From Launch Pad to Landing Zone: DevOps Governance with Terraform
summary
Shows how Terraform automates a governance factory: a root launch pad that provisions tooling (Azure storage, Key Vault, Azure DevOps projects, service principals, and service connections) which then creates per-team landing zones. Demonstrates bootstrapping options, remote state encrypted with a customer managed key, scoped least‑privilege service principals, and a hybrid setup that hosts a container registry and TLS certs. Example deploy runs include a VM pipeline and an AKS setup with about 15 pipelines; an accidental Key Vault key deletion breaks remote state access.
AI-written summary · about
chapters (9)
- 0:00DevOps governance with Terraform
- 4:52DevOps sprawl and desire paths
- 7:18Launch pads and landing zones
- 11:49Bootstrapping root project
- 15:21Root governance project structure
- 22:00Infrastructure-only launch pad
- 27:38Hybrid app launch pad
- 36:03Demo: new landing zone
- 39:32Summary
related talks
42mHands-on with the Terraform Module for AWS Landing Zone
36mTerraform & CI/CD
45mThe Automation of a Landing Zone
10mInfrastructure as a Code Best Practices with Terraform
50mTerraform 101: Building Repeatable, Secure Azure Infrastructure
55mBest practices
28mSupport and Tools to Help You Accelerate Toward DevOps
37mTerraform & CI/CD