Why IaC matters on Azure - See It in Action

Why IaC matters on Azure

📖 Scenario: You are working as a cloud engineer at a company that uses Microsoft Azure. Your team wants to manage their cloud resources more efficiently and avoid manual errors. They have heard about Infrastructure as Code (IaC) but are not sure why it is important.

🎯 Goal: Build a simple Azure Resource Manager (ARM) template step-by-step to understand how IaC helps automate and standardize cloud resource deployment on Azure.

📋 What You'll Learn

Create a basic ARM template structure

Add a parameter to configure resource properties

Define a resource using the parameter

Complete the template with outputs to verify deployment

💡 Why This Matters

🌍 Real World

Companies use IaC on Azure to automate cloud resource deployment, making it faster and less error-prone than manual setup.

💼 Career

Cloud engineers and DevOps professionals use ARM templates and IaC to manage Azure infrastructure efficiently and reliably.

1

Create the initial ARM template structure

Create a JSON object called template with the keys $schema set to "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#" and contentVersion set to "1.0.0.0".

Azure

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0"
  // Your code here
}

Hint

Start by defining the basic ARM template keys $schema and contentVersion.

2

Add a parameter to configure the storage account name

Add a parameters section to the template JSON with a parameter called storageAccountName of type string.

Azure

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "storageAccountName": {
      "type": "string"
    }
  }
  // Your code here
}

Hint

Parameters let you customize the template when deploying. Add the parameters section with the storage account name.

3

Define a storage account resource using the parameter

Add a resources array to the template JSON. Inside it, define a resource with type set to Microsoft.Storage/storageAccounts, apiVersion set to 2022-09-01, name set to the parameter storageAccountName, and location set to eastus.

Azure

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "storageAccountName": {
      "type": "string"
    }
  },
  "resources": [
    {
      "type": "Microsoft.Storage/storageAccounts",
      "apiVersion": "2022-09-01",
      "name": "[parameters('storageAccountName')]",
      "location": "eastus"
      // Your code here
    }
  ]
}

Hint

Resources define what Azure will create. Use the parameter for the storage account name.

4

Add outputs to verify the deployment

Add an outputs section to the template JSON with an output called storageAccountId that returns the id of the storage account resource using resourceId function with Microsoft.Storage/storageAccounts and the parameter storageAccountName.

Azure

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "storageAccountName": {
      "type": "string"
    }
  },
  "resources": [
    {
      "type": "Microsoft.Storage/storageAccounts",
      "apiVersion": "2022-09-01",
      "name": "[parameters('storageAccountName')]",
      "location": "eastus"
    }
  ],
  "outputs": {
    "storageAccountId": {
      "type": "string",
      "value": "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccountName'))]"
    }
  }
  // Your code here
}

Hint

Outputs help you get information after deployment. Use the resourceId function to get the storage account's ID.

Practice

1. Why is Infrastructure as Code (IaC) important when working with Azure?

easy

A. It requires manual configuration of each Azure resource.

B. It automates resource setup, saving time and reducing mistakes.

C. It only works for virtual machines, not other services.

D. It makes Azure slower to deploy resources.

Solution

1. Step 1: Understand IaC purpose in Azure

   IaC automates the creation and management of Azure resources using code, avoiding manual steps.

2. Step 2: Compare options to IaC benefits

   Only It automates resource setup, saving time and reducing mistakes. correctly states automation and error reduction benefits; others are false or limiting.

3. Final Answer:

   It automates resource setup, saving time and reducing mistakes. -> Option B

4. Quick Check:

   Automation = IaC importance [OK]

Hint: IaC means automate setup, not manual work [OK]

Common Mistakes:

• Thinking IaC is manual setup
• Believing IaC only works for some Azure services
• Assuming IaC slows down deployments

2. Which of the following is the correct way to define an Azure resource group using IaC in an ARM template?

easy

A. "resourceGroupName": "myResourceGroup", "location": "eastus"

B. "resourceGroup": "myResourceGroup", "type": "Microsoft.Compute/virtualMachines"

C. "type": "Microsoft.Resources/resourceGroups", "name": "myResourceGroup"

D. "type": "Microsoft.Storage/storageAccounts", "name": "myStorage"

Solution

1. Step 1: Identify ARM template resource group syntax

   Resource groups are defined with type "Microsoft.Resources/resourceGroups" and a name property.

2. Step 2: Check options for correct syntax

   "type": "Microsoft.Resources/resourceGroups", "name": "myResourceGroup" matches the correct type and name format; others define different resources or incorrect properties.

3. Final Answer:

   "type": "Microsoft.Resources/resourceGroups", "name": "myResourceGroup" -> Option C

4. Quick Check:

   Resource group type = "type": "Microsoft.Resources/resourceGroups", "name": "myResourceGroup" [OK]

Hint: Resource group type always starts with Microsoft.Resources [OK]

Common Mistakes:

• Confusing resource group with other resource types
• Using wrong property names like resourceGroupName
• Mixing resource group and resource properties

3. Given this simplified Azure CLI command to deploy an ARM template:
az deployment group create --resource-group myRG --template-file template.json
What is the expected result of running this command?

medium

A. The command deletes the resource group 'myRG' and all its resources.

B. The command fails because '--template-file' is not a valid parameter.

C. The command lists all resource groups in the subscription.

D. The ARM template is deployed to the resource group 'myRG', creating or updating resources.

Solution

1. Step 1: Understand the Azure CLI deployment command

   The command deploys resources defined in the ARM template to the specified resource group.

2. Step 2: Analyze each option's meaning

   Only The ARM template is deployed to the resource group 'myRG', creating or updating resources. correctly describes deployment; others describe deletion, listing, or invalid syntax.

3. Final Answer:

   The ARM template is deployed to the resource group 'myRG', creating or updating resources. -> Option D

4. Quick Check:

   Deployment command creates/updates resources [OK]

Hint: Deploy command creates or updates resources [OK]

Common Mistakes:

• Confusing deployment with deletion
• Thinking the command lists resources
• Assuming '--template-file' is invalid

4. You wrote an ARM template to deploy a storage account but the deployment fails with an error about missing location. What is the most likely fix?

medium

A. Add a 'location' property with a valid Azure region to the storage account resource.

B. Remove the 'name' property from the storage account resource.

C. Change the resource type to 'Microsoft.Compute/virtualMachines'.

D. Delete the resource group before deploying.

Solution

1. Step 1: Identify cause of missing location error

   Azure resources require a 'location' property specifying the region for deployment.

2. Step 2: Determine correct fix for ARM template

   Adding a valid 'location' property to the storage account resource resolves the error; other options are unrelated or harmful.

3. Final Answer:

   Add a 'location' property with a valid Azure region to the storage account resource. -> Option A

4. Quick Check:

   Missing location error = add location [OK]

Hint: Always specify location for Azure resources [OK]

Common Mistakes:

• Ignoring the location property
• Removing required properties like name
• Changing resource type incorrectly
• Deleting resource group unnecessarily

5. You want to reuse your Azure infrastructure setup across multiple projects and teams. Which IaC practice best supports this goal?

hard

A. Write modular ARM templates or Bicep files with parameters for customization.

B. Manually create resources in the Azure portal for each project.

C. Use different templates for every project without sharing code.

D. Avoid using IaC and configure resources by hand.

Solution

1. Step 1: Understand reuse in IaC context

   Modular templates with parameters allow easy customization and sharing across projects.

2. Step 2: Evaluate options for reuse and sharing

   Only Write modular ARM templates or Bicep files with parameters for customization. supports reuse and sharing; others rely on manual or isolated approaches.

3. Final Answer:

   Write modular ARM templates or Bicep files with parameters for customization. -> Option A

4. Quick Check:

   Modular templates = reuse and sharing [OK]

Hint: Use modular templates with parameters for reuse [OK]

Common Mistakes:

• Thinking manual setup is reusable
• Using separate templates without sharing
• Avoiding IaC for infrastructure setup