C#, .NET, Azure, IaC, DevOps, DevSecOps
The error "Failed to get existing workspaces: containers.Client#ListBlobs: Failure responding to request: StatusCode=403" in Terraform with an Azure backend indicates a permission issue. To resolve this, assign the Storage Blob Data Contributor or Owner role to the user or service principal. After assignment, use 'az logout' and 'az login -t [tenant id]' commands to refresh the token.
In a project involving infrastructure as code (IaC) with terraform, Microsoft Entra ID security groups were manually created in the Azure portal. To avoid recreation, the import feature in terraform was used to bring existing groups into terraform state. This involved obtaining object IDs and descriptions, adding the groups as resources in terraform code, and importing them into terraform state.
During a penetration test preparation, an issue arose where multiple test accounts couldn't be invited as guest users to Microsoft Entra ID. The problem was due to all emails being redirected to one address. The takeaway is to ensure that the email addresses invited are not redirections to an existing user account.
blog.rufer.be 