Testing your Bicep modules with PSRule is a great way to identify that your code is meeting Azure best practice. But how do you actually test your Bicep modules with PSRule properly? How can you structure your Git repository? How can I configure PSRule to test the modules? Can I document what the modules do, …
Introduction If you’ve got a sandbox tenant which you and your teams are using to simulate certain deployments that don’t fit into the typical subscription scope (E.g. full blown Landing Zones for example) you may have a test or sandbox Azure tenant for this. In this case, you may also want to clear down Azure …
Intro When you enable Access Restrictions onto your Azure App Services (such as an Azure Function or Web App) you cut off any inbound traffic from the internet. This can pose an extra challenge when needing to deploy code via pipelines as you now have no inbound public access to the SCM (source control manager …
Introduction Finding a robust validation solution for Bicep has been both straight forward and frustrating. We have amazing tools like PSRule (shout out to Bernie for his incredible tool here) for best practice. And more straight forward ones provided natively by Microsoft such as the Bicep linter. However, the problem in my opinion, when it …
Intro Export template in the Azure Portal is a useful tool to lean on when you need to understand a resources properties, syntaxes, and structure. We’ve all been there, deploying some Bicep or ARM, but it’s failing on some SKU or it doesn’t like some syntax. Whilst the MS Docs are usually fantastic at showing …
No more JSON Parameter files!? Well, nearly. The .bicepparam feature is still in experimental mode currently, but looks to be coming soon as part of the future Bicep releases. If you’ve worked on ARM templates or Bicep you will be very familiar with the joys of working with a JSON parameters file. It can be …
Introduction Disclaimer: this is just for fun! I don’t actually use it to suggest replies to my emails 🙂 Additionally I also have disregarded any data sensitivity concerns in doing this for the name of testing things out and fun. I thought it was a cool concept that could have some valid use cases. For …
This guide is going to break down how to create a secure password string in a logic app flow and upload this secret into a key vault using REST API. I had previously explored executing java code in the Inline Code connector, which utilises an integration account to generate a password string. However, on further …
Intro As you cannot grant owner level permission in Azure Lighthouse (contributor is the highest level available to us) we need to circumvent a way around this limitation for Azure policy remediation. The solution to this is granting the User Access Administrator role with two delegated roles: Contributor & Log Analytics Contributor. This will allow …
