Azure Bicep
Microsoft's declarative Infrastructure-as-Code language for Azure — compiles to ARM JSON but significantly more readable than ARM templates.
Azure Bicep in practice
Azure Bicep is Microsoft's declarative language for Azure infrastructure. The code is transpiled to ARM JSON before deployment, and the result goes to the same Resource Manager that serves the portal. That yields the main practical advantage over Terraform: there is no separate state file to back up, lock and laboriously repair after drift — the actual state is Azure itself.
New resource types are usually available on the day they reach general availability. The limits of the underlying format are worth knowing: 4 megabytes of compressed template size, 800 resources, 256 parameters and 64 output values per deployment. Anyone outgrowing them splits the template into modules. Before rolling out, the what-if command shows the planned changes. Alendris describes Azure landing zones and project-specific building blocks in Bicep — modular, reusable and tested automatically through GitHub Actions.
How Alendris helps
From our projects
- Zero Trust Infrastructure from the Data Center to the Remote WorkplaceComplete modernization of server infrastructure, identity, and remote access into a consistent Zero Trust architecture — from hyperconverged storage to hardened server and client baselines to secure remote work without a single publicly reachable device.
- Replacement of Citrix environment with Azure Virtual DesktopFull migration of 8,000 Citrix users to a highly automated AVD target architecture.
- Development of an AI Platform based on Microsoft AzureSecure and scalable AI usage in the company is created through a central Enterprise Search that bundles information from systems such as SharePoint, ServiceNow, and SAP.
- Security Modernization with a Focus on Microsoft 365 & SOC ReadinessSustainable improvement of the security posture in the Microsoft ecosystem with a focus on identity protection, tenant hardening, and SOC readiness.
- Evolution of an Enterprise Monitoring Solution on AzureRedesign of the Azure Monitoring architecture with a Dedicated Azure Monitor Cluster, standardized DCR Rules, and complete Infrastructure as Code automation.
- Successful IT Carve-out of a Complete InfrastructureFull IT carve-out with structured decoupling, migration of central IT services, and a secure transition phase without unnecessary downtime.
- NIS2 Compliance Implementation for Critical InfrastructureHolistic implementation of NIS2 requirements: From gap analysis and technical implementation to audit readiness.
- AI-powered Automation with Azure AI Foundry & n8nComplete automation of document-based business processes through AI-supported workflows – from data extraction to decision support.