Automating Azure Infrastructure with ARM Templates for IaC

Overview

In today’s dynamic cloud environment, manual infrastructure provisioning can be slow, error-prone, and difficult to manage. Infrastructure as code (IaC) provides a solution by treating infrastructure resources as code, enabling automation, consistency, and repeatability.

This blog explores Azure Resource Manager (ARM) templates, a core component of IaC in Azure. We’ll delve into the benefits of IaC, understand ARM templates, and demonstrate how to manage Azure resources with them.

Pioneers in Cloud Consulting & Migration Services

Reduced infrastructural costs
Accelerated application deployment

Get Started

IaC

It’s a software engineering and cloud computing concept where infrastructure provisioning and management tasks are handled through code and automation rather than manual processes.

IAC defines and manages infrastructure resources such as servers, networks, and storage using code, typically in configuration files or scripts.

This approach enables greater agility, consistency, and scalability in managing IT infrastructure and facilitates easier collaboration and version control among development and operations teams.

Why embrace IaC?

Automation: IaC automates infrastructure provisioning and configuration, eliminating manual errors and saving time.
Consistency: IaC ensures consistent infrastructure across environments, avoiding configuration drift and promoting reliability.
Version control: Treat your infrastructure like code, enabling version control, rollbacks, and collaboration.
Repeatability: Easily replicate and deploy infrastructure across environments with consistent configurations.

Introducing ARM Templates

ARM templates are JSON files defining the resources and configurations for your Azure infrastructure. They use a declarative syntax, specifying the desired state of your infrastructure without the need for complex scripting.

Key components of an ARM template

Resources: Define the Azure resources you want to deploy, such as virtual machines, storage accounts, and databases.
Properties: Specify the configuration details for each resource, like VM size, storage type, and database settings.
Parameters: Allow you to customize deployments by providing values at deployment time.
Functions: Built-in functions offer conditional logic and dynamic configuration within the template.

Demonstration: Managing Resources with ARM Templates

Let’s create a simple ARM template to deploy a virtual machine in Azure:

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/azuredeploymenttemplates.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "location": {
      "type": "string",
      "defaultValue": "eastus"
    },
    "vmName": {
      "type": "string",
      "defaultValue": "myVM"
    }
  },
  "resources": [
    {
      "type": "Microsoft.Compute/virtualMachines",
      "name": "[parameters('vmName')]",
      "location": "[parameters('location')]",
      "properties": {
        "vmSize": "Standard_B1s",
        "osProfile": {
          "computerName": "[parameters('vmName')]",
          "linuxConfiguration": {
            "adminUsername": "azureuser",
            "sshKeys": [
              {
                "path": "/home/azureuser/.ssh/authorized_keys",
                "publicKey": "your_ssh_public_key"
              }
            ]
          }
        },
        "networkProfile": {
          "networkInterfaces": [
            {
              "id": "[reference(concat('Microsoft.Network/networkInterfaces/', variables('nicName'))].id)"
            }
          ]
        }
      }
    }
  ]
}

{

"$schema": "https://schema.management.azure.com/schemas/2019-04-01/azuredeploymenttemplates.json#",

"contentVersion": "1.0.0.0",

"parameters": {

"location": {

"type": "string",

"defaultValue": "eastus"

"vmName": {

"type": "string",

"defaultValue": "myVM"

}

"resources": [

{

"type": "Microsoft.Compute/virtualMachines",

"name": "[parameters('vmName')]",

"location": "[parameters('location')]",

"properties": {

"vmSize": "Standard_B1s",

"osProfile": {

"computerName": "[parameters('vmName')]",

"linuxConfiguration": {

"adminUsername": "azureuser",

"sshKeys": [

{

"path": "/home/azureuser/.ssh/authorized_keys",

"publicKey": "your_ssh_public_key"

}

]

}

"networkProfile": {

"networkInterfaces": [

{

"id": "[reference(concat('Microsoft.Network/networkInterfaces/', variables('nicName'))].id)"

}

]

}

]

}

Explanation

This template defines a virtual machine resource with the name specified by the vmName parameter and location set by the location parameter.

It configures the VM size, operating system (Linux), and SSH access with a public key.

The reference function references a separate network interface resource (not shown here) for network connectivity.

Deployment options

Azure portal: Upload the ARM template and define any necessary parameters within the portal.
Azure CLI: Use the az deployment create command to deploy the template from the command line.
Azure DevOps: Integrate ARM template deployments into your CI/CD pipeline for automated infrastructure provisioning.

Benefits of using ARM templates

Reduced manual effort: Automates infrastructure provisioning and configuration.
Repeatable deployments: Ensures consistent infrastructure across environments.
Version control: Enables tracking changes and rollbacks if needed.
Collaboration: Allows teams to share and collaborate on definitions of infrastructure.

Conclusion

ARM templates offer a powerful and efficient way to manage your Azure infrastructure as code. By embracing IaC, you can streamline your cloud operations, ensure consistency, and improve the agility and reliability of your Azure deployments.

Drop a query if you have any questions regarding ARM templates and we will get back to you quickly.

Want to save money on IT costs?

Migrate to cloud without hassles
Save up to 60%

Get Started with Free AWS Credits

About CloudThat

CloudThat is a leading provider of Cloud Training and Consulting services with a global presence in India, the USA, Asia, Europe, and Africa. Specializing in AWS, Microsoft Azure, GCP, VMware, Databricks, and more, the company serves mid-market and enterprise clients, offering comprehensive expertise in Cloud Migration, Data Platforms, DevOps, IoT, AI/ML, and more.

CloudThat is recognized as a top-tier partner with AWS and Microsoft, including the prestigious ‘Think Big’ partner award from AWS and the Microsoft Superstars FY 2023 award in Asia & India. Having trained 650k+ professionals in 500+ cloud certifications and completed 300+ consulting projects globally, CloudThat is an official AWS Advanced Consulting Partner, Microsoft Gold Partner, AWS Training Partner, AWS Migration Partner, AWS Data and Analytics Partner, AWS DevOps Competency Partner, Amazon QuickSight Service Delivery Partner, Amazon EKS Service Delivery Partner, AWS Microsoft Workload Partners, Amazon EC2 Service Delivery Partner, and many more.

To get started, go through our Consultancy page and Managed Services Package, CloudThat’s offerings.

FAQs

1. What are the different types of resources I can define in an ARM template?

ANS: – ARM templates allow you to define a wide range of Azure resources, including:

Virtual Machines
Storage Accounts
Databases (e.g., Azure SQL Database)
Networking resources (e.g., Virtual Networks, Load Balancers)
Web Apps
Functions
Logic Apps

And many more! Essentially, any Azure resource that can be managed through Azure Resource Manager can be defined and configured within an ARM template.

2. Can I use ARM templates to update existing resources?

ANS: – Yes, ARM templates are not limited to deploying new resources. You can use them to update existing resources by modifying the desired properties within the template and deploying them again.

3. How do I secure my ARM templates?

ANS: – Security is crucial when working with ARM templates. Avoid storing sensitive information like passwords or SSH keys directly within the template. Instead, Azure Key Vault can securely store and reference these values during deployment.

WRITTEN BY Rajveer Singh Chouhan

Rajveer Singh Chouhan works as a Research Associate at CloudThat. He has been learning and gaining practical experience in AWS and Azure. Rajveer is also passionate about continuously expanding his skill set and knowledge base by actively seeking opportunities to learn new skills. Rajveer regularly reads blogs and articles related to various programming languages, technologies, and industry trends to stay up to date with the latest developments in the field.