TERRAFORM
Writing Reusable Terraform Modules
Learn how to write reusable Terraform modules for Azure without creating overly flexible abstractions that become harder to maintain than the resources they replace.
Articles
Cloud architecture, Terraform, Azure, and more — written from the field.
TERRAFORM
Terraform Module Design Best Practices
Practical advice for designing Terraform modules that remain reusable, secure and maintainable as your Azure environment grows.
TERRAFORM
Dynamic Blocks Explained
A practical guide to using Terraform dynamic blocks for repeatable Azure configuration without creating unreadable modules.
AZURE • TERRAFORM
Deploying Azure Policy with Terraform
A practical guide to defining, assigning and remediating Azure Policy with Terraform, based on lessons from enterprise Azure Landing Zone deployments.
TERRAFORM
Terraform Functions Every Engineer Should Know
A practical guide to the Terraform functions that make Azure infrastructure code cleaner, safer and easier to operate at enterprise scale.
AZURE
Azure Bastion: Is It Worth It?
Azure Bastion provides secure browser-based RDP and SSH access to Azure virtual machines without exposing management ports. Here's when it's worth paying for, when it...
DEVOPS
A Sane Default GitHub Ruleset for Protecting Main
A practical GitHub ruleset you can import to protect your main branch, block accidental direct pushes, and keep small public projects tidy.
AZURE
Five Things I Look At During an Azure Health Check
A practical guide to the five areas I examine during an Azure health check, from governance and identity to monitoring, security and genuine cost savings....
TERRAFORM
Terraform for_each vs count: Choosing the Right Tool for Azure Infrastructure
Learn when to use Terraform count and for_each in Azure, why the wrong choice causes unnecessary resource recreation, and how to avoid common enterprise pitfalls....
TERRAFORM
Terraform Data Sources Explained: Reading Azure Without Rebuilding It
Learn how Terraform data sources work in Azure, when to use them, and the common mistakes that catch engineers out in enterprise Landing Zone deployments....
TERRAFORM
Terraform Variables vs Locals vs Outputs: Understanding Where Each One Belongs
Variables, locals and outputs all solve different problems in Terraform. Understanding where each belongs makes your modules easier to read, easier to maintain and much...
AZURE POLICY • AZURE
Azure Policy Explained: Governance Without the Guesswork
Azure Policy helps you enforce standards, improve governance, and prevent configuration drift across your Azure estate. Here's how it works and how to avoid the...
COST MANAGEMENT • AUTOMATION • AZURE
Logic Apps to Automate Cost Savings
A few logic apps to help control costs of Disks and Public IP addresses. Can easily be changed to support more resources.
BLOGGING • AUTOMATION
How do I blog? And how do I automate some of it!
An article about how I blog and how I automate some of my social media actions for the blog.
TERRAFORM • AUTOMATION
Terraform Modules, let's make some automations
Discussing how and what you could automate in your Terraform modules.
TERRAFORM
Terraform Modules, a little bit of repeating
Talking about how and where you create repetition with modules.
TERRAFORM
Terraform Modules, organising the modules
Talking about some of the take aways from my experience of building Terraform modules.
TERRAFORM
Terraform Modules, what are they?
An overview of Terraform modules and talking about processes around them.
AZURE • TERRAFORM
Terraform Key Vault Access Policies: When You Need Both Approaches
A workaround for situations where Terraform Key Vault access policies don't behave quite how you expect.
AZURE • TERRAFORM
Making Enterprise Scale Outputs Actually Useful
Looking into how to make the outputs in Enterprise Scale a little more usable.