Infrastructure as Code
Bicep, Terraform, Pulumi — declarative infrastructure, modules, state and policy guardrails for cloud platforms.
10 articlesin Infrastructure as Code
Terraform Workspaces: Multi-Environment Infrastructure
Terraform workspaces vs separate state files, workspace-based environment promotion, and when to use workspaces vs directory-per-env.
Terraform Modules: Reusable Infrastructure Patterns
Module composition, input variables, output values, module sources, versioning, and the Terraform Registry.
Terraform State Management: Remote Backends and Locking
Remote state backends (Azure Storage, S3, Terraform Cloud), state locking, state import, and disaster recovery for state files.
Secrets Management in IaC: No More Hardcoded Credentials
Azure Key Vault integration, Terraform sensitive variables, Pulumi secrets, and CI/CD secret injection patterns.
Pulumi with TypeScript: Type-Safe Infrastructure
Pulumi TypeScript SDK — type-safe resources, async outputs, stack references, and testing infrastructure with Jest.
Pulumi with Python: Infrastructure as Real Code
Pulumi Python SDK — stacks, resources, config, secrets, outputs, and ComponentResource for reusable infrastructure.
Policy as Code: Guardrails for Your Infrastructure
Azure Policy, OPA/Rego, Sentinel, and Checkov — enforce compliance, security, and cost rules as code in your IaC pipeline.
IaC Drift Detection: Keeping Infrastructure in Sync
Terraform plan for drift detection, Azure Policy compliance, drift remediation strategies, and automated drift alerting.
Bicep Modules: Composable Azure Infrastructure
Bicep syntax, modules, parameters, outputs, decorators, and the Bicep Registry for reusable infrastructure.
ARM Templates: Azure's Native Infrastructure as Code
ARM template structure, parameters, variables, outputs, dependsOn, Template Specs, and when to migrate to Bicep.