Deployment Scopes: MG, Subscription, RG
Deploy at management-group, subscription, and resource-group scopes.
What is it? (Simple Explanation)
Bicep is Azure Infrastructure as Code that compiles to ARM templates while remaining readable for teams. This lesson focuses on deployment scopes: mg, subscription, rg in real delivery.
Why do we need it?
- Avoid portal drift and inconsistent environments.
- Version infrastructure with code reviews.
- Enable repeatable deployments across stages.
- Integrate with CI/CD governance workflows.
How it works (Technical)
Bicep declares desired resource state and Azure Resource Manager orchestrates deployment with dependency resolution and idempotent updates.
Hands-on
targetScope = 'subscription'
resource rg 'Microsoft.Resources/resourceGroups@2024-03-01' = {
name: 'rg-app-dev'
location: 'eastus'
}- Author or update template for this lesson objective.
- Run build and validate commands.
- Run what-if preview before deploy.
- Deploy and verify resulting resources.
Debugging Scenario
Failure: Authorization errors happen when identity is scoped only at resource group.
- Check compile output first.
- Verify scope and permissions.
- Inspect deployment operations for failing resource.
- Use what-if to identify unintended changes.
Interview Questions
Beginner
It teaches practical Bicep usage with clear deployment reasoning.
Because Bicep is repeatable, auditable, and reviewable.
They make templates reusable per environment.
To catch structural issues early.
Check deployment operation details in Azure.
Intermediate
It standardizes repeatable Azure infrastructure delivery patterns.
When ownership or reuse boundaries emerge clearly.
Insufficient RBAC often causes runtime deployment failures.
Bicep provisions foundations consumed by AKS operations and release pipelines.
To review impact before mutating production resources.
Scenario-based
Compare parameters, RBAC, policy, and quota differences.
Enforce IaC-only changes with reviews and checks.
When multi-cloud consistency is a core requirement.
Validate, run what-if, require approvals, then deploy.
Explaining real failure triage and design tradeoffs clearly.
Real-world Usage
Enterprise teams deploy policy at higher scopes and workloads at resource-group scope.
Summary
This lesson strengthens your Bicep delivery capability from concept to production-safe implementation.