Trond Jakob Sjøvang

Trond Jakob Sjøvang

@trond.sjovang.no

I like breaking things to figure out how they work. Some times I also like putting then back together so they actually work again. https://trond.sjovang.no

94 followers351 following108 posts

And now with more features! timelines to show how a definition has changed over time. e.g lz-diff-reports.liasis.dev/timelines/al... shows what changed, and in which release "Enforce Azure Compute Security Benchmark compliance auditing" was updated #azure #alz #mvpbuzz

lz-diff-reports.liasis.devObject timeline | Landing Zone Release BriefCompare Azure Landing Zones Library releases with plain-language reports that connect policy changes to initiatives, effects, and assignment scopes—not raw JSON diffs.
Trond Jakob Sjøvang@trond.sjovang.no

Do you enjoy reading through diffs of files when you're updating your Azure Landing Zones and want to not break things and ruin weekends? Me neither! So I made a little app to make it a bit easier and more human-friendly: trond.sjovang.no/posts/evalua... #alz #azure #azure-landing-zones #mvpbuzz

Do you enjoy reading through diffs of files when you're updating your Azure Landing Zones and want to not break things and ruin weekends? Me neither! So I made a little app to make it a bit easier and more human-friendly: trond.sjovang.no/posts/evalua... #alz #azure #azure-landing-zones #mvpbuzz

trond.sjovang.noEvaluating updates to ALZ/SLZ a bit easierIf you’re using Azure, there is a fair chance you (or some consultant) have implemented an Azure Landing Zones-architecture to split your workloads into a bunch of different subscriptions. it’s also a...

oh no, deadline creeping closer, better finish (read: start) this powerpoint thing… would be really neat if my demo env had <feature>… … and I should add <another feature>… oh! this new stuff is really nice. I should add that … (many hours later) shit! better finish (read: start) powerpoint

I think this whole "AI" thing might be contagious. After spending a week at #mvpsummit I got this delusional idea to create a web app for focused writing (because living in sanity studio isn't very fun)

One thing I will never understand is why Microsoft’s own API guidelines advise their devs to use HTTP methods for CRUD. And everything related to PIM is just «hold my beer and let me do something completely different», and different == behavior that completely breaks running tofu/terraform destroy

View full thread

One thing I will never understand is why Microsoft’s own API guidelines advise their devs to use HTTP methods for CRUD. And everything related to PIM is just «hold my beer and let me do something completely different», and different == behavior that completely breaks running tofu/terraform destroy

It’s pretty funny that you can tell every AI agent to create an image of a tree and it will spot out a pretty good and realistic tree. But if you want a relatively simple 2D SVG illustration it suddenly have zero concept of how trees look like until you force feed it a bunch of SVG examples

The more I dig in #msgraph the stranger it gets. Like what: "The type of the request. Use adminAdd to add a resource, if the caller is an administrator or resource owner, adminUpdate to update a resource, or adminRemove to remove a resource." Why not just use HTTP POST, PATCH and DELETE? 🤷‍♂️

Trond Jakob Sjøvang reposted

I often manage to snag some good deals through Humblebundle, and now Packt has hooked us up with a great bundle for cloud professionals! So why not level up your knowledge while also supporting a good cause? #MVPBuzz #CloudNativeAmbassador www.humblebundle.com/books/cloud-...

humblebundle.comHumble Tech Book Bundle: Cloud Infrastructure and DevOps Toolkit by PacktMaster AWS & Azure with the latest Humble Tech Book Bundle: Cloud Infrastructure and DevOps Toolkit. Plus, a portion of your purchase supports No Kid Hungry!

TLDR: You should probably not migrate away from terraform-provider-azuread or start using it for anything important yet. But test it out, report bugs, and provide feedback to keep the dev team happy and busy!

Having a monday off work is dangerous. Before you know it you have decided your summer vacation plans needs improvement and booked flights, train and hotels for a couple of days in London before catching the final stage of Tour de France in Paris 💸

I like opentofu/terraform, but trying to navigate around both open issues and missing features in the various ways you can implement privileged identity management in azure/entra id is not a very nice experience

If you want to add conditions to a built in role in Azure you would need to use PIM groups in Entra ID, but terraform-provider-azuread has multiple open issues on that resource (that have been open for a long time) and you'll quickly run into at least one of them

If you want to assign a role management policy for active/eligible assignments, you can do that just fine for Azure resources with terraform-provider-azurerm, but not for EntraID roles (that are managed by terraform-provider-azuread)

It’s a wrap! #mvpsummit is over. Time to recharge the social battery, figure out how to make room for all the new swag in the bag, and start working on these sweet new things the rest of the world will hear about soon

Finally had a bit of free time to play with these new modules … and wheeee! The decision to use the azapi provider makes deployments so much faster, and the pattern of just using the modules you need feels so much better than the complexity of the caf-enterprise-scale mega-module

Paul Grimley@paulgrimley.bsky.social

Exciting News! 🚀 Announcing #Terraform #Azure Verified Modules for Platform Landing Zone (ALZ)! 🎉 • Modular Deployment • Improved Reliability • ALZ IaC Accelerator Updates Blog: aka.ms/alz/tf/avm/b... Join our next community call on Jan 29, 2025: aka.ms/ALZ/Community #ALZ