Building Infrastructure-as-Code (IaC) with Azure Bicep: Part 2
3h 34mAdvanced2023-12-14
Authors
Elkhan Yusubov
Cloud Architect Manager at T-REX Solutions, Microsoft MCT and MVP
Course details
This course is designed for cloud engineers, architects, and developers seeking to modernize their infrastructure management with Azure Bicep and builds on top of the lessons taught in Building Infrastructure-as-Code (IaC) with Azure Bicep: Part 1. Join instructor and Microsoft MVP Elkhan Yusubov as he covers—through a series of demos—how to work with Azure tenant resources, automate infrastructure code deployment processes, and create reusable infrastructure code. Learn about best practices for code management via template specs, management of multiple environments with environment-driven deployments, securing your infrastructure code deployment process, and securing your Azure deployment environments.
Skills covered
DevOps FoundationsAdvancedDevOps
Concepts
0. Introduction
- 01 - Learning Azure Bicep
- 02 - What you should know
- 03 - Understanding KinetEco's challenges
1. Working with Azure Tenant Resources
- 04 - Understanding Azure resource hierarchy
- 05 - Understanding resource IDs
- 06 - Demo - Resource IDs in Azure Portal
- 07 - Deploying to target scoped resources
- 08 - Demo - Deploying subscription-scoped resources
- 09 - Governing Azure resources
- 10 - Demo - Working with a management group
2. Automating Deployments
- 11 - Why automate IaC deployment
- 12 - Introduction to GitHub workflows
- 13 - Basics of GitHub workflows
- 14 - GitHub workflow YAML document structure
- 15 - Demo - Creating GitHub deployment actions
- 16 - Adding preflight validation into the build pipeline
- 17 - Adding preflight validation - Secrets
- 18 - Demo of the preflight validation
- 19 - Demo - Updating pipeline test run
- 20 - Demo - Completed validation run
- 21 - Adding quality control with linting
- 22 - Demo - Building quality controls into the GitHub pipeline
3. Creating Reusable Infrastructure Code
- 23 - Understanding the need for reusable code
- 24 - Reasons for creating reusable code
- 25 - Options in the creation of reusable infrastructure code
- 26 - Introducing template specs to the KinetEco team
- 27 - Demo - Creating and deploying a template spec
- 28 - Understanding the management cycle of the template specs
- 29 - Demo - Creating pipeline updates
- 30 - Demo - Checking deployed resources
- 31 - Demo - Working on template spec versioning and updates
- 32 - Demo - Deploying template spec testing
4. Implementing Best Practices
- 33 - Adding quality controls to infrastructure as code projects
- 34 - Environment-driven infrastructure setup
- 35 - Testing deployed endpoints and resources
- 36 - Demo - Adding a test into a GitHub pipeline
- 37 - Demo - Smoke and negative n test
- 38 - Best practices to manage IaC solutions across environments
- 39 - Implementing environment-driven deployment setup
- 40 - Demo - Part 2 deployment file walk-through
- 41 - Demo - Part 3 Bicep module update
- 42 - Demo - Part 4 workflow file update
- 43 - Demo - Part 5 checking workflow file
- 44 - Using Bicep parameters with multiple environments
- 45 - Demo - Using Bicep parameters with multiple environments
- 46 - Demo - Update failed parameter
- 47 - Best practices to secure your GitHub repos and pipelines
- 48 - Best practices to secure GitHub projects and secrets
- 49 - Demo - Securing GitHub, part 1
- 50 - Demo - Securing GitHub, part 2
- 51 - Demo - Securing GitHub, part 3
- 52 - Best practices to secure your Azure environment
Conclusion
- 53 - Next steps
Related courses
- AWS Certified DevOps Engineer Professional (DOP-C02) Cert Prep
- DevOps Foundations: DevSecOps
- Test-Driven Development in an AI World
- Building a Multicloud Security Program: Strategy, Implementation, and Emerging Trends
- Microservices Security Workshop: From Build to Production
- Improve Meetings Using Lean Thinking
- Introduction to Azure Bicep: Creating and Deploying Resources
- Advanced Threat Modeling and Risk Assessment in DevSecOps