Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bicep Community Call - November '22 #9042

Closed
stephaniezyen opened this issue Nov 15, 2022 · 7 comments
Closed

Bicep Community Call - November '22 #9042

stephaniezyen opened this issue Nov 15, 2022 · 7 comments

Comments

@stephaniezyen
Copy link
Contributor

stephaniezyen commented Nov 15, 2022

We are hosting our last monthly Bicep community call of the year on Wednesday, November 30th at 1PM PST!

Use this issue to address topics you would like to discuss, questions you have for our team, further demos you would like to see, and any high or low points you would like to share. This is an open space for our users to discuss any topics they would like to talk about with our team.

You can list topics of discussion in this thread OR you can ask questions during the Q&A portion of the call.

Please sign up here to get an invite to the call. See you there!

@tjrobinson
Copy link

Apologies if this has already been covered, but I would be interested in seeing how Bicep can be used to create/edit/manage Access Packages.

@slavizh
Copy link
Contributor

slavizh commented Nov 22, 2022

@WhitWaldo
Copy link

I'd like to hear any reasoning on why multiline interpolated strings wouldn't be a viable feature candidate for Bicep and share my own two cents on where they're particularly useful (specifically ADX queries as part of database setup).

@alex-frankel
Copy link
Collaborator

@tjrobinson -- I am not familiar with "Access Packages". Do you have a link to documentation?

@tjrobinson
Copy link

@tjrobinson -- I am not familiar with "Access Packages". Do you have a link to documentation?

No problem. They are part of Azure AD Entitlement Management.

Azure Active Directory (Azure AD) entitlement management can help you manage access to groups, applications, and SharePoint Online sites for internal users as well as users outside your organization.

By creating access packages with the roles users need to have across those resources, and defining policies for who can request an access package and how long they can have an assignment to an access package, you can govern the lifecycle of access for both internal and external users.

Some work is being done to make these resources manageable using Terraform but it's not available yet:
hashicorp/terraform-provider-azuread#547

Our use case is that we have a large number of access packages and are currently managing them by hand via the Portal.

@WhitWaldo
Copy link

I'd love to hear of any progress against #855 especially as Bicep templates continue to grow and get more elaborate.

Ideal outcomes in order:

  1. Mapping deployment errors to specific Bicep modules
  2. Mapping deployment errors to specific line and column numbers of compiled ARM template
  3. Failed deployment provides the template string it's working from so error column numbers can be manually mapped up to the deployment

As it is, failed deployments give a reason (not actually always the actual reason for the error), line 1 and a column number that might as well be arbitrary as it doesn't map up to the locally compiled and deployed template, but rather an internal restructuring of it.

This means that any errors largely have to be diagnosed as "what's changed since it last worked" which requires time-consuming and regular deployments to Azure (involving unnecessary resource allocation and accrued cost even if everything is subsequently deleted) just to ensure even seemingly minor changes don't break the overall deployment.

@azMantas
Copy link
Contributor

azMantas commented Dec 6, 2022

Can we get a link to AXI program?

@ghost ghost locked as resolved and limited conversation to collaborators May 24, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

6 participants