The Azure DevOps issuer for workload identity federation retires on July 1, 2027. What changes, how to find affected service connections, and what to watch for when Terraform manages them.
Patterns for reusable Terraform modules on Azure: secure defaults, input validation, conditional resources and testing with Terratest.
Azure budget alerts at 50/80/100/120%, cost allocation tags enforced by policy, anomaly alerts, and a Terraform budget module for landing zones.
Configuring Azure PIM for Entra ID and Azure resource roles: role settings, approvals, access reviews, PIM for Groups, monitoring, and what Terraform can manage.
Managing Azure Policy at scale with EPAC: desired state, multi-environment deployments, and why portal-based policy management stops working.