The DevOps Lab - Channel 9

In this video, we'll go over the what, why, and how of Project Bicep and how it's going to make deploying infrastructure to Azure even easier. We'll go over the basics of what makes Bicep useful, as well as show off some of the more advanced capabilities. Jump To:[01:32] - what is project bicep[04:00] - get started with bicep & demo[10:44] - workflow for authoring and deploying bicep code[12:45] - adding complexity and wiring resources together[15:20] - moving from ARM template -> bicep with the decompiler[17:20] - using modules[21:30] - Release status of bicep Learn More:Azure / BICEP on GithubDevOps Favorite Links:Azure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

Infrastructure as code is one of the most important and underutilized aspects of DevOps. In this episode of DevOps Lab, we will talk about a cool way to handle Infrastructure as code for Azure using Farmer which is a .NET library which is designed to make repeatable Azure deployments easy. It's built on top of ARM templates and the Azure CLI. We will demonstrate how Farmer can be used for a specific use case. Jump To: [02:06] About Farmer[03:45] Demo[11:46] How much of Azure can we use with Farmer?Learn More: Farmer - Making Repeatable Azure Deployments EasyAzure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

We'll walk through the concepts and features of MLflow support in Azure Machine Learning. We'll be showing a few examples on how to manage your machine learning assets using MLflow in variety of workflows including GitHub Actions. Jump To: [01:00] What is Mlflow?[02:16] Why MLflow is useful[03:35] Intro to using AzureML and MLflow together[05:20] Demo - How to start tracking with MLflow in AzureML[08:00] Demo – Using MLflow Projects with AzureML[10:33] Why use MLflow and AzureML together[16:23] Walk through CI/CD example with MLflow, AzureML and GitHub ActionsMore Information: MLflow Tracking for ML experiments - Azure Machine Learning | Microsoft DocsMachineLearningNotebooks/how-to-use-azureml/ml-frameworks/using-mlflow at master Azure/MachineLearningNotebooks (github.com)MachineLearningNotebooks/how-to-use-azureml/track-and-monitor-experiments/using-mlflow at master · Azure/MachineLearningNotebooks (github.com)

A deep dive into understanding how to manage, provision and realize the most value from your enterprise and pay as you go DevTest subscriptions. We'll look at Azure management groups, the enrollment portal and how to best think about the various stages of developer and pre-production data and compute. Jump To: [02:11] what is DevTest[02:36] Inner loop development in the context of developing for production[03:43] Understanding pre-production stages in a DevTest process[04:42] Organizational DevTest offers[06:30] Individual Credits Subscriptions for DevTest vs Organizational DevTest[07:18] Azure pricing calculator[08:30] Understanding Pay-as-You Go and Pay as You Go DevTest for organizations[09:35] Understanding Azure AD directory tenants and Azure subscription associations[10:55] Understanding Forests, Domains, nested hierarchies and Azure[13:00] Translating AD concepts to Azure with RBAC, IAM[14:15] Understanding the Azure enrollment portal[15:30] Creating DevTest accounts in the Azure enrollment portal[16:30] EA DevTest vs Pay as You Go DevTest[18:00] Managing subscription with Azure Management groups[19:00] Managed access to data by resource isolationLearn More: Enterprise Dev/Test | Microsoft AzurePay-As-You-Go Dev/Test | Microsoft AzureAzure management groups documentation | Microsoft DocsAzure EA portal administration | Microsoft Docs Azure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

You are embarking on a new project and have decided to go full Serverless and try out that JAMStack. After all, our application is a web front end and some API's, so Serverless is the perfect model for us. But how do we build and deploy a static application with confidence? Jump To: [00:54] – What is it? [02:34] – Create a Static Web App [10:00] – GitHub Actions workflow [13:12] – Pull RequestsMore information: What is Azure Static Web Apps Preview?Publish an Angular, React, Svelte, or Vue JavaScript app with Azure Static Web AppsBlazor WASM app and some APIs(video) Getting started with Azure SentinelAzure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

A deep dive into understanding how you can leverage individual credits for enterprise work, and drive innovation for lasting impact. We'll look at how you can use these subscriptions, their benefits and how you can enable various security scenarios and protocols leveraging Azure AD. Jump To: [01:20] - introduction[03:30] - pricing calculator showing discounts[05:22] - activating your credit subscription[06:45] - personal identity infrastructures, your own AAD![08:52] - credit limits so you don't overspend[09:45] - experimentation and isolation – security by separation[10:37] - removing credit limits[12:35] - your own azure cloud[13:00] - tying DevOps tools to your credit subscription[13:20] - inner loops, IAC and ARM templates[14:25] - inviting a company admin for monitoring or awareness ( organizational control and RBAC for Azure subscriptions)[15:00] - adding user or admin oversight for security monitoring[16:00] - adding external users vs creating new users[17:30] - changing offer types Learn More: Monthly Azure Credit for Visual Studio Subscribers | Microsoft AzurePricing Details | Visual Studio - Visual StudioChange Azure subscription offer | Microsoft DocsAzure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

Sarah and Damien discuss Azure Sentinel – Microsoft's cloud SIEM solution – and how you can use this to implement security monitoring for your AKS clusters. Learn More: Monitoring AKS with Azure SentinelTop 10 Best Practices for Azure Security Microsoft Cybersecurity Reference Architecture (MCRA) Azure Security Community Webinars Azure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

Infrastructure as code based provisioning can easily grow to the point of chaos. Sentinel, which is HashiCorp's Policy as Code framework, can easily configure guardrails that are enforced within the provisioning workflow to protect against changes that don't follow security, regulatory compliance, or internal business policies. Check out how to apply some simple policies to your Azure based Terraform configurations! Jump To: [02:56] Demo: Validating a configuration is using the appropriate Azure VM type with Sentinel and HashiCorp Terraform Cloud[05:18] Walking through the previously applied Sentinel policy to check for specific Azure VM typesLearn More: More information Getting StartedLanding Zones in Azure with TerraformGetting started with Azure SentinelAzure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

With so many CI and CD tools in the wild, how do you know which one to use? Well, why choose just 1? In this episode, we're going to discuss how to interact with GitHub Actions and Octopus Deploy together. We'll see how to use the Octopus Deploy CLI to create a resource in Octopus and have it deployed by GitHub Actions. Jump To: [02:21] Talking about the idea of "not needing only one tool"[03:22] Demo started[04:20] Octopus Deploy dashboard to show projects[09:25] Adding in GitHub Action secrets for authentication[13:27] Seeing the GitHub Actions workflow runLearn More: Octopus CLIGithub Actions Hello WorldAzure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account

HashiCorp's Terraform Cloud is a SaaS platform where we can more easily collaborate on Terraform configurations through remotely stored, versioned, and shared Terraform state files. Check out how easy it is to get started deploying your Azure resources! Jump To: [03:05] - Demo: Creating a Terraform Cloud workspace to create and manage an Azure Resource Group[06:32] - Demo: Updating the Terraform configuration to automatically trigger the creation of an Azure Managed DiskLearn More: More information Getting Started Landing Zones in Azure with TerraformAzure DevOps DocsGitHub ActionsAzure DevOps YouTubeCreate a Free Azure DevOps Account