Azure IaC Test API

In this show we create a simple .Net 8.0 API that tests connectivity to an Azure KeyVault and Storage account. Checkout other shows (see links below) focusing on IaC for how to create the resources in Azure (Bicep, Terraform and Pulumi).

LINKS
Bicep using chatGPT:    • Azure IaC using bicep with chatGPT  
Github for show: https://github.com/wallism/azure-iac
UAMI: https://learn.microsoft.com/en-us/ent...
DefaultAzureCredential: https://learn.microsoft.com/en-us/dot...
Which RBAC roles: https://learn.microsoft.com/en-us/dot...

00:00 Intro
01:00 Create the API .Net Project (sped up)
03:10 Ask chatGPT for code to test connectivity
04:50 Drop generated code into the test function
05:42 Where can find the required url's?
Test Running Locally
06:35 Run and see if it works
07:45 DefaultAzureCredential
08:35 What is a good way to setup developer access to the Azure resources?
09:34 Provide individual access by using groups in Entra ID
10:57 Access via App Registration and environment variables
11:25 Create App Registration
12:15 Always save every secret (somewhere secure)!
12:58 Where to add environment variables locally
15:05 Caller not authorized (using new App Reg)
16:50 Re-run with roles added to the App Reg
17:30 Check secret value
17:49 Storage account access error, not authorized
Test Running in Azure
19:24 Verify UAMI (User Assigned Managed Identity) is assigned to the App Service
19:41 Operating system type
19:55 Publish from VS to Azure
20:38 Why is it not working in Azure
20:58 Code change to show swagger and display error
22:20 Re-deploy and useful error displayed
23:38 In code, how do we specify which UAMI to use?
25:17 ManagedIdenityClientId's applied - re-deploy
25:39 Working in Azure!
26:00 Windows vs Linux quick cost comparison
27:54 What if we're running in a container?
29:31 Set environment variables in the dockerfile (first ones are old!)
30:37 Working in container locally
30:49 Best practice?
32:30 Thanks!