GitHub Repository | Azure Bicep | Azure DevOps | Azure Landing Zones | Infrastructure as Code | Private Endpoint As organizations adopt Azure Landing Zones, application teams often deploy workloads into dedicated subscriptions while shared platform services—such as Private DNS—are managed separately. This separation improves governance and security, but it also introduces a challenge: how […]
Provisioning Azure infrastructure for a web app is easy to get working once.Getting it repeatable, secure, and boring across environments is where things get interesting. I wanted a pattern that: This post walks through the Terraform + Azure DevOps pattern I ended up with. No magic. Just lessons learned the hard way. The Problem Most […]
Welcome to the last post for 2023 (123123). I was recently presented with an interesting challenge by one of our application development teams and thought this would make a good addition. There is a customer portal application running in Azure that makes use of configuration files (*.JSON and *.XML) to provide custom experiences based on […]
I wanted to share a real-world working example of how we currently leverage YAML templates to facilitate reusability and consistency for building and deploying our apps to Azure. The one thing the various development teams have in common are the languages they use for writing the APIs (.NET Core) and portals (Angular). Rather than continue […]
I’ve done this a few times now and wanted to share my experiences. Overall, it’s been great using the process that was first announced back in March 2021. When you take the exam and pass, it is valid for 1 year. Six months later you’ll receive an email indicating when your certification is due for […]
As the number of resources deployed into our Greenfield Azure tenant continues to rapidly grow, we always strive to be automated as much as possible. One question that kept coming up from developers was the topic of management like restarting app services. Back in the Brownfield days (or as I like to affectionately call it […]
I was having a conversation the other day with a PO (Product Owner) politely warning us about an avalanche of pending requests from various teams coming in for provisioning Azure resources and deploying code to meet new client commitments. Basic information is provided by the dev lead, and the PO will then manually create PBIs […]
We recently started a project to set up automated deployments of Azure resources using Azure DevOps pipelines. The first service we folded into ADO was an extremely high profile one for the business. It’s used by all the employees and contractors for capturing project capitalization and expense hours by asset and resource. After having successfully […]
I stumbled upon this issue while working on setting up DR for an internally written web app running in Azure. The solution is comprised of an app service plan, a web app, and backed by Azure SQL Database. It was really exciting to finally get a chance to be involved with a project like this […]
Update 4/7/2020: To align with best practices, I’m looking into the possibility of adding support for grabbing secret information from an Azure KeyVault as opposed to having it stored directly in the script. Welcome to my first Azure post! Within a few weeks at the new job, I was asked by management if it was […]
Churchill's Blog 