How to Terraform Azure AD: Applications, Service Principals and Client Secrets

[@Priyanka-y6n]

Can you please show how to automate rotation of Azure Application secret and update the corresponding secret in a Azure Key Vault secret using Terraform

[@azure-terraformer]

Good idea I’ll see what I can do!

[@trueblue1712]

+1 for this

[@clovisguillaume5424]

Hi, thanks for this video. Very usefull ! I want to use a service principal in order to create resource (vm, network, lb etc..) with terraform but i'm stuck at the beginning. Need to import in terraform an existing one with the good rights ? How to secure it ? Or i'm wrong, no need to use a sp ? 🤔

[@azure-terraformer]

You can us Terraform without a service principal. Just run AZ login from the command line and login to the portal that pops up. This will allow you to use your own credentials when running Terraform

[@clovisguillaume5424]

@@azure-terraformergood for testing but not a good way to automate deployment :) usage of a clientid with scopes seems to be the standard.

[@azure-terraformer]

@@clovisguillaume5424 indeed! right on the money! if you can host your build agents in Azure, Managed Identity is the way to go! 💯

[@azure-m7b]

Hi, within the same topic, can you also make a video about adding mutliples client IDs and its scopes in azure with terraform ?

[@azure-terraformer]

I am planning some cloud app dev adventures where I’ll be setting up Entra ID based authentication between different application components so I might tap on this then!

[@user779hjg45]

Thank you but your source code link is not working

[@azure-terraformer]

Ah sorry about that. Will look into it!

[@ChintaSaiSrinivas]

your source code link is not working

[@azure-terraformer]

Ah. I am really sorry, I think I lost that branch when I was cleaning out stale branches! I will have to do a few more episodes on the AAD provider to make up for it!

[@krishna172225]

Thank you so much Sir

[@azure-terraformer]

Most welcome

[@valp8198]

This is the best tutorial I have seen about the subject. Can you please update the URL to the source code or post it in the comments? I get a 404 when I try it. Thanks

[@azure-terraformer]

Thanks for the kind words. Let me check the source code link!

[@atharvabhagade2830]

Can you provide a same demo, instead using managed identity and not service principal .........please :)

[@azure-terraformer]

Sure! Managed ID is sooo much easier tho 😊

[@atharvabhagade2830]

Thanks, i want to use that mi in service connection of ado pipelines but it fails at tf-plan

[@azure-terraformer]

I definitely need to get with the times! Will address this soon! 🤣

[@atharvabhagade2830]

Thanks for your help, please comment on the domain that the azure provides when moving from free to pay-to-use subscription........Beacuse on azure portal it shows the owner with that weird domain, so when i login to azure devops and provide the mail-id it gives some authority error

[@sharatbhaskar527]

@@azure-terraformer did you get a chance to do it via managed identity? we need this one badly :(

[@robertsandru8131]

bro learned Terraform in this video

[@azure-terraformer]

Glad it helped!

[@torgeirleirbakken896]

Thanks, great video. I'm building Azure Virtual Desktop solutions with terraform. Would be great if you would create a video about that :-)

[@azure-terraformer]

I have done a lot of work for AVD for a healthcare startup. Automated it with Terraform. Required a lot of Portal spelunking to acquire the magic that the portal does behind the scenes. This would make for a good hack-a-thon. 😁 maybe I’ll live stream it sometime.