You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/deployment-environments/concept-environments-key-concepts.md
+10-2Lines changed: 10 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,7 +45,7 @@ An environment is a collection of Azure resources on which your application is d
45
45
46
46
## Identities
47
47
48
-
in Azure Deployment Environments, you use [managed identities](../active-directory/managed-identities-azure-resources/overview.md) to provide elevation-of-privilege capabilities. Identities can help you provide self-serve capabilities to your development teams without giving them access to the target subscriptions in which the Azure resources are created.
48
+
In Azure Deployment Environments, you use [managed identities](../active-directory/managed-identities-azure-resources/overview.md) to provide elevation-of-privilege capabilities. Identities can help you provide self-serve capabilities to your development teams without giving them access to the target subscriptions in which the Azure resources are created.
49
49
50
50
The managed identity that's attached to the dev center needs to be granted appropriate access to connect to the catalogs. You should grant Contributor and User Access Administrator access to the target deployment subscriptions that are configured at the project level. The Azure Deployment Environments service uses the specific managed identity to perform the deployment on behalf of the developer.
51
51
@@ -64,7 +64,7 @@ Project environment types allow you to automatically apply the right set of poli
64
64
65
65
## Catalogs
66
66
67
-
Catalogs help you provide a set of curated IaC templates for your development teams to create environments. Microsoft provides a [*quick start* catalog](https://github.com/microsoft/devcenter-catalog) that contains a set of sample environment defintions. You can attach the quick start catalog to a dev center to make these environment defintions available to all the projects associated with the dev center. You can modify the sample environment definitions to suit your needs.
67
+
Catalogs help you provide a set of curated IaC templates for your development teams to create environments. Microsoft provides a [*quick start* catalog](https://github.com/microsoft/devcenter-catalog) that contains a set of sample environment definitions. You can attach the quick start catalog to a dev center to make these environment definitions available to all the projects associated with the dev center. You can modify the sample environment definitions to suit your needs.
68
68
69
69
Alternately, you can attach your own catalog. You can attach either a [GitHub repository](https://docs.github.com/repositories/creating-and-managing-repositories/about-repositories) or an [Azure DevOps Services repository](/azure/devops/repos/get-started/what-is-repos) as a catalog.
70
70
@@ -83,6 +83,14 @@ An environment definition is a combination of an IaC template and an environment
83
83
84
84
To learn about the structure of an ARM template, the sections of a template, and the properties that are available in those sections, see [Understand the structure and syntax of Azure Resource Manager templates](../azure-resource-manager/templates/syntax.md).
85
85
86
+
## Built-in roles
87
+
88
+
Azure Deployment Environments supports three [built-in roles](../role-based-access-control/built-in-roles.md):
89
+
90
+
-**Dev Center Project Admin**: Creates environments and manages the environment types for a project.
91
+
-**Deployment Environments User**: Creates environments based on appropriate access.
92
+
-**Deployment Environments Reader**: Reads environments that other users created.
93
+
86
94
## Resources shared with Microsoft Dev Box
87
95
88
96
Azure Deployment Environments and Microsoft Dev Box are complementary services that share certain architectural components. Dev centers and projects are common to both services, and they help organize resources in an enterprise. You can configure projects for Deployment Environments and projects for Dev Box resources in the same dev center.
description: Enable developer teams to spin up infrastructure for deploying apps with project-based templates, while adding governance for Azure resource types, security, and cost.
4
+
description: Enable developer teams to spin up infrastructure for deploying apps with templates, adding governance for Azure resource types, security, and cost.
5
5
ms.service: deployment-environments
6
6
ms.custom: build-2023
7
7
ms.topic: overview
8
8
ms.author: rosemalcolm
9
9
author: RoseHJM
10
-
ms.date: 04/25/2023
10
+
ms.date: 03/28/2024
11
+
12
+
#customer intent: As a customer, I want to understand to purpose and capabilities of Azure Deployment Environments so that I can determine if the service will benefit my developers.
11
13
---
12
14
13
15
# What is Azure Deployment Environments?
14
16
15
17
Azure Deployment Environments empowers development teams to quickly and easily spin up app infrastructure with project-based templates that establish consistency and best practices while maximizing security. This on-demand access to secure environments accelerates the stages of the software development lifecycle in a compliant and cost-efficient way.
16
18
17
-
A deployment environment is a preconfigured collection of Azure resources deployed in predefined subscriptions. Azure governance is applied to those subscriptions based on the type of environment, such as sandbox, testing, staging, or production.
19
+
A [*deployment environment*](./concept-environments-key-concepts.md#environments) is a collection of Azure infrastructure resources defined in a template called an [*environment definition*](./concept-environments-key-concepts.md#environment-definitions). Developers can deploy infrastructure defined in the templates in subscriptions where they have access, and build their applications on the infrastructure. For example, you can define a deployment environment that includes a web app, a database, and a storage account. Your web developer can begin coding the web app without worrying about the underlying infrastructure.
18
20
19
-
:::image type="content" source="./media/overview-what-is-azure-deployment-environments/azure-deployment-environments-scenarios-sml.png" lightbox="./media/overview-what-is-azure-deployment-environments/azure-deployment-environments-scenarios.png" alt-text="Diagram that shows the Azure Deployment Environments scenario flow.":::
21
+
Platform engineers can create and manage environment definitions. To specify which environment definitions are available to developers, platform engineers can associate environment definitions with projects, and assign permissions to developers. They can also apply Azure governance based on the type of environment, such as sandbox, testing, staging, or production.
20
22
21
-
With Azure Deployment Environments, your platform engineer can enforce enterprise security policies and provide a curated set of predefined infrastructure as code (IaC) templates.
23
+
The following diagram shows an overview of Azure Deployment Environments capabilities. Platform engineers define infrastructure templates and configure subscriptions, identity, and permissions. Developers create environments based on the templates, and build and deploy applications on the infrastructure. Environments can support different scenarios, like on-demand environments, sandbox environments for testing, and CI/CD pipelines for continuous integration and continuous deployment.
22
24
23
-
>[!NOTE]
24
-
> Azure Deployment Environments currently supports only Azure Resource Manager (ARM) templates.
25
+
:::image type="content" source="./media/overview-what-is-azure-deployment-environments/azure-deployment-environments-scenarios-sml.png" lightbox="./media/overview-what-is-azure-deployment-environments/azure-deployment-environments-scenarios.png" alt-text="Diagram that shows the Azure Deployment Environments scenario flow.":::
26
+
27
+
Azure Deployment Environments currently supports only Azure Resource Manager (ARM) templates.
25
28
26
29
You can [learn more about the key concepts for Azure Deployment Environments](./concept-environments-key-concepts.md).
27
30
28
31
## Usage scenarios
29
32
30
-
Azure Deployment Environments enables usage [scenarios](./concept-environments-scenarios.md) for both DevOps teams and developers. Common scenarios include:
31
-
32
-
- Quickly create on-demand Azure environments by using reusable IaC templates.
33
-
- Create [sandbox environments](concept-environments-scenarios.md#sandbox-environments-for-investigations) to test your code.
34
-
- Preconfigure various types of environments and seamlessly integrate with your continuous integration and continuous delivery (CI/CD) pipeline.
35
-
- Create preconfigured environments for trainings and demos.
36
-
37
-
### Developer scenarios
38
-
39
-
Developers have the following self-service experience when working with [environments](./concept-environments-key-concepts.md#environments).
40
-
41
-
- Deploy a preconfigured environment for any stage of the development cycle.
42
-
- Spin up a sandbox environment to explore Azure.
43
-
- Create platform as a service (PaaS) and infrastructure as a service (IaaS) environments quickly and easily by following a few simple steps.
44
-
- Deploy environments right from where they work.
45
-
46
-
Developers create and manage environments for Azure Deployment Environments through the [developer portal](./quickstart-create-access-environments.md), with the [Azure CLI](./how-to-create-access-environments.md) or with the [Azure Developer CLI](./how-to-create-environment-with-azure-developer.md).
33
+
Common [scenarios](./concept-environments-scenarios.md) for Azure Deployment Environments include:
47
34
48
35
### Platform engineering scenarios
49
36
50
-
Azure Deployment Environments helps your platform engineer apply the right set of policies and settings on various types of environments, control the resource configuration that developers can create, and track environments across projects. They perform the following tasks:
37
+
Azure Deployment Environments helps platform engineers apply the right set of policies and settings on various types of environments, control the resource configuration that developers can create, and track environments across projects. They perform the following tasks:
51
38
52
39
- Provide a project-based, curated set of reusable IaC templates.
53
40
- Define specific Azure deployment configurations per project and per environment type.
54
41
- Provide a self-service experience without giving control over subscriptions.
55
42
- Track costs and ensure compliance with enterprise governance policies.
56
43
57
-
Azure Deployment Environments supports three [built-in roles](../role-based-access-control/built-in-roles.md):
44
+
### Developer scenarios
58
45
59
-
-**Dev Center Project Admin**: Creates environments and manages the environment types for a project.
60
-
-**Deployment Environments User**: Creates environments based on appropriate access.
61
-
-**Deployment Environments Reader**: Reads environments that other users created.
46
+
Developers can create environments whenever they need them, and develop their applications on the infrastructure. They can use Azure Deployment Environments to do the following tasks:
62
47
48
+
- Deploy a preconfigured environment for any stage of the development cycle.
49
+
- Spin up a sandbox environment to explore Azure.
50
+
- Create and manage environments through the [developer portal](./quickstart-create-access-environments.md), with the [Azure CLI](./how-to-create-access-environments.md) or with the [Azure Developer CLI](./how-to-create-environment-with-azure-developer.md).
63
51
64
52
## Benefits
65
53
@@ -72,7 +60,7 @@ Capture and share IaC templates in source control within your team or organizati
72
60
Platform engineering teams can curate environment definitions to enforce enterprise security policies and map projects to Azure subscriptions, identities, and permissions by environment types.
73
61
74
62
-**Project-based configurations**:
75
-
Create and organize environment definitions by the types of applications that development teams are working on, rather than using an unorganized list of templates or a traditional IaC setup.
63
+
Organize environment definitions by the type of application that development teams are working on, rather than using an unorganized list of templates or a traditional IaC setup.
76
64
77
65
-**Worry-free self-service**:
78
66
Enable your development teams to quickly and easily create app infrastructure (PaaS, serverless, and more) resources by using a set of preconfigured templates. You can also track costs on these resources to stay within your budget.
@@ -86,11 +74,9 @@ Use APIs to provision environments directly from your preferred CI tool, integra
86
74
87
75
When configuring Deployment Environments, you might see Dev Box resources and components. You might even see informational messages regarding Dev Box features. If you're not configuring any Dev Box features, you can safely ignore these messages.
88
76
89
-
## Next steps
90
-
Start using Azure Deployment Environments:
77
+
## Related content
91
78
92
-
-[Key concepts for Azure Deployment Environments](./concept-environments-key-concepts.md)
0 commit comments