I ran six Terraform pipelines against one Azure subscription at the same time, all using the same service principal. Three began returning 429 errors within about four minutes.…
I ran six Terraform pipelines against one Azure subscription at the same time, all using the same service principal. Three started returning 429 errors within about four minutes.…
I have Windows Server VMs in Azure with the AADLoginForWindows extension, so interactive administrators can sign in over RDP with Entra ID. I also need Ansible and CI/CD…
How do you safely manage Entra ID role assignments and Privileged Identity Management (PIM) eligibility with Terraform? The deployment service principal needs a highly privileged role to assign…
I'm managing Entra ID role assignments and Privileged Identity Management eligibility with Terraform. The deployment service principals need highly privileged permissions—potentially enough to assign Global Administrator—which creates a…
I'm designing a configuration-driven Azure Landing Zone deployment using infrastructure as code, such as Bicep, and Azure DevOps. The difficult part is securing identity and permissions for operations…
We have several Terraform repositories hosted on on-premises GitHub Enterprise Server that deploy Azure infrastructure. Until now, deployments have been manual: an operator runs az login, then executes…
We have several Terraform repositories hosted on an on-premises GitHub Enterprise Server instance. They deploy Azure infrastructure across one or more subscriptions. Until now, deployments have been run…
I'm building an automation workflow for Microsoft Azure and want to use the Microsoft Graph API where appropriate. The workflow needs to create an application registration, create its…
I've noticed some unknown managed identities and service principals assigned as owners and contributors at the subscription level. Their names seem like random strings of characters and numbers,…