AzOps - The missing link for managing Azure using Bicep and ARM - Simon Wåhlin - PSConfEU 2023 скачать в хорошем качестве

AzOps - The missing link for managing Azure using Bicep and ARM - Simon Wåhlin - PSConfEU 2023

In this session, Simon discusses the management and organization of Azure environments using infrastructure as code principles. They explain the categorization of components based on their purpose, such as connectivity and identity. They highlight the benefits of using infrastructure as code, including consistency, reproducibility, and controlled changes. The main speaker introduces ACOps, a project by Microsoft hosted on GitHub, and explains its functionalities and workflows. They demonstrate the process of exporting ARM templates and creating a folder structure using ACOps. The speaker also discusses the use of Bicep files as the source of truth for deployment and the validation process. They emphasize the importance of reviewing and approving pull requests before merging them. The speaker addresses the issue of empty resource groups and mentions extending the deployment workflow with additional logic and custom actions. They discuss permissions and access in the Azure portal and mention a solution for deleting resources. The main speaker concludes by recommending ACOps for central governance and highlighting its ease of use and minimal configuration. Chapters: 00:00:00 AzOps - The missing link for managing Azure using Bicep and ARM - Simon Wåhlin - PSConfEU 2023 00:00:07 Introduction to Azure Evolution and Subscription Setup 00:02:01 Introducing Azure Learning Zones and Security Risks 00:12:19 The Importance of Infrastructure as Code 00:15:09 Leveraging Git and ACOPS for Safer Changes 00:18:33 Introduction to the folder structure and management group hierarchy 00:31:10 Auto-generated folder structure for ARM templates 00:34:23 Triggering validate pipeline for new storage account 00:36:01 Checking the status of the push action 00:36:14 Deploying to Azure: Pull Request and Validation Process 00:37:50 Git Workaround: Creating a Template for Empty Resource Group 00:38:30 Extending Deployment Workflow with PS Rule or Other Logic 00:40:13 Azure PowerShell resource deployment command limitations 00:40:46 PowerShell supports armed parameter files, not bicep param files. 00:41:59 Overcoming Contributor Restrictions in Azure Portal 00:44:23 AC Ops Cannot Remove Custom Resources 00:46:28 Introduction to root management groups and access delegation