TL;DR Remember to associate a user defined route and enable service endpoints on your API Management (APIM) subnet when deploying in an internal network in a Virtual WAN or other forced routing scenario.
read more
TL;DR Stop providing your Terraform identities with owner permissions on your subscriptions!
read more
TL;DR Fortify your Azure Monitoring with custom log ingestion to log analytics workspaces!
read more
TL;DR Utilize user-assigned or system-assigned managed identities where this supports your use case.
read more
TL;DR Terraform supports using Entra ID authentication to Azure Storage Accounts, and you can easily enable it.
read more
TL;DR List Azure role assignments and custom role definitions recursively with PowerShell and Azure CLI.
read more