ESLZ Community call 25/8

[daltondhcp]

We are excited to invite you to our first external Enterprise-Scale community call on the 25th of August 18.00 CET!
For this first call we have an open agenda where ESLZ core team will present the latest news around Enterprise-Scale landing zones and answer questions and topics raised in this issue.

Agenda:

• Enterprise-Scale Landing Zones news roundup
  • Reference Implementations
  • Documentation and guidance
• Q&A (please raise topics and questions to discuss in this issue)

Sign up for the call here!

We look forward to an interactive discussion with lots interesting topics!

[JustinGrote]

Thank you for hosting a community call! I've found the Powershell one to be very effective.

Question: When will #Bicep version of the ESLZ templates be coming?

[kevball2]

would it be possible to provide more guidance on deployment of dev and test environments? What would be the best practice for deploying those resources?
Based on the current structure of managing at the Subscription level, it seems like it would make sense to have Landing Zone 1 Prod, then Landing Zone 1 Dev/Test.

[shuft]

I'd really like to see more cohesive guidance around ES Terraform and the ESLZ TF module.

[jtracey93]

I'd really like to see more cohesive guidance around ES Terraform and the ESLZ TF module.

@shuft - happy to. To ensure we cover what you are looking for, could you provide us with a little more info as to what you'd like us to talk about? 👍

[shuft]

I'd really like to see more cohesive guidance around ES Terraform and the ESLZ TF module.

@shuft - happy to. To ensure we cover what you are looking for, could you provide us with a little more info as to what you'd like us to talk about? 👍

Thanks for getting back to me @jtracey93.

I think that a lot of folks - myself included, struggle to get started with ES Terraform. There's a ton of repo's, examples, and scenarios - but nothing to really signpost where to start, and how to go on. If you're persistent you'll find the terraform-landingzones-starter repo, and be able to kick off from there - but even then, I've found it a bit hit and miss whether the examples will work.

I'm particularly interested in enterprise-scale, and the Terraform module for that is pretty well documented, but full-on ES is too complex for my organization - I've managed some minor tweaks like changing the management group structure it deploys, but more information on how to customise landing zone archetypes, etc. would be great.

A demo of Azure DevOps pipelines working to deploy changes would be fantastic (I've still not managed to get this scenario working myself yet :( )

Lastly, general advice on operations using the Terraform ES modules into production - I am unclear about how Azure Policy which alters resources (deploy if not exists, etc.) interacts with Terraform and it's understanding of state - so any tips there would be useful.

Cheers!

Ant.

[pmatthews05]

Is this community call about the CAF Terraform Enterprise scale too?

Would like to know, when creating a custom Role Definition for Azure Policies, how do we then apply that custom role definition in a deploy policy? As you do not know the Custom Role Definition ID.

[jtracey93]

Hi @pmatthews05,

Are you referring to this Terraform module https://registry.terraform.io/modules/Azure/caf-enterprise-scale/azurerm/latest?

If so, yes we will discuss this on this community call 👍

Thanks

Jack

[Schillman]

Hey @daltondhcp sorry, I missed the call is there any possibility for a recording? Thanks in advance & Keep up the great work!

Regards
Sebastian

[jtracey93]

Hey everyone,

Checkout the recording and slides available in the wiki here: https://github.com/Azure/Enterprise-Scale/wiki/Community-Calls