Get Practical

Azure Introduces Terraform Export Feature in Private Preview: A New Era for DevOps and IaC

Microsoft Azure has taken a significant step forward for Infrastructure as Code (IaC) enthusiasts with the latest private preview feature in the Azure Portal – the ability to export Terraform configurations directly. Previously, exporting configurations was limited to ARM templates, but now you can generate Terraform and Bicep configurations right from the portal. This enhancement makes Azure even more accessible and streamlined for DevOps workflows.

Currently in Private Preview

The new export feature is currently in private preview, so it’s not yet available to all users. However, Microsoft is preparing to announce the public preview very soon, making this tool accessible to a wider audience. In the meantime, if you want to stay updated on the latest news and announcements about this feature, you can sign up to receive updates directly from Microsoft using this form.

Why is This a Game-Changer?

For years, Azure users could only export configurations as ARM templates, which are powerful but have a steeper learning curve compared to Terraform. With Terraform’s growing popularity due to its flexibility and cross-platform capabilities, Microsoft’s decision to introduce direct Terraform exports marks a shift towards more inclusive DevOps practices.

This new capability not only simplifies the process of moving to Terraform but also bridges the gap for teams transitioning from ARM templates to more modern IaC approaches. Automating and streamlining this process accelerates workflows, reduces human error, and empowers teams to better manage their cloud infrastructure.

Continue reading “Azure Introduces Terraform Export Feature in Private Preview: A New Era for DevOps and IaC”

How to Implement Azure Bastion to Securely Access Azure Virtual Machines

When managing cloud-based virtual machines, ensuring secure access is critical. Exposing RDP/SSH ports over the internet introduces potential security vulnerabilities. Azure Bastion provides a secure, fully managed solution to connect to Azure VMs without needing to expose these ports to the public internet.

What is Azure Bastion?

Azure Bastion is a PaaS service that allows you to securely connect to your Azure Virtual Machines (VMs) using RDP or SSH, directly from the Azure Portal without the need to expose these ports via a public IP.

Minimum Required RBAC Roles for Azure Bastion Access

To connect to a VM using Azure Bastion, the user must have the appropriate permissions. At a minimum, they will need the following role assignments:

Reader role on the target VM: This grants read access to the VM, allowing the user to see the VM’s configuration but not modify it.
Reader role on the network interface (NIC) associated with the VM’s private IP address: This ensures the user can read network information for the VM.
Reader role on the Azure Bastion resource: This grants access to the Bastion host itself, allowing the user to initiate connections through Bastion.

If the VM is in a peered virtual network (cross-VNet connections), the following additional role assignment is required:

Reader Role on the virtual network (VNet) of the target VM: This is necessary if you are connecting to a VM across VNet peering.

Continue reading “How to Implement Azure Bastion to Securely Access Azure Virtual Machines”

Exploring the Webex API: A Step-by-Step Guide to Generating Your Access Token

Hey guys!

Today, let’s dive into the Webex API and how you can leverage it to build your own custom integrations.

I recently began exploring the Webex REST API, but I wanted to use my own code rather than relying only on the web browser.
While the Webex Developer Portal allows you to perform all actions directly online once you’re logged in (automatically using your token for requests), I preferred a more flexible approach that didn’t tie me to the browser.

So, in this post, I’ll show you how to generate your own access token to use in your custom code.

So, these are the steps you will have to do to achieve this:

Continue reading “Exploring the Webex API: A Step-by-Step Guide to Generating Your Access Token”

Navigating the Transition from Azure Automation Update Management to Azure Update Manager: A Comprehensive Guide

As cloud technologies evolve, so too must the tools we rely on to maintain and secure our environments. Microsoft’s recent announcement regarding the retirement of Azure Automation Update Management is a prime example of this continuous evolution. By 31 August 2024, this service, along with the Log Analytics agent it uses, will be officially retired. Users will need to transition to the more advanced Azure Update Manager to ensure their virtual machines remain up-to-date and secure.

This blog post will explore the implications of this transition, the benefits of migrating to Azure Update Manager, and provide a detailed step-by-step guide for the most complex migration scenario—manual migration. This approach is ideal for those with intricate environments that require a high degree of customization and control.

The Shift to Azure Update Manager: What It Means for You

Azure Automation Update Management has been a reliable tool for managing the updates of virtual machines (VMs). However, with its retirement on the horizon, Microsoft is pushing for a transition to Azure Update Manager, a more integrated and feature-rich platform designed to offer greater flexibility, control, and scalability.

Why Migrate to Azure Update Manager?

Azure Update Manager is not just a replacement; it’s a significant upgrade. Here are some of the key improvements:

– Seamless Integration: Azure Update Manager is built natively into Azure’s infrastructure, providing zero-step onboarding for Azure VMs and Azure Stack HCI VMs, and easy integration with Azure Arc for managing non-Azure servers.

– Enhanced Control: With granular access control and role-based access control (RBAC), you can finely tune who has access to specific update management tasks, reducing the risk of unauthorized changes.

– Flexible Patching Options: Azure Update Manager offers advanced features such as customer-defined maintenance schedules, Azure-orchestrated automated patching, and hotpatching, which minimizes downtime by applying updates without requiring a reboot.

– Cost Efficiency: For managing Azure VMs and Azure Stack HCI VMs, Azure Update Manager is available at no extra charge. For Azure Arc-enabled servers, there’s a nominal fee of $5 per server per month.

Continue reading “Navigating the Transition from Azure Automation Update Management to Azure Update Manager: A Comprehensive Guide”

Integrate Other Clouds with Azure Using the Multicloud Connector

Introduction

As businesses adopt multi-cloud strategies to leverage the unique strengths of various cloud providers, managing these environments can become complex. Microsoft’s Azure Arc Multicloud Connector provides a streamlined solution to integrate and manage resources across different cloud platforms, specifically focusing on AWS. This blog post will explore the capabilities of the Azure Arc Multicloud Connector and guide you through a step-by-step lab to connect AWS resources to Azure.

Key Features of the Multicloud Connector

1. Unified Inventory: The Multicloud Connector automatically collects metadata from external cloud resources, providing a comprehensive view within the Azure portal. This helps in maintaining a consistent inventory across cloud environments.
2. Arc Onboarding: It facilitates the onboarding of AWS EC2 instances to Azure Arc, allowing advanced management features like policy enforcement, monitoring, and configuration management.
3. Consistent Governance: Apply Azure policies and role-based access controls (RBAC) to resources in external clouds, ensuring uniform security and compliance standards across all environments.
4. Enhanced Management: Utilize Azure Arc capabilities for onboarded resources, including vulnerability scanning and deployment automation.

Implementation Steps

Prerequisites

– An Azure subscription with Contributor access.
– An AWS account with AmazonEC2FullAccess permissions.
– Azure Arc and required resource providers registered (Microsoft.HybridCompute, Microsoft.HybridConnectivity, Microsoft.AwsConnector).

Continue reading “Integrate Other Clouds with Azure Using the Multicloud Connector”