Microsoft Fabric got an official Terraform provider, it went GA back in April, and it still expects you to bring a second provider along for half the job. Here’s the split nobody spells out up front. I use Fabric most days, but rarely on my own terms: every customer has their own idea of how…
Deployment stacks give you Complete mode without the blast radius, and deny settings are the reason to adopt them. Then I moved a protected resource to another resource group and watched the protection stay behind.
Bicep quietly shipped a way to ask "do you already exist?" from inside a resource block. It should retire a workaround I’ve been carrying around for years. This one turned up on a routine scan for what had shipped in Bicep recently, and the syntax read like the kind of thing that looks clean in…
Azure Firewall rules as code, shifted left: catch CIDR typos and policy errors in the CI pipeline before they ever reach production.
Part two of Azure Firewall rules as code: plugging modular rule definitions into Azure DevOps pipelines so changes are rehearsed, automated and safe.
Azure Firewall rules as code, part one: build a modular, reusable lab deployment that brings consistency and automation to firewall rule management.