Choosing a configuration management technology — quick notes
Configuration management — quick notes
| Need | Tool |
|---|---|
| Azure resource topology | ARM / Bicep / Terraform |
| Ongoing OS/application-state audit and remediation | Azure Machine Configuration (+ Arc for hybrid) |
| One-time Azure VM guest action | ARM/Bicep-deployed VM extension with an idempotent script |
| Runtime app settings | Azure App Configuration |
| Shared pipeline values/secrets | Azure Pipelines variable groups |
| Fact | Date |
|---|---|
| Azure Automation State Configuration retires | 30 Sep 2027 |
| Azure Automation DSC for Linux retired | 30 Sep 2023 |
| Successor | Azure Machine Configuration (+ Arc-enabled servers for hybrid) |
Traps
- ARM/Bicep can deploy an extension that changes guest state, but Machine Configuration supplies ongoing audit and remediation.
- Bicep files are idempotent; an embedded imperative script must be written that way.
Sources: https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-400 · https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/01-overview-concepts · https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview · https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/overview · https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-deploy-vm-extensions · https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows · https://learn.microsoft.com/en-us/azure/azure-app-configuration/quickstart-aspnet-core-app · https://learn.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups · https://learn.microsoft.com/en-us/azure/developer/terraform/overview