Terraform module source, pinning, inputs and outputs: the calling conventions that let platform teams change modules on Azure without breaking every consumer.
I want to talk about the gap between the Terraform you wrote on day one and the Terraform you’re still running two years later, because that gap is where most of the pain in a mature platform actually lives. Not in the initial build. In everything that happens to your modules and providers after nobody’s … Read more
Shadow AI means Claude Code, Lovable and unsanctioned tools entering your estate unseen. Here’s what platform teams can actually detect.
Learn GitHub Workflow fundamentals with a practical, real-world approach. Understand triggers, jobs, runners, contexts, and secrets—especially if you’re coming from Azure DevOps.
Learn how to use Terraform’s native test framework to validate Azure modules, prevent breaking changes, and integrate tests into Azure DevOps pipelines.
Self-Service Infrastructure: Turning Human Intent into Governed DevOps Automation
Explore how to build a self-service Azure Service Catalog using IaC, DevOps pipelines, and governance to empower teams without bottlenecks.
Learn how to estimate Terraform infrastructure costs in pull requests using Infracost and Azure DevOps, enabling shift-left cost governance.
I recently wrote about the importance of protecting your Terraform state files and the Azure Storage accounts that hold them. One of the recurring challenges in real-world environments is striking the right balance between security and operability — specifically, how do we fully lock down a storage account to prevent public access, while still allowing … Read more
Learn how to secure Terraform state in Azure using Entra ID, RBAC, private storage, and ephemeral resources to prevent secrets leaking.