Course Outline
Module 1: Foundations of Infrastructure as Code and Terraform
- Exploring IaC concepts and their advantages in on-premises and hybrid settings.
- Terraform overview: deep dive into providers, resources, state, and lifecycle management.
- Step-by-step installation of Terraform, Azure CLI, and necessary auxiliary tools.
- Practical exercise: writing and applying a simple Terraform configuration locally.
Module 2: Mastering HashiCorp Configuration Language (HCL) and Core Configurations
- Detailed HCL syntax, resource definitions, attributes, and expression usage.
- Implementing variables, outputs, locals, and type constraints for robust configurations.
- Navigating the Terraform CLI: master init, plan, apply, destroy, and fmt commands.
- Lab session: constructing a parameterized configuration for both an on-prem resource and an Azure resource.
Module 3: Providers, Resources, and Azure Provider Essentials
- Understanding the role of providers and configuring the AzureRM provider.
- Mapping real-world infrastructure (networking, compute, storage) to Terraform resources.
- Setting up Azure authentication and service principals to enable automation.
- Hands-on task: provisioning an Azure virtual network and a basic VM via Terraform.
Module 4: State Management, Backends, and Team Collaboration
- In-depth look at Terraform state: purpose, file format, and lifecycle impacts.
- Configuring remote backends using Azure Storage Accounts and applying state locking strategies.
- Utilizing workspaces, environments, and effective collaboration patterns for teams.
- Lab exercise: setting up remote state in Azure Storage and executing a multi-user workflow.
Module 5: Modularization, Reusability, and Best Practices
- Creating and utilizing Terraform modules for scalable infrastructure.
- Managing module inputs/outputs, versioning, and leveraging registry patterns.
- Establishing best practices for folder layout, naming conventions, and maintainable repository structures.
- Practical lab: building a reusable module for an Azure VM + disk + network and testing it across different environments.
Module 6: Managing Azure Virtual Devices and On-Premise Integration
- Controlling Azure Virtual Machines, Virtual Desktop components, and device lifecycles through Terraform.
- Applying hybrid device management patterns to connect on-prem resources with Azure-managed devices.
- Integrating volumetric or device management systems via data sources and external providers.
- Lab: deploying a fleet of Azure VMs representing operator units, including inventory tagging and basic monitoring setup.
Module 7: CI/CD, Automation, and Deployment Pipelines
- Integrating Terraform with CI/CD platforms such as GitHub Actions and Azure DevOps pipelines.
- Automating plan/apply processes using secured secrets and service principals.
- Introduction to Policy as Code (Sentinel or Open Policy Agent patterns) and pre-deployment checks.
- Hands-on: developing a basic GitHub Actions workflow to plan and apply Terraform against a sandbox subscription.
Module 8: Security, Secrets, and Operational Best Practices
- Securely managing secrets via Azure Key Vault integration and preventing sensitive data leakage in state files.
- Implementing access control, RBAC, and least privilege principles for automation accounts.
- Monitoring drift, reconciling state, and applying basic remediation techniques.
- Comprehensive checklist covering backup, auditing, and governance for Terraform-managed infrastructure.
Module 9: Testing, Debugging, and Troubleshooting Strategies
- Effective debugging of Terraform configurations and interpreting plan diffs.
- Adopting unit and integration testing methods using tools like terraform validate, tflint, and kitchen-terraform.
- Identifying common error patterns and implementing resolution strategies.
- Lab: executing validation and linting tools to identify and correct configuration issues.
Module 10: Capstone Project — Hybrid Deployment Scenario
- Design challenge: planning an on-prem + Azure device deployment using acquired skills and patterns.
- Implementation of core components utilizing modules, remote state, and CI/CD pipeline snippets.
- Solution presentation, discussion of architectural trade-offs, and review of operational runbooks.
Course Summary and Future Learning Paths
Requirements
- Foundational understanding of networking and virtualization principles.
- Proficiency with Windows or Linux command-line interfaces.
- Basic knowledge of cloud or on-premises infrastructure concepts.
Target Audience
- System administrators and platform engineers.
- DevOps practitioners new to Infrastructure as Code.
- IT teams responsible for managing hybrid (on-prem + Azure) infrastructure.
Testimonials (4)
How easily is to see everything as a resource
Ilie Danut - Mihai - DB Technology
Course - Terraform : Fundamentals
pacing for the most part was fantastic. Michal was very good at ensuring the audience were engaged and ensured everyone was following along for the most part
Asif Shaikh - Carpmaels & Ransford
Course - Terraform on Microsoft Azure
Checking all the details in practice - by writing real code
Michal Pipala - EY
Course - Advanced Terraform: Efficient Infrastructure as Code
the instructor was very well prepared
