Andrew Wilson's Blog

{ ... Plan - Architect - Develop - Reflect - Improve - Repeat ... }

Bicep Tips and Tricks | #11 | Working with Role Assignments

Problem Space

Role assignments are one of those areas in Azure that look simple on the surface, but can become awkward pretty quickly once you start automating them properly.

Anyone who has worked with RBAC through IaC for long enough will usually run into the same set of problems.

There are usually …


Azure Logic Apps Standard | Testing Series

Over the last few years, Azure Logic Apps Standard has become a core building block for many integration workloads. The platform gives us flexibility, connector richness, and scalable runtime options, but as workflow solutions grow, so does the risk profile.

In many teams, validation still leans …


Unit Testing Bicep Logic with BicepConsoleTTK

Problem Space

In most Infrastructure as Code teams, Bicep quality checks start to look mature as soon as linting and deployment validation are in place. In practice, there is still a blind spot: logic-level testing of exported functions, types, and variables.

Most teams validate by deploying to a …


Azure App Registrations | Display Name Guidance

Problem Space

I recently had to troubleshoot an issue where two App Registrations in the same tenant had the same display name.

Azure allows this. Operationally, it hurts.

When names are duplicated, diagnosis gets slower and riskier because engineers cannot trust what they see first in the portal. …


Azure Key Vault | Access Policies Removed On Deployment


⚠️ NOTE

Microsoft guidance is clear that Azure RBAC should be used for data plane authorization moving forward, instead of legacy access policies


Latest post: August 7, 2026
Latest post: July 28, 2026
Latest post: February 3, 2026
Latest post: December 3, 2025
Latest post: November 26, 2024