🏗️ Infrastructure as Code¶

🏠 Home > 📚 Docs > 🏗️ Infrastructure

Last Updated: 2025-01-28 | Version: 1.0.0

📑 Table of Contents¶

• 🎯 Overview
• 📁 Structure
• 🚀 Quick Start
• 📋 Prerequisites
• ⚙️ Configuration
• 🔧 Deployment
• 💰 Cost Estimation
• 🔐 Security
• 🧹 Cleanup
• ❓ Troubleshooting

🎯 Overview¶

This directory contains Azure Bicep templates for deploying the complete Microsoft Fabric Casino/Gaming POC infrastructure.

What Gets Deployed¶

graph TB
    subgraph RG["📦 Resource Group"]
        FC[🏭 Fabric Capacity<br/>F64 SKU]
        PV[🔍 Microsoft Purview<br/>Data Governance]
        ADLS[💾 ADLS Gen2<br/>Data Lake Storage]
        KV[🔐 Key Vault<br/>Secrets Management]
        LA[📊 Log Analytics<br/>Monitoring]
        MI[🔑 Managed Identity<br/>RBAC]
    end

    subgraph Optional["🔒 Optional (Private Endpoints)"]
        VN[🌐 Virtual Network]
        PE[🔗 Private Endpoints]
    end

    FC --> LA
    ADLS --> KV
    PV --> ADLS
    VN -.-> PE
    PE -.-> ADLS
    PE -.-> KV

    style FC fill:#e3f2fd
    style PV fill:#f3e5f5
    style ADLS fill:#e8f5e9
    style KV fill:#fff3e0

📁 Structure¶

infra/
├── main.bicep              # 🎯 Main orchestration template
├── main.bicepparam         # 📝 Default parameters
├── main.json               # 📦 Compiled ARM template
├── environments/           # 🌍 Environment-specific configs
│   ├── dev/               #    Development
│   ├── staging/           #    Staging
│   └── prod/              #    Production
└── modules/                # 🧩 Reusable Bicep modules
    ├── fabric/            #    Fabric Capacity
    ├── governance/        #    Purview & policies
    ├── monitoring/        #    Log Analytics
    ├── networking/        #    VNet & endpoints
    ├── security/          #    Key Vault & RBAC
    └── storage/           #    ADLS Gen2

🚀 Quick Start¶

Option 1: Azure CLI (Recommended)¶

# 1. Login to Azure
az login

# 2. Set subscription
az account set --subscription "YOUR_SUBSCRIPTION_ID"

# 3. What-If (Preview changes)
az deployment sub what-if \
  --location eastus2 \
  --template-file infra/main.bicep \
  --parameters infra/environments/dev/dev.bicepparam

# 4. Deploy
az deployment sub create \
  --location eastus2 \
  --template-file infra/main.bicep \
  --parameters infra/environments/dev/dev.bicepparam \
  --name "fabric-poc-$(date +%Y%m%d)"

Option 2: PowerShell¶

# 1. Login to Azure
Connect-AzAccount

# 2. Set subscription
Set-AzContext -Subscription "YOUR_SUBSCRIPTION_ID"

# 3. What-If (Preview changes)
New-AzSubscriptionDeployment `
  -Location eastus2 `
  -TemplateFile infra/main.bicep `
  -TemplateParameterFile infra/environments/dev/dev.bicepparam `
  -WhatIf

# 4. Deploy
New-AzSubscriptionDeployment `
  -Location eastus2 `
  -TemplateFile infra/main.bicep `
  -TemplateParameterFile infra/environments/dev/dev.bicepparam `
  -Name "fabric-poc-$(Get-Date -Format yyyyMMdd)"

📋 Prerequisites¶

Required¶

Verify Prerequisites¶

# Check Azure CLI version
az --version | grep "azure-cli"

# Check Bicep version
az bicep version

# Check permissions
az role assignment list --assignee $(az ad signed-in-user show --query id -o tsv) --query "[].roleDefinitionName" -o tsv

⚙️ Configuration¶

Parameters Reference¶

Environment Files¶

Edit the appropriate environment file before deployment:

# Development
infra/environments/dev/dev.bicepparam

# Staging
infra/environments/staging/staging.bicepparam

# Production
infra/environments/prod/prod.bicepparam

Example Parameter File¶

using '../main.bicep'

param environment = 'dev'
param location = 'eastus2'
param projectPrefix = 'casinopoc'
param fabricCapacitySku = 'F64'
param fabricAdminEmail = 'admin@contoso.com'
param enablePrivateEndpoints = false
param logRetentionDays = 90
param costCenter = 'IT-Analytics'
param owner = 'Data Platform Team'

🔧 Deployment¶

Step-by-Step Deployment¶

flowchart LR
    A[1. Configure<br/>Parameters] --> B[2. What-If<br/>Preview]
    B --> C{Changes<br/>OK?}
    C -->|Yes| D[3. Deploy]
    C -->|No| A
    D --> E[4. Verify]
    E --> F[5. Configure<br/>Fabric]

    style A fill:#e3f2fd
    style D fill:#e8f5e9
    style F fill:#fff3e0

1. Configure Parameters¶

# Copy and edit parameter file
cp infra/environments/dev/dev.bicepparam infra/environments/dev/my-config.bicepparam
code infra/environments/dev/my-config.bicepparam

2. Preview Changes (What-If)¶

az deployment sub what-if \
  --location eastus2 \
  --template-file infra/main.bicep \
  --parameters infra/environments/dev/my-config.bicepparam

3. Deploy¶

az deployment sub create \
  --location eastus2 \
  --template-file infra/main.bicep \
  --parameters infra/environments/dev/my-config.bicepparam \
  --name "fabric-poc-deploy"

4. Verify Deployment¶

# Check deployment status
az deployment sub show --name "fabric-poc-deploy" --query "properties.provisioningState"

# List created resources
az resource list --resource-group "rg-fabricpoc-dev" --output table

5. Configure Fabric Workspace¶

After infrastructure deployment, create your Fabric workspace:

1. Navigate to Microsoft Fabric
2. Create a new workspace
3. Assign it to the deployed capacity
4. Enable OneLake integration

💰 Cost Estimation¶

Monthly Estimates by SKU¶

💡 Tip: Use F2/F4 for development, scale to F64 for POC demos.

Cost Optimization¶

• ⏸️ Pause capacity when not in use (saves ~70%)
• 📊 Use auto-scale for variable workloads
• 🏷️ Tag resources for cost allocation
• 📅 Schedule capacity for business hours only

# Pause Fabric capacity (saves costs)
az fabric capacity suspend --resource-group "rg-fabricpoc-dev" --capacity-name "fc-fabricpoc-dev"

# Resume capacity
az fabric capacity resume --resource-group "rg-fabricpoc-dev" --capacity-name "fc-fabricpoc-dev"

🔐 Security¶

Security Features¶

Enable Private Endpoints (Production)¶

param enablePrivateEndpoints = true

This creates: - Virtual Network with subnets - Private endpoints for ADLS, Key Vault - Private DNS zones

🧹 Cleanup¶

Delete All Resources¶

# Delete resource group (removes all resources)
az group delete --name "rg-fabricpoc-dev" --yes --no-wait

# Verify deletion
az group show --name "rg-fabricpoc-dev" 2>/dev/null || echo "Resource group deleted"

Partial Cleanup (Keep Data)¶

# Delete only Fabric capacity (keep storage)
az fabric capacity delete --resource-group "rg-fabricpoc-dev" --capacity-name "fc-fabricpoc-dev"

❓ Troubleshooting¶

Common Issues¶

# Check available regions
az provider show --namespace Microsoft.Fabric --query "resourceTypes[?resourceType=='capacities'].locations" -o tsv

# Check current roles
az role assignment list --assignee $(az ad signed-in-user show --query id -o tsv) --output table

az bicep upgrade
az bicep build --file infra/main.bicep

📚 Related Documentation¶

⬆️ Back to top | 🏠 Home