Over the last few weeks this series has built up a fair set of rules. Module boundaries decide what each module is responsible for. Calling conventions decide how those modules get pinned, what goes in and what comes out. Pinned sources, typed inputs, validated variables, outputs treated as a contract, providers passed down rather than … Read more
Terraform repo structure explained: how module repos, golden paths, and consumer repos combine to build a governed, reusable Azure platform.
I want to talk about the gap between the Terraform you wrote on day one and the Terraform you’re still running two years later, because that gap is where most of the pain in a mature platform actually lives. Not in the initial build. In everything that happens to your modules and providers after nobody’s … Read more
Shadow AI means Claude Code, Lovable and unsanctioned tools entering your estate unseen. Here’s what platform teams can actually detect.
AI tools generate code fast. Your pipeline needs to catch what they get wrong. Here’s how to build a scanning layer across IaC, containers, and application code.
Azure DevOps vs GitHub Actions: a practitioner comparison covering pipelines, templates, federated identity, GitHub Copilot, and when a hybrid approach makes sense
Learn how to build a production-grade Terraform pipeline on GitHub Actions with OIDC authentication, self-hosted runners, composite actions, gated approvals, and drift detection on Azure.
Learn GitHub Workflow fundamentals with a practical, real-world approach. Understand triggers, jobs, runners, contexts, and secrets—especially if you’re coming from Azure DevOps.
Learn how to avoid common mistakes within your Terraform code and modules
Learn how to use Terraform’s native test framework to validate Azure modules, prevent breaking changes, and integrate tests into Azure DevOps pipelines.