Making production deployments safe and repeatable using declarative infrastructure and Azure Resource Manager

10. Vs.

11. {
parameters: {
…
},
resources: {
…
}
}

12. API ENDPOINT (MANAGEMENT.AZURE.COM)
ACTIVITY LOGS, ACCESS CONTROL, POLICY,
LOCKS, TEMPLATE ENGINE, DEPLOYMENTS,
RESOURCE GROUP
PROVIDER CONTRACT (RPC)
RESOURCE
PROVIDERS

13. • template-driven
• declarative
• idempotent
• multi-service
• multi-region
• extensible
• implicit & explicit
dependency graph
• functions and expressions
PUT
https://management.azure.com/subscriptions/(Id)/resourceGroups/(name)/Microsoft.Resources/deployments
/(name)?api-version=2017-05-10

19. ARM Template
Terraform
OSS RP
Resource
As an ARM resource
Reach both inside and outside Azure
Allows Azure lifecycle scenarios (RBAC, policy) on
Terraform resources
Sign up for private preview: https://aka.ms/tfossrp
Terraform config
TF Azure
Resource
TF Azure
module
Make Azure a first class provider in Terraform
Increased Azure resource coverage
More TF Azure modules

21. User defined functions in
templates
Functions in a template provide a
mechanism for authors to simplify and
clarify their templates:
Subscription based
deployments
Deploy subscription-level resources
Role definitions
Role assignments
Rollback
To previous deployment on fail

23. Template (JSON)
Module: storage Module: VMModule: public IP
ARM Template
Deploy solutions with
minimal code
Build templates from
reusable components
Incubate an ecosystem of
common scenarios

24. Options Summary Monetization Ongoing
management
Quick Start Share ARM template on github, enable simple
deployment, further customization possible
None No
Solution Template ARM template + UI meta data file, published to
Marketplace available to other Azure customers
Available through marketplace No
Service Catalog ARM template + UI meta data file, published within
an enterprise
None Within
enterprise
Managed Application Like Solution template above + ability to provide
managed services as ongoing service including full
access to the resources
Ideal for non-multi tenant deployments
Like Solution template + ability to change
monthly service fee
Yes
RP as a Service Easier that RP, configuration driven Yes will be possible Yes
Resource provider Most Azure services from Microsoft are exposed as
RPs. Typically Multi-tenant.
Yes – custom meters Yes

25. https://github.com/Azure/azure-quickstart-templates

26. https://docs.microsoft.com/en-us/azure/marketplace-publishing/marketplace-
publishing-solution-template-creation

30. Building an ARM Resource Provider is Hard
RPC
Solution
Build a Service as a RP Service that provides a compliant, consistent API Service for CRUD
operations that resources can plug into.
RP only needs to provide metadata describing the service and business logic
Initially targeting 1st party services but goal is to make it easier for 3rd parties to integrate with ARM in
the future

31. RPC

34. Marketplace Facts
find, try deploy
a Azure Marketplace AppSource
Audience IT Pros + Cloud Developers Business Users
Solution
Type
Azure building blocks
and finished solutions
Industry focused line-of-business and
productivity apps Momentum
Over 8,000 Listings
2M+ Active Users/Month
New Features and Offers
Access
120,000 Enterprise Customers
300K + Ecosystem Partners
Available In 141 Countries
Get Started: List your Solution
Azuremarketplace.com | appSource.com

36. bburns@microsoft.com
vladj@microsoft.com

38. REST API Browser
REST Try It
Resource provider and data plane Swagger API definitions
ARM Schemas
Policy samples
Template quickstarts