Handcrafted, AI-free blog posts about DevOps, DevSecOps, application security, web development, Azure and similar topics
In a project involving infrastructure as code (IaC) with terraform, Microsoft Entra ID security groups were manually created in the Azure portal. To avoid recreation, the import feature in terraform was used to bring existing groups into terraform state. This involved obtaining object IDs and descriptions, adding the groups as resources in terraform code, and importing them into terraform state.
The blog post explains the preferred setup for infrastructure deployments using Infrastructure as Code (IaC) with Terraform and Azure DevOps YAML pipelines. The author discusses the organization of service connections and security settings, and provides an in-depth look at the pipeline structure and tasks within each stage. The text also mentions an important update regarding Azure Pipelines Terraform tasks and offers a practical approach on pipeline re-runs after local fixes.
The Azure webhook consumer/receiver failed to receive any events apart from heartbeat events due to an error during the webhook's update. The issue, which originated from the event filter altering from a wildcard to [], was fixed by an event filter update. To prevent similar issues, an Azure Monitor Metric Alert was established. It signals less than seven executions of the Azure Function per hour and emails the Azure Resource Manager (ARM) role members on each alert,
This post is about the integration of SonarCloud analysis in Azure DevOps YAML pipelines starting from a basic scenario that analyzes a repository containing a .NET Core 7 solution and ending up with a more complex scenario that analyzes a repository that additionally contains a React application and Terraform files.
When working with Azure Monitor alerts that trigger email notifications, there is a tiny little detail to consider to make sure the email notifications get delivered as expected. But let's first have a look at the setup of an Azure Monitor alert. In my case, I set up an Azure Monitor metric alert and action... Continue Reading →
As already stated in the title, this blog post shows a simple way to move Terraform state between Azure Blob Storage containers. Terraform version: Terraform v1.3.7Azure Storage Account kind: StorageV2 (general purpose v2) To perform the move, proceed as follows: Execute terraform init with the actual terraform backend configuration Execute terraform apply with the actual... Continue Reading →
azurerm (Azure resource manager) provider for terraform allows definition of Key Vault access policies either within the azurerm_key_vault resource via the access_policy block or by using the azurerm_key_vault_access_policy resource (using both methods for access policy management leads to conflicts). The advantage of defining Key Vault access policies within the azurerm_key_vault resource over defining azurerm_key_vault_access_policy resource(s)... Continue Reading →
