Provisioning Azure infrastructure for a web app is easy to get working once.Getting it repeatable, secure, and boring across environments is where things get interesting. I wanted a pattern that: uses managed identity instead of secrets relies on RBAC, not connection strings captures auth failures in logs runs entirely through CI/CD is safe to destroy […]