Monday, December 27, 2021

Azure Blueprints to replace ARM Templates?

 It is a controversial topic to be discussed. Will Azure Blueprints replace ARM Templates or Bicep? Well, we have been asking too much from ARM Templates. It can be very complexed, not just from the language perspective, but from the organisation perspective. Bicep solves the language complexity, but building a large infrastructure with many policies is always a mess. We can combine ARM templates but chances are multiple teams work in different ones if it is a large organisation. 

Let me be clear for a second. Blueprints does not replaces ARM templates. If you look at the image above, you may figure out why. 

Azure Blueprints are for managing all the deployments you need for one or more subscriptions at either subscription level or management group level. In a larger organisation you may have defined your management groups based on different requirements. It can be by environment type such as Dev, Test, Prod or by business unit such as Finance, IT, Marketing. 

Different levels of organisation resources may need different levels of access. They all can be defined via the Blueprints. If need, permissions can be locked so only blueprint can modify them. ARM templates/ BICEP templates will remain as the deployment module in Blueprint so they can be changed and redeployed when in need. 

You can simply start creating a Blueprint by going to the Azure portal. 

As you can see,  there are many starter templates to pick from. I have selected the CAF Migration Landing Zone. You can give a name and select the artifacts to be added or modified. 

Once all the necessary artifacts are selected and policies are defined, I can save it as a draft. You can select to publish the Blueprint or make any revisions as necessary. 

All the Blueprint definitions and assigned Blueprints can be accessed easily. 

Overall it makes the resources more manageable and take away the needs for large ARM template definitions. Also a single plane of control is provided so there is just one place to manage things. 

So why wait? Just tryout today.

No comments:

Post a Comment