Thumbnail

Securing service principals in Azure

In today’s cloud environment, automation and application-based access are essential. Service principals enable applications to authenticate and access Azure resources seamlessly. However, their autonomous nature and significant permissions make them risky. This blog post explores how to effectively protect service principals and their access, addressing the challenges and security measures involved.

Read more

Thumbnail

Azure Verified Modules (AVM)

Azure Verified Modules (AVM) aim to standardize high-quality Infrastructure-as-Code (IaC) modules using Bicep capabilities, such as user-defined data types and functions. AVM ensures modules meet criteria, follow modern architecture, and stay updated, with each module assigned to a Microsoft employee for oversight. We’ll explore these standards further in this post.

Read more

Thumbnail

Deploy Entra ID resources declaratively using Azure Bicep

Let’s take a closer look at the new Graph extension and how it works. This extension integrates seamlessly with Azure Bicep, enabling the management of Entra ID resources directly within your Bicep files. By leveraging this new functionality, you can define your entire cloud infrastructure, including identity management components, in a unified and declarative manner. This not only simplifies the deployment process but also enhances the reliability and maintainability of your infrastructure as code (IaC) practices.

Read more

Thumbnail

Azure Bicep features you didn’t know about – Pt. 2

The post introduces user-defined functions in Azure Bicep, emphasizing their practicality in simplifying template creation and streamlining maintenance efforts. We’ll take a look on enabling and implementing these functions, accompanied by a practical example such as abstracting resource properties and standardizing naming conventions.

Read more