วีดีโอ

What about using a PAT instead of a SSH ? What would be the steps in that case?

What's the procedure when I want to access the module repository from a project within the same az DevOps organization?

Rakhmet

can we have a real example ! thank you

my favorite virtual machine in my environment is called "PrdTest" and I will allow no one to ever let me delete it. The subscription is just called "Pay-As-You-Go", so you know it's good.

Really useful thanks for this. 👌

Thanks man! Just getting into terraform and it’s awesome. What a journey it has been coming from manually setting up resources, to azure click ops, bicep and now this

Also enjoyed the video and purchased the book. Thanks for this!

This was really great thank you. I have been learning terraform/working with bicep for a while now but the way you broke this down really helped me understand where to set the iteration boundaries; your book has been requested through my work learning system! I wrote a very similar tf module for managing PIM groups (not Entra roles) and this will really help with refactoring in a similar way. Hopefully I could ask a question though: For managing PIM things the `azuread_users` and `azuread_groups` data sources are required for mapping users/groups to their object ids. For _n_ items if the data source call was encapsulated within the module would that not perform _n_ entra ad calls for potentially thousands of users/groups on every iteration of the module? Would it be reasonable to perform the initial data source call in the parent module and pass it in for re-use? I do not know enough about terraform to know if there's already some internal optimisation/caching but whenever I am doing things with Entra objects I try to do a single data lookup and reuse that list wherever possible.

I've just learned about your AT-AT series which turns out to be discussing exactly what I'm learning ATM. Thanks!

Can you help me with the Rocky Linux image source ID?

wow , this is wonderful. unfortunately the code is no more available in github... Is there a chance I can get a glimpse on. Many thanks

Great Video, Following Ur channel now thoroughly

thanks a lot , looking forward for more video on terraform with AWS as well

Can't we add the terraform-module repo as submodule to the main repo ? Atleast we are doing in our project. Although we are using bicep as Iac

😝😝

Great One Mate , Is there anyway you are covering for packer in Hashi Corp cloud ? let me know

Thank you very much for such a knowledgeable video. But I have a different scenario, how to consume or call terraform modules from one project to another project within the same organisation in azure devops by using PAT. Could you pls help here? @azure-terraformer #azure-terraformer Hoping for your reply🙂 Note - I have multiple repos in my repo to represent each resource, So I have storage account module with in it I have VNET lookup sub module calling, that is in different repo. Due to this dependency I have to setup the authentication before running terraform cmdlets. I am able to achieve this when module source is GitHub.

Great Video Mate, Wow

HI Thanks for All the Azure Video , Great explanation , I have a request to make with regards to ADO Pipeline through YAML along with the release cycle , if you cloud cover that would be great. Its a request not a demand , thanks for all the packer and azure terraform video

"Hi Mark, I recently completed the Terraform playlist and attended the live session, and I am thrilled to have discovered such a high-quality Azure Terraform tutorial on TH-cam. I successfully implemented the same approach in my project. I truly appreciate the effort you put into creating this content, although I am surprised that it hasn't received more views."

Great Video Mate ,Thanks a lot for this one , really helpful . But i believe as well we can get rid of the managed_image_name and managed_image_resource_group by using the shared_image_gallery and dhared_image_gallery_destination together

Thank you so much dude for this video. I was stuck banging my head on this one and this was a great help.

YO! Quick Question. Where can one find some good information on using Terraform to pull data out of spreadsheet and spit out an xml file to be ran as a script.

Great video. Really appreciate. It wuld be great, if this can be turned into a function module, so we can just call the module

You are trying to bend Bicep to match Terraform. For example we have tight controls where a resource group must preexist and we limit deployments to specific resource groups (no way a specific deployment pipeline would get full subscription access). So all the extra subscription stuff is less safe and unneeded. Also you do not need to put parameters into a bicep file (its why you have distinct bicep parameter files which can target different environments).

Thanks Mark!

My comment may have been deleted, so I'll repost. I don't think you're right about the .terraform.lock.hcl file. This should definitely be included into source control. The `.terraform` folder itself should be ignored. Here is the relevant blurb from terraform documentation: "Terraform automatically creates or updates the dependency lock file each time you run the terraform init command. You should include this file in your version control repository so that you can discuss potential changes to your external dependencies via code review, just as you would discuss potential changes to your configuration itself."

Hello Mark, just came here to tell you about Azure Verified Modules. Could you please throw some light on how do i am gonna use these in my main landing zones for deployment. I am clueless about these. Please make videos !

Can kou make a video on terraformer azure tool

If it's privileged, you DO want to setup a scheduled just-in-time group membership for the users in the list. If the role isn't privileged, you can let them always keep the role. This makes sure admins assume privileged roles for short periods only when they need them

Thanks for the review and tips, really appreciate it. Will look to refactor based on the encapsulation :)

Thanks! Will buy your book right away.

Hey Mark, great video. I have a question if you don't mind. Around 1:13:00 you mention using providers in both the root and child/reusable modules. I thought this was against Hashicorp advice. Could you explain a bit further what you meant here please?

Hey I am big fan of this YT channel. Being a Az TF engineer it helps me a lot. I wanted to ask could you please make some videos in 2025 about how to architect your Landing zone setup. Do we need to use CAF Terraform Levels.

Hey Mark, it was great to be at HashiConf with you! The line to Mark's book signing was way long. You were a star this year!

I totally agree with keeping the code as simple and readable as possible. In my experience, classic developers tend to write less readable code due to their habit to write dry code with other languages. Your video is a good starting point for a discussion between dev and ops in a devops team, where generally there are more dev than ops.

Please provide the URL of the PR.

Thank you for your content!

🤣 That hallway track setting was definitely bigger than what I expected. You nailed the humor which is missing in these conference talks.

Hello Mark Can you please provide your blog link other than medium

Dude, really love how you walk through the problem and explain it from a terraform POV. Love it!

Hi Mark, you asked about the pre-flight validation in Bicep. It is a feature of ARM, not Bicep per se, and what it does is, it simulates a deployment, so it sends your ARM deployment template (authored directly as JSON ARM or transpiled from Bicep DLS) to the ARM engine and does a series of validations like: 'Does that resource type / Azure service exist in the region I selected?', 'Do I have sufficient quota (CPU cores or similar) for deploying the resources I declared?', 'Are the resource names unique in the given scope?' or 'Will this deployment be stopped by some Azure Policy assignment?', etc. Something that requires context of the 'target environment' that might be difficult to embed as set of input validation rules. Also, preflight and what-if are two separate things.

I follow your terraform videos regularly. How can i buy this book? I am from India?

Thank you for the book!

Hello Azure Terraformer I hope you are well. I visited your TH-cam Channel. Your content is Excellent. But your Channel is not growing, Because your Content title and Description are not SEO-friendly and do not have Enough Rank tags. This is why there is no Content Coming to the top of TH-cam. As a result, your video SEO Score is very low, according to VidiQ, (your channel's video's SEO score is 23.3/ out of 100, which should be 80+). If you want, I can make it 80+, which will help your channel grow faster. If you SEO your videos Properly then the Channel Progress will be very Fast & Subscribers and Views will Increase. If you want I can solve problems and help you rank your videos Better. If you are Interested Please Let me know. Best Regards, AL-AMIN (TH-cam Video SEO Expert)

As soon as I implemented the multi-environment part, my (dev & prod) pipeline prints "var.azure_credentials" and then just keeps going without making any progress. Why could this be? The credentials seem right.