When working with Azure Storages security of data is a common topic of discussion. With the latest changes in Azure, the security of the data at rest is now by default. It is also possible to set the transfer of files to use TLS 1.2 for further security. However a commonly missed security setting is … Continue reading Securing an Azure Storage File Share behind a Point to Site (P2S) VPN
Category: Azure
Passing values between ARM template and Terraform
When working with Terraform it might become necessary to include an ARM template deployment for part of the solution. When this happens and the ARM template is creating resources with a managed identity it is necessary to return the managed identity to the Terraform script. ARM templates can output values as part of their deployment … Continue reading Passing values between ARM template and Terraform
Creating a Resource Group with a Service Principal for Deployments
When managing an environment with multiple teams accessing and managing different services in the same subscription it is sometimes ideal to segregate the services by a resource group dedicated for each team. Segragation on top of subscription can be achieved by Resource Groups. When multiple teams and resource groups exists, it is important to apply … Continue reading Creating a Resource Group with a Service Principal for Deployments
Logic App ARM Template using Bicep
Microsoft is working on a Domain Specific Language (DSL) for abstracting the Azure ARM templates, https://github.com/Azure/bicep, Although the language is still in its infancy, it is a very useful language for generating ARM templates without the need to learn the complexities required. Furthermore, it allows reusable code to be implemented using modules. Following some work … Continue reading Logic App ARM Template using Bicep
Terraform Modules and Multiple Instances
The code used in this article can be found at https://github.com/kdemanuele/102-terraform-modules-and-multiple-instance When working with large or reusable code, in programming languages it is common practice to organise the code in classes and libraries. Terraform provide a similar concepted named ‘modules‘. A module is a reusable terraform module that can either be shared through the modules … Continue reading Terraform Modules and Multiple Instances