IaC With
Azure Bicep

Rainer Stropek | @rstropek

Introduction

Rainer Stropek

  • Passionate software developers for 25+ years
     
  • Microsoft MVP, Regional Director
     
  • Trainer, Teacher, Mentor
     
  • 💕 community

https://rainerstropek.me

Advantages of IaC

  • Repeatable
    • For e.g. staging (dev/test/prod)
  • Shareable
    • Share blueprints, good practices
  • Trackable
    • Track changes in Git
    • Azure tracks executions and results
  • Easy to automate
    • CI/CD integration
    • Less "click-ops"

Advantages of Templates Over Scripts

  • Declarative Language
    • You define what you want, not how to get there
    • Somewhat similar to SQL
    • Validated before execution
    • If you miss functionality: Extensible with PS or Bash scripts 🔗
  • Idempotency
    • You can deploy the template many times
    • Template represents the desired state
    • Only changes are applied
    • If you are unsure: What-if function 🔗
  • Automatic ordering and parallelization
    • Don't worry of order, ARM will figure it out based on dependencies

Templates

  • Azure native functionality: ARM Templates 🔗
    • JSON format 😅
    • Huge gallery of quickstart templates 🔗
  • New language to make ARM Templates easier to write: Bicep
    • Not a replacement of ARM Templates, ARM becomes "IL"
    • ​Domain-specific language optimized for the task 👍, not just JSON
    • Modular 🔗
    • Much better tooling support (e.g. VSCode)
    • Some limitations compared to ARM Templates (e.g. no support for user-defined functions 🔗)
    • Possibility to decompile ARM Templates into Bicep 🔗

Alternatives

  • Open-source IaC platforms like Terraform 🔗
    • Use ARM behind the scenes
    • Well-suited in multi-cloud organizations
  • Code-based IaC
  • Graphical solutions
    • E.g. Cloud Maker 🔗
  • There is no silver bullet!
    • No "best practice" applicable to all orgs and projects!
    • Many orgs will be polyglot
    • Important that you do IaC at all!

Advantages of Azure Templates

  • Valid for ARM Templates and Bicep
    • Because Bicep is a transparent abstraction on top of the ARM platform
  • "Day 0 support" for all resource providers
    • You can deploy any Azure resource with ARM/Bicep, even preview
  • Important: ARM Provider Reference 🔗
    • Versioned resource schema, based on Azure Rest API Specs 🔗
    • Example: Storage Account 🔗
    • JSON/Bicep view
  • No state DB or state files required
    • All state is stored directly in Azure

Bicep
101

Bicep Tooling

  • Bicep CLI 🔗
    • Support built-in for Azure CLI and PowerShell Az module
  • Bicep Linter 🔗
  • Bicep VSCode extension 🔗
  • Bicep Playground 🔗
    • Decompile ARM Templates into Bicep
    • Access Azure Quickstart templates and turn them into Bicep

Structure

  • Similar to ARM Templates 🔗
    • DSL instead of JSON
    • Different expression language
  • Structure of a Bicep template
    • Parameters to make templates generally usable
    • Variables to define reusable values
    • Resource definitions for your Azure resources
    • Outputs to return values from template execution

Structure

// this file can only be deployed at a subscription scope
targetScope = 'subscription'

@description('Name of the Resource Group to create')
param rgName string = 'DemoResourceGroup'

@description('Location for the Resource Group')
param rgLocation string = 'westeurope'

var dept = 'IT'

resource demoRG 'Microsoft.Resources/resourceGroups@2021-01-01' = {
  name: rgName
  location: rgLocation
  tags: {
    Dept: dept
    Environment: 'Test'
  }
}

output resourceID string = demoRG.id

Language Features

var list = 'a,b,c,d'
var arrayFromString = split(list, ',')

var find = 'findThisInString'
var found = contains(find, 'This')
var index = indexOf(find, 'This')
var indexNotFound = indexOf(find, 'NotFound')
var len = length(find)
var substr = substring(find, index, (len - index))

output arrayFromString array = [for i in arrayFromString: {
  element: i
}]

output found string = found == true ? 'Found "this"' : 'Did not find "This"'


output index int = index
output indexNotFound int = indexNotFound

output substr string = substr

Functions 🔗

Loops

Inline if

Language Features

  • Data Types 🔗
  • Built-in functions 🔗
  • Built-in expression language 🔗
  • Various types of loops 🔗

Demo
Time!

Thank you!

Rainer Stropek | @rstropek