Lighthouse: A comprehensive guide for MSPs
In this post, I’ll deep dive Azure Lighthouse from onboarding methods, best practices, lessons learnt and everything in between.
Pester unit tests for Azure Bicep modules
Introduction I’ve been dabbling into the world of Pester as of late to beef some unit tests with Azure Bicep modules. I thought it would be great if I can enhance the continuous integration pipeline in Azure DevOps for my Azure Bicep repository. With this, I thought I’d share this solution I came up with …
Fixing workload identity federation conversion failures in Azure DevOps
Introduction Microsoft released into public preview in Q4 last year, workload identity federation service connections for Azure DevOps. This was very welcomed, as it greatly improves your security posture by using short-lived authentication tokens with no persistent secret to manage. For the most part, all my Service Principals to workload identity conversions in Azure DevOps …
Azure SQL Managed Instance: Network Intent Policy error fix in Azure Bicep
Introduction If you’re trying to deploy Azure SQL Managed Instance in Azure via Azure Bicep you may have stumbled across this ‘Network Intent Policy’ error when trying to redeploy your Azure Bicep template. The problem doesn’t present itself on your first deployment yet when trying your template again this error is present. It seems if …
Azure Lean Coffee – Episode 3
Just a quick post about Azure Lean Coffee, hosted by Daniel McLoughlin and Rukaya Ogazi-Khan which is streamed live monthly covering a range of discussion topics on Azure of which I was fortunate enough to get involved in their latest episode. In this months episode I was joined along side Michael Durkan and Jeevantika Lingalwar …