Iacs on The DevOps Jedi

Exporting Azure Management Group Activity Logs

Tue, 12 Mar 2024 06:00:00 +0000

I’ve been working with Management Groups a lot recently in my day job and have really seen the benefit of being able to enforce governance by assigning RBAC roles and policies once, and have all new subscriptions inherit them. However, I soon realised there was no way in the Azure Portal or the native Azure RM Terraform provider to export the Activity Logs to a Log Analytics Workspace for use with Sentinel, so I decided to figure out a solution to this.

Creating A Working Powershell Based Azure Function With Terraform

Sun, 10 Sep 2023 16:00:00 +0000

This is a post I’ve wanted to write for a while, but was one of those side projects I’ve picked up and put down a few times due to other priorities getting in the way. This idea came about because I wrote a PowerShell script to perform some housekeeping actions in Azure and I wanted it to run unattended on a scheduled basis.

How I Chose An Infrastructure As Code Tool

Fri, 06 Jan 2023 18:00:00 +0000

This post looks into how, and why, I selected my current Infrastructure as Code tool of choice for my organisation.