(Part-2) Leverage Bicep: Standard model to Automate Azure IaaS deployment
Published Apr 28 2023 12:19 PM 5,995 Views
Microsoft

Chapter 2

<< Chapter 1          Chater 3 >>

 

 

  • Tips
    Install extensions from VS Code
    AkiraKoike_0-1682664306262.png

    -- Only GitHub Copilot is available for a fee.


    Azure Resource manager Tools Extensions

    AkiraKoike_0-1682673652583.png


    Bicep Extensions

    AkiraKoike_1-1682673946759.png

     

    Bicep Visualizer
    AkiraKoike_0-1682674265111.png


    GitHub Copilot
    AkiraKoike_1-1682674522578.png

     

  • Sample code and explanation

    localtemplate/bicep/BICEP at master · akkoike/localtemplate (github.com)

    - Application sequence mapping
    AkiraKoike_0-1682681099339.pngAkiraKoike_0-1682682528998.pngAkiraKoike_1-1682682585973.png

     

    Based on vNET Hub&Spoke environment. Frequently updated settings were individually defined in JSON configuration files. Azure KeyVault was created first because I wanted to obtain a secure password using the getSecret function. RBAC and Diagnostic Setting are done at the end of the process for extended functions. NSG rules and Azure Firewall ruleset basically stated only the targets that should be allowed. All external communication from Azure VM is configured with a default route through Azure Firewall. Only Log Analytics with AMPLS may not work properly.

    Almost 30 USD / day
    AkiraKoike_2-1682682832324.png

     

>> Next Chapter (Traps and Avoidance)

<< Chapter 1

 

Version history
Last update:
‎May 11 2023 10:24 PM
Updated by: