7 articles on this topic
The Blueprints wind-down is already running and locks in phases. On 31 January 2027 the API disappears, unexported data is permanently deleted, and blueprint locks stop working. Artifact mapping to Deployment Stacks and an export via REST.
From 27 October 2026, Foundational CSPM no longer switches itself on for new Azure subscriptions. This is not a security team problem — it is a landing zone factory problem. Bicep, policy, and an ARG audit query.
Deployment Stacks in Bicep are a way to manage Azure resources as a coherent unit with denyAssignments, auto-cleanup, and controlled deletion. Practical guide with a migration plan from classic deployments.
How to publish Bicep modules to ACR in enterprise environments without risking overwriting existing versions. Skip-if-exists pattern, PR validation, and semver hygiene.
Deploy hub-spoke network topology for Azure Landing Zone with Azure Firewall, Private DNS Zones, and VNet peering automation using Bicep modules.
Deploy an enterprise-ready Azure Landing Zone using Bicep modules. Covers hub-spoke networking, policy governance, and CI/CD pipeline integration.
Build a production Bicep deployment pipeline with GitHub Actions. Covers what-if previews, environment approvals, OIDC authentication, and rollback strategies.