GitHub Repository | Azure Bicep | Azure DevOps | Azure Landing Zones | Infrastructure as Code | Private Endpoint As organizations adopt Azure Landing Zones, application teams often deploy workloads into dedicated subscriptions while shared platform services—such as Private DNS—are managed separately. This separation improves governance and security, but it also introduces a challenge: how […]
Provisioning Azure infrastructure for a web app is easy to get working once.Getting it repeatable, secure, and boring across environments is where things get interesting. I wanted a pattern that: This post walks through the Terraform + Azure DevOps pattern I ended up with. No magic. Just lessons learned the hard way. The Problem Most […]
Welcome to the last post for 2023 (123123). I was recently presented with an interesting challenge by one of our application development teams and thought this would make a good addition. There is a customer portal application running in Azure that makes use of configuration files (*.JSON and *.XML) to provide custom experiences based on […]
I wanted to share a real-world working example of how we currently leverage YAML templates to facilitate reusability and consistency for building and deploying our apps to Azure. The one thing the various development teams have in common are the languages they use for writing the APIs (.NET Core) and portals (Angular). Rather than continue […]
As the number of resources deployed into our Greenfield Azure tenant continues to rapidly grow, we always strive to be automated as much as possible. One question that kept coming up from developers was the topic of management like restarting app services. Back in the Brownfield days (or as I like to affectionately call it […]
I was having a conversation the other day with a PO (Product Owner) politely warning us about an avalanche of pending requests from various teams coming in for provisioning Azure resources and deploying code to meet new client commitments. Basic information is provided by the dev lead, and the PO will then manually create PBIs […]
Churchill's Blog 