Andrew Wilson's Blog

{ ... Plan - Architect - Develop - Reflect - Improve - Repeat ... }

Role Assignments | Role Based Access Control Administrator

Problem Space

When deploying Azure solutions with Infrastructure as Code, we often create role assignments as part of the deployment. For example, a Bicep deployment may give a Function App’s managed identity access to a Key Vault, storage account, or Service Bus namespace.

It is easy to focus …


Azure Logic Apps Standard | Keep WEBSITE_CONTENTSHARE Unique

Overview

WEBSITE_CONTENTSHARE is an app setting used by Azure Functions and Logic Apps Standard (which runs on the Functions runtime) alongside WEBSITE_CONTENTAZUREFILECONNECTIONSTRING to identify the Azure Files share the app uses for its content.

The important thing to call out up front: you …


Azure Logic Apps Standard | Testing Series

Over the last few years, Azure Logic Apps Standard has become a core building block for many integration workloads. The platform gives us flexibility, connector richness, and scalable runtime options, but as workflow solutions grow, so does the risk profile.

In many teams, validation still leans …


Unit Testing Bicep Logic with BicepConsoleTTK

Problem Space

In most Infrastructure as Code teams, Bicep quality checks start to look mature as soon as linting and deployment validation are in place. In practice, there is still a blind spot: logic-level testing of exported functions, types, and variables.

Most teams validate by deploying to a …


Azure App Registrations | Display Name Guidance

Problem Space

I recently had to troubleshoot an issue where two App Registrations in the same tenant had the same display name.

Azure allows this. Operationally, it hurts.

When names are duplicated, diagnosis gets slower and riskier because engineers cannot trust what they see first in the portal. …