Infrastructure as Code · CI/CD · Cloud Security

A small app with a serious Azure foundation.

This site is provisioned with Bicep, published through GitHub Actions, served by Azure Static Web Apps, and ready for a custom GruntCode domain.

Test Microsoft sign-in
Health check has not run yet.

Current architecture

Four moving parts, clearly separated

01

Bicep

Declares the resource group, Static Web App, names, tags, SKU, and outputs.

02

Azure Resource Manager

Evaluates the desired state and creates or updates the Azure resources.

03

GitHub Actions

Publishes the files in the app folder whenever the main branch changes.

04

Static Web Apps

Provides global hosting, HTTPS, custom domains, preview environments, and authentication.

Portfolio roadmap

Build outward in controlled layers

  1. Foundation: Bicep, tagging, naming, what-if, and repeatable deployment.
  2. Application: Managed Azure Functions API with a live health endpoint.
  3. Identity: Protect selected routes with Microsoft Entra ID.
  4. Data: Add a low-cost database and managed identity.
  5. Operations: Add monitoring, alerts, dashboards, and policy checks.