Defining an IaC strategy — quick notes
IaC strategy — quick notes
| Practice | Detail |
|---|---|
| Store | Templates and modules in source control, PR-reviewed |
| Test lower target | Lint/static → validate/preflight → what-if → deploy and test |
| Promote | One shared template/set, parameter file per environment |
| Test production | Validate/preflight → what-if → review and approve |
| Deploy | Approved pipeline for promoted environments; no direct control-plane changes |
| Preview | what-if predicts target-state changes; review limits/noise |
| Safety | Template redeployment is idempotent; custom runtime actions need retry safety |
Anti-pattern: separate template copies per environment. They drift, and what you validated is not what you promote.
Sources: https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-400 · https://learn.microsoft.com/en-us/azure/well-architected/operational-excellence/workload-supply-chain · https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview · https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/parameter-files · https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/add-template-to-azure-pipelines · https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter · https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-preflight · https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-what-if · https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-history · https://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log · https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-script-template