cpateman

[cpateman]

Progressive Learning in Coding: The Elevator Approach

Learning new skills can be hard and when working with complex technology like coding it can be confusing. Over the years as I have learnt more technologies, I have found an approach that has helped keep learning simple. This is something I was taught before when I first started and continue to pass on to my mentees as a senior. The approach is the elevator effect and in this post I will breakdown…

[cpateman]

Manage Complex Terraform Lists and Maps in a CSV Format

When developing some resource in Terraform you develop a large complex map or list of entries. This can become hard to manage, difficult to read and worst to maintain. An easier method is to convert these items into a Comma Separated Values (CSV) file. This will condense something that could be 100’s of lines down to 10’s of lines. In this example I will create an Azure Network Security Group…

[cpateman]

Understanding Databricks RBAC: Grants, Permissions, and Entitlements

Documentation on Databricks Grants, Permissions and Entitlement can get complex fast, especially switching between AWS, Azure and Databricks versions. When I was then looking into implementing the RBAC design for Databricks, I started looking into the different access approaches for groups. I found you needed to be a full functioning Data Engineer using this product to understand the difference…

[cpateman]

Automating Azure PIM Requests with PowerShell

Using PowerShell to automate the requesting of Azure PIM access.

Privileged Identity Management (PIM) is made to be a secure authentication method to assign user permissions via groups and monitor the access.  This enables short time requests for the permissions that can require fields like reason for access, how long to have access and who is having access. This can typically be used for engineers’ access to higher environments, normally only needed for…

[cpateman]

Best Practices for Terraform Module Testing and Validation

Terraform Modules are great for isolated components you can reuse and plug-in to your main Infrastructure as Core code base. They can then also be shared and used by multiple other teams at the same time to reduce repeated code, complexity and increase compliance. However, as they are isolated, they are harder to test, maintain and support with multiple teams working on them. In this post I will…

[cpateman]

Sharing a guide on how you can use the Octopus Deploy REST API to clone the Runbooks which could also be used for other cloning.

[cpateman]

Blog post on using the Azure API Management Service in a shared capacity between teams to reduce costs, increase security and velocity.

[cpateman]

Sharing my latest solution into adding a user into Microsoft Azure DevOps Team via the REST API then making them an Admin of the team. This was a challenging find as the setting of Admin was not documented, so please feel free to share.