How to Terraform Azure AD: Applications, Service Principals and Client Secrets

Поделиться
HTML-код
  • Опубликовано: 2 фев 2025

Комментарии • 31

  • @Priyanka-y6n
    @Priyanka-y6n 6 месяцев назад +3

    Can you please show how to automate rotation of Azure Application secret and update the corresponding secret in a Azure Key Vault secret using Terraform

  • @krishna172225
    @krishna172225 Год назад +1

    Thank you so much Sir

  • @clovisguillaume5424
    @clovisguillaume5424 Год назад +1

    Hi, thanks for this video. Very usefull ! I want to use a service principal in order to create resource (vm, network, lb etc..) with terraform but i'm stuck at the beginning. Need to import in terraform an existing one with the good rights ? How to secure it ? Or i'm wrong, no need to use a sp ? 🤔

    • @azure-terraformer
      @azure-terraformer  Год назад

      You can us Terraform without a service principal. Just run AZ login from the command line and login to the portal that pops up. This will allow you to use your own credentials when running Terraform

    • @clovisguillaume5424
      @clovisguillaume5424 Год назад +1

      @@azure-terraformergood for testing but not a good way to automate deployment :) usage of a clientid with scopes seems to be the standard.

    • @azure-terraformer
      @azure-terraformer  Год назад

      @@clovisguillaume5424 indeed! right on the money! if you can host your build agents in Azure, Managed Identity is the way to go! 💯

  • @azure-m7b
    @azure-m7b 11 месяцев назад +1

    Hi, within the same topic, can you also make a video about adding mutliples client IDs and its scopes in azure with terraform ?

    • @azure-terraformer
      @azure-terraformer  11 месяцев назад +1

      I am planning some cloud app dev adventures where I’ll be setting up Entra ID based authentication between different application components so I might tap on this then!

  • @valp8198
    @valp8198 4 месяца назад +1

    This is the best tutorial I have seen about the subject. Can you please update the URL to the source code or post it in the comments? I get a 404 when I try it. Thanks

    • @azure-terraformer
      @azure-terraformer  4 месяца назад +1

      Thanks for the kind words. Let me check the source code link!

  • @user779hjg45
    @user779hjg45 Год назад +2

    Thank you but your source code link is not working

  • @ChintaSaiSrinivas
    @ChintaSaiSrinivas Год назад +2

    your source code link is not working

    • @azure-terraformer
      @azure-terraformer  Год назад

      Ah. I am really sorry, I think I lost that branch when I was cleaning out stale branches! I will have to do a few more episodes on the AAD provider to make up for it!

  • @robert_sandrew
    @robert_sandrew Год назад +1

    bro learned Terraform in this video

  • @atharvabhagade2830
    @atharvabhagade2830 Год назад +1

    Can you provide a same demo, instead using managed identity and not service principal
    .........please :)

    • @azure-terraformer
      @azure-terraformer  Год назад +1

      Sure! Managed ID is sooo much easier tho 😊

    • @atharvabhagade2830
      @atharvabhagade2830 Год назад +1

      Thanks, i want to use that mi in service connection of ado pipelines but it fails at tf-plan

    • @azure-terraformer
      @azure-terraformer  Год назад +1

      I definitely need to get with the times! Will address this soon! 🤣

    • @atharvabhagade2830
      @atharvabhagade2830 Год назад

      Thanks for your help, please comment on the domain that the azure provides when moving from free to pay-to-use subscription........Beacuse on azure portal it shows the owner with that weird domain, so when i login to azure devops and provide the mail-id it gives some authority error

    • @sharatbhaskar527
      @sharatbhaskar527 10 месяцев назад

      @@azure-terraformer did you get a chance to do it via managed identity? we need this one badly :(

  • @torgeirleirbakken896
    @torgeirleirbakken896 Год назад +1

    Thanks, great video. I'm building Azure Virtual Desktop solutions with terraform. Would be great if you would create a video about that :-)

    • @azure-terraformer
      @azure-terraformer  Год назад +1

      I have done a lot of work for AVD for a healthcare startup. Automated it with Terraform. Required a lot of Portal spelunking to acquire the magic that the portal does behind the scenes. This would make for a good hack-a-thon. 😁 maybe I’ll live stream it sometime.