This is my blog. I am a proud father, husband and technology enthusiast for the longest time living and working in Dresden, Germany. Driven by my main tra...
Scenario Your Terraform apply just failed. Again. For the third time this week, and you're not even sure why. Was it the Azure DevOps provider timing out? That managed identity that existed yesterday but returns 404 today? Or just one of the 247 API calls in your 40-minute deployment hitting a rate limit? Most cloud platforms rely on multiple services running in integration to deliver value. Those…
Context By definition coding agents, or AI Agents in general are built from a combination of a large language model, a well-defined set of tools exposed using the Model Context Protocol as well as set of user- and system-defined prompts. Modern AI coding agents typically bundle LLMs, tools, and integrations into vertically integrated platforms, creating vendor lock-in risks for developers and…
ℹ️ Update 2025-08-27 : Container-Use has been updated to support Windows natively in version v0.4.0. As the post covers overall integration, I decided to keep the post online anyways. Context Model Context Protocol (MCP) implementations are becoming increasingly prevalent, enabling developers and systems to interact with multiple services using Large Language Models. For several months, Visual…
Context "The shadow of the enemy is spreading." — Gandalf (when the Istari mandated a corporate VPN client) When talking to developers in my organization, I often find myself recommending harmonizing developer environments using Dev Containers in Visual Studio Code . These are typically hosted by Docker Desktop, which integrates well with Windows Subsystem for Linux (WSL). Issues arise, however,…
Context Writing Terraform configurations or any other form of Infrastructure as Code with AI-Assistance lacks the comfort found in other software engineering domains for a simple reason: Cloud providers iterate at relentless speeds, requiring frequent updates to providers on a weekly basis. Backwards compatibility is often an afterthought. Since LLM-models are not updated in the same manner,…
Intro This is the second part in a series of two posts outlining alternatives when managing dependencies between different Infrastructure as Code (IaC) configurations. In this part, we'll be covering managing dependencies between two Terraform configurations using Pulumi ESC as central configuration service. Scenario In most Hub-Spoke-architectures, responsibilities for managing DNS zones and…
Intro This is the first part in a series of two posts outlining alternatives when managing dependencies between different Infrastructure as Code (IaC) configurations. First, we will outline a vision for configuration data management before diving into options for managing dependencies between Terraform configurations. The second part will cover a Proof of Concept implementation of a centralized…
The lovely thing about a personal blog almost nobody ever reads is that you can use it almost like a diary. So I can use this post for personal encouragement and as a reference point throughout this year to check on my own objectives. Context In my day job environment, we have been building a cloud platform based on Microsoft Azure for a group of approximately 60 engineers developing applications…
Summary Azure DevOps becomes exceptionally powerful when integrated with Microsoft Entra ID. However, one noticable challenge arises in the delay of updating group memberships within Azure DevOps as those updates are neither transparent nor of immediate effect. Waiting times get even more challenging when Azure DevOps permissions are used in conjunction with Privileged Identity Management. To…
Problem Statement In the recent past, there was a bug in the AzureRM Terraform Provider making it hard to manage Privileged Identity Management Assignments persistently. The bug is tracked as an Issue on GitHub and marked as solved using the latest provider (3.85.0). Unfortunately, testing has shown that all assignments need to be removed manually once to fix the issue. We decided to use…