u/Dry_Monk4066

Hot take after watching a talk on Azure governance. I’ve done it before. Everyone does it “for speed”. But it always ended up messy for me...

Lately trying:

• PIM for temp access
• push changes via pipelines only

Still not perfect though.

How do you handle it?
Lock prod down fully or allow some access?

This was the talk that triggered the thought: https://www.youtube.com/live/nUKqNJOj2vs?si=8g2jaUR77ISVI_bD

If you’ve got anything you’re stuck on or just want a second opinion, feel free to join and ask live.